From a4bd29dd066df072b4316aea6eabd9f31c1a83f7 Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 15 Mar 2023 11:22:01 +0000 Subject: [PATCH] gcloud: Wed Mar 15 11:22:01 UTC 2023 --- gcloud/_version | 10 +- gcloud/alloydb/instances/create | 4 +- gcloud/alloydb/instances/update | 4 +- gcloud/alpha/alloydb/instances/create | 4 +- gcloud/alpha/alloydb/instances/update | 4 +- .../enterprise-certificate-config/create/help | 44 ++++ .../create/linux | 72 ++++++ .../create/macos | 59 +++++ .../create/windows | 65 ++++++ .../auth/enterprise-certificate-config/help | 38 ++++ gcloud/alpha/auth/help | 3 + gcloud/alpha/auth/login | 38 ++-- .../alpha/beyondcorp/app/connections/create | 2 +- .../beyondcorp/app/legacy/connections/create | 2 +- .../bms/instances/disable-serial-console | 4 +- .../alpha/bms/instances/enable-serial-console | 4 +- gcloud/alpha/compute/commitments/update | 18 +- gcloud/alpha/compute/images/import | 2 +- .../alpha/compute/instance-templates/create | 23 +- .../instance-templates/create-with-container | 16 +- gcloud/alpha/compute/instances/bulk/create | 7 + gcloud/alpha/compute/instances/create | 16 +- .../compute/instances/create-with-container | 16 +- gcloud/alpha/compute/instances/import | 2 +- .../instances/network-interfaces/update | 15 +- gcloud/alpha/compute/machine-images/import | 2 +- gcloud/alpha/compute/networks/subnets/update | 10 +- gcloud/alpha/compute/os-config/os-upgrade | 8 +- .../compute/public-advertised-prefixes/update | 4 +- gcloud/alpha/compute/queued-resources/create | 7 + .../resource-policies/create/group-placement | 2 +- gcloud/alpha/compute/routers/add-bgp-peer | 2 +- gcloud/alpha/compute/routers/create | 2 +- gcloud/alpha/compute/routers/update | 6 +- gcloud/alpha/compute/routers/update-bgp-peer | 6 +- .../rules/add-preconfig-waf-exclusion | 4 +- .../compute/security-policies/rules/create | 4 +- .../rules/remove-preconfig-waf-exclusion | 5 +- .../compute/security-policies/rules/update | 4 +- gcloud/alpha/compute/security-policies/update | 5 +- gcloud/alpha/compute/vpn-gateways/create | 11 +- gcloud/alpha/container/azure/clusters/update | 7 +- .../bare-metal/admin-clusters/update | 8 + .../alpha/container/vmware/node-pools/delete | 6 +- gcloud/alpha/dataplex/content/create | 6 +- gcloud/alpha/dataplex/content/update | 6 +- gcloud/alpha/dns/record-sets/create | 4 +- gcloud/alpha/dns/record-sets/update | 4 +- .../domains/registrations/configure/contacts | 4 +- gcloud/alpha/domains/registrations/transfer | 2 +- gcloud/alpha/functions/deploy | 29 ++- gcloud/alpha/healthcare/datasets/deidentify | 2 +- .../alpha/healthcare/dicom-stores/deidentify | 2 +- gcloud/alpha/memcache/instances/create | 2 +- .../alpha/metastore/services/imports/create | 4 +- .../internal-ranges/create | 2 +- gcloud/alpha/recaptcha/keys/create | 9 +- .../alpha/resource-manager/tags/keys/create | 4 +- gcloud/alpha/run/jobs/add-iam-policy-binding | 54 +---- .../alpha/run/jobs/remove-iam-policy-binding | 58 +---- .../alpha/run/services/add-iam-policy-binding | 52 +---- .../run/services/remove-iam-policy-binding | 56 +---- gcloud/alpha/scc/custom-modules/sha/create | 12 +- gcloud/alpha/scc/custom-modules/sha/test | 18 +- gcloud/alpha/scc/custom-modules/sha/update | 18 +- gcloud/alpha/services/api-keys/undelete | 11 +- gcloud/alpha/workstations/configs/help | 3 + gcloud/alpha/workstations/configs/update | 214 ++++++++++++++++++ gcloud/alpha/workstations/help | 3 + gcloud/alpha/workstations/ssh | 100 ++++++++ .../enterprise-certificate-config/create/help | 39 ++++ .../create/linux | 69 ++++++ .../create/macos | 55 +++++ .../create/windows | 62 +++++ .../auth/enterprise-certificate-config/help | 34 +++ gcloud/auth/help | 3 + gcloud/auth/login | 37 ++- gcloud/beta/alloydb/instances/create | 4 +- gcloud/beta/alloydb/instances/update | 4 +- .../enterprise-certificate-config/create/help | 40 ++++ .../create/linux | 70 ++++++ .../create/macos | 56 +++++ .../create/windows | 63 ++++++ .../auth/enterprise-certificate-config/help | 35 +++ gcloud/beta/auth/help | 3 + gcloud/beta/auth/login | 38 ++-- gcloud/beta/beyondcorp/app/connections/create | 2 +- gcloud/beta/compute/commitments/update | 18 +- gcloud/beta/compute/images/import | 2 +- gcloud/beta/compute/instance-templates/create | 17 +- gcloud/beta/compute/instances/create | 17 +- gcloud/beta/compute/instances/import | 2 +- .../instances/network-interfaces/update | 18 +- gcloud/beta/compute/machine-images/import | 2 +- gcloud/beta/compute/networks/subnets/update | 4 +- gcloud/beta/compute/os-config/os-upgrade | 8 +- .../compute/public-advertised-prefixes/update | 4 +- .../resource-policies/create/group-placement | 6 +- gcloud/beta/compute/routers/add-bgp-peer | 2 +- gcloud/beta/compute/routers/create | 2 +- gcloud/beta/compute/routers/update | 6 +- gcloud/beta/compute/routers/update-bgp-peer | 6 +- .../rules/add-preconfig-waf-exclusion | 6 +- .../compute/security-policies/rules/create | 4 +- .../rules/remove-preconfig-waf-exclusion | 7 +- .../compute/security-policies/rules/update | 4 +- gcloud/beta/compute/security-policies/update | 2 +- gcloud/beta/dns/record-sets/create | 4 +- gcloud/beta/dns/record-sets/update | 4 +- .../domains/registrations/configure/contacts | 4 +- gcloud/beta/domains/registrations/transfer | 2 +- gcloud/beta/functions/deploy | 29 ++- gcloud/beta/healthcare/datasets/deidentify | 2 +- .../beta/healthcare/dicom-stores/deidentify | 2 +- gcloud/beta/memcache/instances/create | 2 +- gcloud/beta/metastore/services/imports/create | 4 +- gcloud/beta/resource-manager/tags/keys/create | 4 +- gcloud/beta/run/jobs/add-iam-policy-binding | 54 +---- .../beta/run/jobs/remove-iam-policy-binding | 58 +---- .../beta/run/services/add-iam-policy-binding | 52 +---- .../run/services/remove-iam-policy-binding | 56 +---- gcloud/beta/services/api-keys/undelete | 10 +- gcloud/beta/workstations/configs/help | 3 + gcloud/beta/workstations/configs/update | 212 +++++++++++++++++ gcloud/beta/workstations/help | 3 + gcloud/beta/workstations/ssh | 98 ++++++++ gcloud/bms/instances/disable-serial-console | 66 ++++++ gcloud/bms/instances/enable-serial-console | 66 ++++++ gcloud/bms/instances/help | 6 + gcloud/compute/commitments/update | 18 +- gcloud/compute/images/import | 2 +- gcloud/compute/instance-templates/create | 17 +- gcloud/compute/instances/create | 24 +- gcloud/compute/instances/import | 2 +- .../instances/network-interfaces/update | 18 +- gcloud/compute/machine-images/import | 2 +- gcloud/compute/networks/subnets/update | 4 +- .../compute/public-advertised-prefixes/update | 4 +- gcloud/compute/routers/add-bgp-peer | 2 +- gcloud/compute/routers/create | 2 +- gcloud/compute/routers/update | 6 +- gcloud/compute/routers/update-bgp-peer | 6 +- .../rules/add-preconfig-waf-exclusion | 146 ++++++++++++ gcloud/compute/security-policies/rules/create | 4 +- gcloud/compute/security-policies/rules/help | 8 + .../rules/remove-preconfig-waf-exclusion | 164 ++++++++++++++ gcloud/compute/security-policies/rules/update | 4 +- gcloud/container/azure/clusters/update | 8 +- gcloud/dataplex/content/create | 6 +- gcloud/dataplex/content/update | 6 +- gcloud/dns/record-sets/create | 4 +- gcloud/dns/record-sets/update | 4 +- .../domains/registrations/configure/contacts | 4 +- gcloud/domains/registrations/transfer | 2 +- gcloud/functions/deploy | 29 ++- gcloud/healthcare/datasets/deidentify | 2 +- gcloud/healthcare/dicom-stores/deidentify | 2 +- gcloud/memcache/instances/create | 2 +- .../internal-ranges/create | 2 +- gcloud/recaptcha/keys/create | 9 +- gcloud/resource-manager/tags/keys/create | 4 +- gcloud/run/services/add-iam-policy-binding | 52 +---- gcloud/run/services/remove-iam-policy-binding | 56 +---- gcloud/workflows/describe | 14 +- 164 files changed, 2541 insertions(+), 844 deletions(-) create mode 100644 gcloud/alpha/auth/enterprise-certificate-config/create/help create mode 100644 gcloud/alpha/auth/enterprise-certificate-config/create/linux create mode 100644 gcloud/alpha/auth/enterprise-certificate-config/create/macos create mode 100644 gcloud/alpha/auth/enterprise-certificate-config/create/windows create mode 100644 gcloud/alpha/auth/enterprise-certificate-config/help create mode 100644 gcloud/alpha/workstations/configs/update create mode 100644 gcloud/alpha/workstations/ssh create mode 100644 gcloud/auth/enterprise-certificate-config/create/help create mode 100644 gcloud/auth/enterprise-certificate-config/create/linux create mode 100644 gcloud/auth/enterprise-certificate-config/create/macos create mode 100644 gcloud/auth/enterprise-certificate-config/create/windows create mode 100644 gcloud/auth/enterprise-certificate-config/help create mode 100644 gcloud/beta/auth/enterprise-certificate-config/create/help create mode 100644 gcloud/beta/auth/enterprise-certificate-config/create/linux create mode 100644 gcloud/beta/auth/enterprise-certificate-config/create/macos create mode 100644 gcloud/beta/auth/enterprise-certificate-config/create/windows create mode 100644 gcloud/beta/auth/enterprise-certificate-config/help create mode 100644 gcloud/beta/workstations/configs/update create mode 100644 gcloud/beta/workstations/ssh create mode 100644 gcloud/bms/instances/disable-serial-console create mode 100644 gcloud/bms/instances/enable-serial-console create mode 100644 gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion create mode 100644 gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion diff --git a/gcloud/_version b/gcloud/_version index 574f3c71e..a40c9dd98 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 421.0.0 -alpha 2023.03.03 -beta 2023.03.03 -bq 2.0.87 +Google Cloud SDK 422.0.0 +alpha 2023.03.10 +beta 2023.03.10 +bq 2.0.88 bundled-python3-unix 3.9.16 -core 2023.03.03 +core 2023.03.10 gcloud-crc32c 1.0.0 gsutil 5.21 diff --git a/gcloud/alloydb/instances/create b/gcloud/alloydb/instances/create index 41cdf9ed0..7f6f2cd7c 100644 --- a/gcloud/alloydb/instances/create +++ b/gcloud/alloydb/instances/create @@ -64,8 +64,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/alloydb/instances/update b/gcloud/alloydb/instances/update index 2bc81a857..09aaabe32 100644 --- a/gcloud/alloydb/instances/update +++ b/gcloud/alloydb/instances/update @@ -40,8 +40,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/alpha/alloydb/instances/create b/gcloud/alpha/alloydb/instances/create index 6bc1ff899..d2f4276c3 100644 --- a/gcloud/alpha/alloydb/instances/create +++ b/gcloud/alpha/alloydb/instances/create @@ -65,8 +65,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/alpha/alloydb/instances/update b/gcloud/alpha/alloydb/instances/update index 00f7f86a5..1a1ed8a26 100644 --- a/gcloud/alpha/alloydb/instances/update +++ b/gcloud/alpha/alloydb/instances/update @@ -40,8 +40,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/alpha/auth/enterprise-certificate-config/create/help b/gcloud/alpha/auth/enterprise-certificate-config/create/help new file mode 100644 index 000000000..b95daaf6c --- /dev/null +++ b/gcloud/alpha/auth/enterprise-certificate-config/create/help @@ -0,0 +1,44 @@ +NAME + gcloud alpha auth enterprise-certificate-config create - create enterprise + certificate configurations + +SYNOPSIS + gcloud alpha auth enterprise-certificate-config create COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) The gcloud alpha auth enterprise-certificate-config create group + lets you create enterprise certificate configurations. This configuration + will be used by gcloud to communicate with the + enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + linux + (ALPHA) Create an enterprise-certificate configuration file for Linux. + + macos + (ALPHA) Create an enterprise-certificate configuration file for MacOS. + + windows + (ALPHA) Create an enterprise-certificate configuration file for + Windows. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth enterprise-certificate-config create + + $ gcloud beta auth enterprise-certificate-config create + diff --git a/gcloud/alpha/auth/enterprise-certificate-config/create/linux b/gcloud/alpha/auth/enterprise-certificate-config/create/linux new file mode 100644 index 000000000..fce7ea97f --- /dev/null +++ b/gcloud/alpha/auth/enterprise-certificate-config/create/linux @@ -0,0 +1,72 @@ +NAME + gcloud alpha auth enterprise-certificate-config create linux - create an + enterprise-certificate configuration file for Linux + +SYNOPSIS + gcloud alpha auth enterprise-certificate-config create linux --label=LABEL + --module=MODULE --slot=SLOT [--ecp=ECP] [--ecp-client=ECP_CLIENT] + [--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD] + [--user-pin=USER_PIN] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud alpha auth enterprise-certificate-config create linux \ + --module=$PATH_TO_PKCS11_MODULE --slot=$PKCS11_SLOT_ID \ + --label=$PKCS11_OBJECT_LABEL --user-pin=$PKCS11_USER_PIN + +REQUIRED FLAGS + --label=LABEL + The PKCS #11 label for the target credentials. The certificate, public + key, and private key MUST have the same label. + enterprise-certificate-proxy will use all three objects. + + --module=MODULE + The full file path to the PKCS #11 module. + + --slot=SLOT + The PKCS #11 slot containing the target credentials. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + + --user-pin=USER_PIN + The user pin used to login to the PKCS #11 module. If there is no user + pin leave this field empty. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth enterprise-certificate-config create linux + + $ gcloud beta auth enterprise-certificate-config create linux + diff --git a/gcloud/alpha/auth/enterprise-certificate-config/create/macos b/gcloud/alpha/auth/enterprise-certificate-config/create/macos new file mode 100644 index 000000000..b32b00251 --- /dev/null +++ b/gcloud/alpha/auth/enterprise-certificate-config/create/macos @@ -0,0 +1,59 @@ +NAME + gcloud alpha auth enterprise-certificate-config create macos - create an + enterprise-certificate configuration file for MacOS + +SYNOPSIS + gcloud alpha auth enterprise-certificate-config create macos + --issuer=ISSUER [--ecp=ECP] [--ecp-client=ECP_CLIENT] + [--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud alpha auth enterprise-certificate-config create macos \ + --issuer=$CERT_ISSUER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth enterprise-certificate-config create macos + + $ gcloud beta auth enterprise-certificate-config create macos + diff --git a/gcloud/alpha/auth/enterprise-certificate-config/create/windows b/gcloud/alpha/auth/enterprise-certificate-config/create/windows new file mode 100644 index 000000000..2309266c7 --- /dev/null +++ b/gcloud/alpha/auth/enterprise-certificate-config/create/windows @@ -0,0 +1,65 @@ +NAME + gcloud alpha auth enterprise-certificate-config create windows - create an + enterprise-certificate configuration file for Windows + +SYNOPSIS + gcloud alpha auth enterprise-certificate-config create windows + --issuer=ISSUER --provider=PROVIDER --store=STORE [--ecp=ECP] + [--ecp-client=ECP_CLIENT] [--output-file=OUTPUT_FILE] + [--tls-offload=TLS_OFFLOAD] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud alpha auth enterprise-certificate-config create windows \ + --issuer=$CERT_ISSUER --store=$STORE --provider=$PROVIDER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + + --provider=PROVIDER + The Windows secure store provider. + + --store=STORE + The Windows secure store. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth enterprise-certificate-config create windows + + $ gcloud beta auth enterprise-certificate-config create windows + diff --git a/gcloud/alpha/auth/enterprise-certificate-config/help b/gcloud/alpha/auth/enterprise-certificate-config/help new file mode 100644 index 000000000..e990498b0 --- /dev/null +++ b/gcloud/alpha/auth/enterprise-certificate-config/help @@ -0,0 +1,38 @@ +NAME + gcloud alpha auth enterprise-certificate-config - manage enterprise + certificate configurations + +SYNOPSIS + gcloud alpha auth enterprise-certificate-config GROUP + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Currently only create is implemented. + + The gcloud alpha auth enterprise-certificate-config group lets you create + enterprise certificate configurations. This configuration will be used by + gcloud to communicate with the enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + create + (ALPHA) Create enterprise certificate configurations. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth enterprise-certificate-config + + $ gcloud beta auth enterprise-certificate-config + diff --git a/gcloud/alpha/auth/help b/gcloud/alpha/auth/help index 291679cf5..a5780a8c5 100644 --- a/gcloud/alpha/auth/help +++ b/gcloud/alpha/auth/help @@ -52,6 +52,9 @@ GROUPS application-default (ALPHA) Manage your active Application Default Credentials. + enterprise-certificate-config + (ALPHA) Manage enterprise certificate configurations. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/auth/login b/gcloud/alpha/auth/login index 181294f18..14784c160 100644 --- a/gcloud/alpha/auth/login +++ b/gcloud/alpha/auth/login @@ -26,16 +26,23 @@ DESCRIPTION gcloud auth activate-service-account with the corresponding JSON key file. In addition to Google user credentials, authorization using workload - identity federation or service account keys is also supported. + identity federation, workforce identity federation, or service account keys + is also supported. + + For authorization with external accounts or service accounts, the + --cred-file flag must be specified with the path to the workload identity + credential configuration file or service account key file (JSON). + + Login with workload and workforce identity federation is also supported in + both gsutil and bq. This command is the recommended way of using external + accounts. - For authorization with external accounts (workload identity pools) or - service accounts, the --cred-file flag must be specified with the path to - the workload identity credential configuration file or service account key - file (JSON). Login with workload identity federation is also supported in - gsutil and this command is the recommended way of using external accounts. For more information on workload identity federation, see: https://cloud.google.com/iam/docs/workload-identity-federation. + For more information on workforce identity federation, see: + https://cloud.google.com/iam/docs/workforce-identity-federation. + For more information on authorization and credential types, see: https://cloud.google.com/sdk/docs/authorizing. @@ -44,10 +51,15 @@ EXAMPLES $ gcloud alpha auth login - To obtain access credentials using workload identity federation, run: + To obtain access credentials using workload or workforce identity + federation, run: - $ gcloud alpha auth login \ - --cred-file=/path/to/workload/configuration/file + $ gcloud alpha auth login --cred-file=/path/to/configuration/file + + To obtain access credentials using a browser-based sign-in flow with + workforce identity federation, run: + + $ gcloud alpha auth login --login-config=/path/to/configuration/file POSITIONAL ARGUMENTS [ACCOUNT] @@ -125,10 +137,10 @@ FLAGS Enabled by default, use --no-launch-browser to disable. --login-config=LOGIN_CONFIG - Path to the login configuration file (workforce pool, generated by the - Cloud Console or gcloud iam workforce-pools create-login-config). - Overrides the default auth/login_config_file property value for this - command invocation. + Path to the workforce identity federation login configuration file + which can be generated using the gcloud iam workforce-pools + create-login-config command. Overrides the default + auth/login_config_file property value for this command invocation. --update-adc Write the obtained credentials to the well-known location for diff --git a/gcloud/alpha/beyondcorp/app/connections/create b/gcloud/alpha/beyondcorp/app/connections/create index 0df9eda8f..f4fdcc0f7 100644 --- a/gcloud/alpha/beyondcorp/app/connections/create +++ b/gcloud/alpha/beyondcorp/app/connections/create @@ -104,7 +104,7 @@ OPTIONAL FLAGS --type=TYPE; default="TCP_PROXY" The type of network connnectivity used by the connection. TYPE must be - (currently only one value is supported): + (only one value is supported): tcp TCP connection diff --git a/gcloud/alpha/beyondcorp/app/legacy/connections/create b/gcloud/alpha/beyondcorp/app/legacy/connections/create index 768b97afd..b141ce1a9 100644 --- a/gcloud/alpha/beyondcorp/app/legacy/connections/create +++ b/gcloud/alpha/beyondcorp/app/legacy/connections/create @@ -105,7 +105,7 @@ OPTIONAL FLAGS --type=TYPE; default="TCP_PROXY" The type of network connnectivity used by the connection. TYPE must be - (currently only one value is supported): + (only one value is supported): tcp TCP connection diff --git a/gcloud/alpha/bms/instances/disable-serial-console b/gcloud/alpha/bms/instances/disable-serial-console index a43cb253b..4840ddf42 100644 --- a/gcloud/alpha/bms/instances/disable-serial-console +++ b/gcloud/alpha/bms/instances/disable-serial-console @@ -64,5 +64,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms instances disable-serial-console diff --git a/gcloud/alpha/bms/instances/enable-serial-console b/gcloud/alpha/bms/instances/enable-serial-console index c3f704c40..c93faa5b5 100644 --- a/gcloud/alpha/bms/instances/enable-serial-console +++ b/gcloud/alpha/bms/instances/enable-serial-console @@ -64,5 +64,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms instances enable-serial-console diff --git a/gcloud/alpha/compute/commitments/update b/gcloud/alpha/compute/commitments/update index b21b7a38b..e687cc028 100644 --- a/gcloud/alpha/compute/commitments/update +++ b/gcloud/alpha/compute/commitments/update @@ -3,7 +3,7 @@ NAME SYNOPSIS gcloud alpha compute commitments update COMMITMENT [--auto-renew] - [--region=REGION] [GCLOUD_WIDE_FLAG ...] + [--plan=PLAN] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update Compute Engine commitments. @@ -15,6 +15,18 @@ EXAMPLES $ gcloud alpha compute commitments update commitment-1 \ --auto-renew --region=us-central1 + To disable auto renewal on a commitment called commitment-1 in the + us-central1 region, run: + + $ gcloud alpha compute commitments update commitment-1 \ + --no-auto-renew --region=us-central1 + + To upgrade the term of a commitment called commitment-1 from 12-month to + 36-month, in the us-central1 region, run: + + $ gcloud alpha compute commitments update commitment-1 \ + --plan=36-month --region=us-central1 + POSITIONAL ARGUMENTS COMMITMENT Name of the commitment to update. @@ -23,6 +35,10 @@ FLAGS --auto-renew Enable auto renewal for the commitment. + --plan=PLAN + Duration of the commitment. PLAN must be (only one value is supported): + 36-month. + --region=REGION Region of the commitment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/alpha/compute/images/import b/gcloud/alpha/compute/images/import index e2d033875..b761b4010 100644 --- a/gcloud/alpha/compute/images/import +++ b/gcloud/alpha/compute/images/import @@ -181,7 +181,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --log-location=LOG_LOCATION diff --git a/gcloud/alpha/compute/instance-templates/create b/gcloud/alpha/compute/instance-templates/create index 1953c7f3d..42d7d07c1 100644 --- a/gcloud/alpha/compute/instance-templates/create +++ b/gcloud/alpha/compute/instance-templates/create @@ -409,16 +409,16 @@ FLAGS --internal-ipv6-address=INTERNAL_IPV6_ADDRESS Assigns the given internal IPv6 address or range to the instance that - is created. The address must be the first IP address in the range or a - /96 IP address range. This option can be used only when creating a - single instance. + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH Optional field that indicates the prefix length of the internal IPv6 - address range, should be used together with --internal-ipv6-address. - Only /96 is supported and the default value is 96. If not set, the - prefix length from --internal-ipv6-address will be used or assigned a - default value of 96. + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. --ipv6-address=IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is @@ -428,7 +428,7 @@ FLAGS --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. @@ -638,6 +638,13 @@ FLAGS Specifies the Network Interface Controller (NIC) type for the interface. NIC_TYPE must be one of: GVNIC, VIRTIO_NET. + queue-count + Specifies the networking queue count for this interface. Both Rx + and Tx queues will be set to this number. If it's not specified, a + default queue count will be assigned. For Virtio-net, each + interface will get min(floor(#vCPU / #vNIC), 32) queues. For gVNIC, + each interface will get min(floor(#vCPU / #vNIC / 2), 16) qeueus. + stack-type Specifies whether IPv6 is enabled on the interface. STACK_TYPE must be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY. diff --git a/gcloud/alpha/compute/instance-templates/create-with-container b/gcloud/alpha/compute/instance-templates/create-with-container index 88123e4e6..2b670de30 100644 --- a/gcloud/alpha/compute/instance-templates/create-with-container +++ b/gcloud/alpha/compute/instance-templates/create-with-container @@ -408,16 +408,16 @@ FLAGS --internal-ipv6-address=INTERNAL_IPV6_ADDRESS Assigns the given internal IPv6 address or range to the instance that - is created. The address must be the first IP address in the range or a - /96 IP address range. This option can be used only when creating a - single instance. + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH Optional field that indicates the prefix length of the internal IPv6 - address range, should be used together with --internal-ipv6-address. - Only /96 is supported and the default value is 96. If not set, the - prefix length from --internal-ipv6-address will be used or assigned a - default value of 96. + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. --ipv6-address=IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is @@ -427,7 +427,7 @@ FLAGS --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/alpha/compute/instances/bulk/create b/gcloud/alpha/compute/instances/bulk/create index 852aeb089..b20f81c66 100644 --- a/gcloud/alpha/compute/instances/bulk/create +++ b/gcloud/alpha/compute/instances/bulk/create @@ -624,6 +624,13 @@ OPTIONAL FLAGS If specified the interface will have no external IP. If not specified instances will get ephemeral IPs. + queue-count + Specifies the networking queue count for this interface. Both Rx + and Tx queues will be set to this number. If it's not specified, a + default queue count will be assigned. For Virtio-net, each + interface will get min(floor(#vCPU / #vNIC), 32) queues. For gVNIC, + each interface will get min(floor(#vCPU / #vNIC / 2), 16) qeueus. + --network-performance-configs=[PROPERTY=VALUE,...] Configures network performance settings for the instance. If this flag is not specified, the instance will be created with its default network diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index de4075478..1c8038f68 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -505,16 +505,16 @@ FLAGS --internal-ipv6-address=INTERNAL_IPV6_ADDRESS Assigns the given internal IPv6 address or range to the instance that - is created. The address must be the first IP address in the range or a - /96 IP address range. This option can be used only when creating a - single instance. + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH Optional field that indicates the prefix length of the internal IPv6 - address range, should be used together with --internal-ipv6-address. - Only /96 is supported and the default value is 96. If not set, the - prefix length from --internal-ipv6-address will be used or assigned a - default value of 96. + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. --ipv6-address=IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is @@ -524,7 +524,7 @@ FLAGS --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/alpha/compute/instances/create-with-container b/gcloud/alpha/compute/instances/create-with-container index 3c279104e..99e2487b7 100644 --- a/gcloud/alpha/compute/instances/create-with-container +++ b/gcloud/alpha/compute/instances/create-with-container @@ -446,16 +446,16 @@ FLAGS --internal-ipv6-address=INTERNAL_IPV6_ADDRESS Assigns the given internal IPv6 address or range to the instance that - is created. The address must be the first IP address in the range or a - /96 IP address range. This option can be used only when creating a - single instance. + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH Optional field that indicates the prefix length of the internal IPv6 - address range, should be used together with --internal-ipv6-address. - Only /96 is supported and the default value is 96. If not set, the - prefix length from --internal-ipv6-address will be used or assigned a - default value of 96. + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. --ipv6-address=IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is @@ -465,7 +465,7 @@ FLAGS --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/alpha/compute/instances/import b/gcloud/alpha/compute/instances/import index 745ebf387..d4c328171 100644 --- a/gcloud/alpha/compute/instances/import +++ b/gcloud/alpha/compute/instances/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --hostname=HOSTNAME diff --git a/gcloud/alpha/compute/instances/network-interfaces/update b/gcloud/alpha/compute/instances/network-interfaces/update index 772c4e5c8..7d4e7f2e1 100644 --- a/gcloud/alpha/compute/instances/network-interfaces/update +++ b/gcloud/alpha/compute/instances/network-interfaces/update @@ -58,16 +58,17 @@ FLAGS --internal-ipv6-address=INTERNAL_IPV6_ADDRESS Assigns the given internal IPv6 address or range to an instance. The - address must be the first IP in the range or a IP range with /96. This - option can only be used on a dual stack instance network interface. + address must be the first IP address in the range or a /96 IP address + range. This option can only be used on a dual stack instance network + interface. --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH Optional field that indicates the prefix length of the internal IPv6 address range, should be used together with - --internal-ipv6-address=fd20::. Currently only /96 is supported and the - default value is 96. If not set, the prefix length from - --internal-ipv6-address=fd20::/96 will be used or assigned a default - value of 96. + --internal-ipv6-address=fd20::. Only /96 IP address range is supported + and the default value is 96. If not set, then either the prefix length + from --internal-ipv6-address=fd20::/96 will be used or the default + value of 96 will be assigned. --ipv6-address=IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address @@ -77,7 +78,7 @@ FLAGS --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/alpha/compute/machine-images/import b/gcloud/alpha/compute/machine-images/import index 268300e62..1afc57076 100644 --- a/gcloud/alpha/compute/machine-images/import +++ b/gcloud/alpha/compute/machine-images/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --labels=[KEY=VALUE,...] diff --git a/gcloud/alpha/compute/networks/subnets/update b/gcloud/alpha/compute/networks/subnets/update index c5e5dc754..e34e1e9e1 100644 --- a/gcloud/alpha/compute/networks/subnets/update +++ b/gcloud/alpha/compute/networks/subnets/update @@ -7,6 +7,7 @@ SYNOPSIS [--add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL, [...]] [--aggregation-interval=AGGREGATION_INTERVAL] [--drain-timeout=DRAIN_TIMEOUT; default="0s"] + [--external-ipv6-prefix=EXTERNAL_IPV6_PREFIX] [--flow-sampling=FLOW_SAMPLING] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL] [--logging-filter-expr=LOGGING_FILTER_EXPR] @@ -66,6 +67,11 @@ FLAGS availability of proxies for load balancing. The drain timeout is only applicable when the [--role=ACTIVE] flag is being used. + --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX + Set external IPv6 prefix to be allocated for this subnetwork. + + For example, --external-ipv6-prefix 2600:1901:0:0:0:0:0:0/64 + --flow-sampling=FLOW_SAMPLING Can only be specified if VPC Flow Logs for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC @@ -181,7 +187,7 @@ FLAGS --purpose=PURPOSE The purpose of the subnetwork is set to REGIONAL_MANAGED_PROXY to migrate from the INTERNAL_HTTPS_LOAD_BALANCER purpose. PURPOSE must - be (currently only one value is supported): + be (only one value is supported): REGIONAL_MANAGED_PROXY The proxy-only subnet for regional HTTP(S) load balancers. @@ -201,7 +207,7 @@ FLAGS This field is only valid when updating a reserved IP address range used for the purpose of Internal HTTP(S) Load Balancer. - ROLE must be (currently only one value is supported): + ROLE must be (only one value is supported): ACTIVE The ACTIVE subnet that is currently used. diff --git a/gcloud/alpha/compute/os-config/os-upgrade b/gcloud/alpha/compute/os-config/os-upgrade index 56182bc90..7aaf3157f 100644 --- a/gcloud/alpha/compute/os-config/os-upgrade +++ b/gcloud/alpha/compute/os-config/os-upgrade @@ -37,12 +37,12 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --source-os=SOURCE_OS - OS version of the source instance to upgrade. SOURCE_OS must be - (currently only one value is supported): windows-2008r2. + OS version of the source instance to upgrade. SOURCE_OS must be (only + one value is supported): windows-2008r2. --target-os=TARGET_OS - Version of the OS after upgrade. TARGET_OS must be (currently only one - value is supported): windows-2012r2. + Version of the OS after upgrade. TARGET_OS must be (only one value is + supported): windows-2012r2. OPTIONAL FLAGS --async diff --git a/gcloud/alpha/compute/public-advertised-prefixes/update b/gcloud/alpha/compute/public-advertised-prefixes/update index 23a9f2a0d..2c9aa9b7d 100644 --- a/gcloud/alpha/compute/public-advertised-prefixes/update +++ b/gcloud/alpha/compute/public-advertised-prefixes/update @@ -34,8 +34,8 @@ REQUIRED FLAGS Specify if the prefix will be announced. Default is false. --status=STATUS - The status of public advertised prefix. STATUS must be (currently - only one value is supported): ptr-configured. + The status of public advertised prefix. STATUS must be (only one + value is supported): ptr-configured. --withdraw-prefix Specify if the prefix will be withdrawn. Default is false. diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create index 017d87255..7816baa06 100644 --- a/gcloud/alpha/compute/queued-resources/create +++ b/gcloud/alpha/compute/queued-resources/create @@ -597,6 +597,13 @@ OPTIONAL FLAGS If specified the interface will have no external IP. If not specified instances will get ephemeral IPs. + queue-count + Specifies the networking queue count for this interface. Both Rx + and Tx queues will be set to this number. If it's not specified, a + default queue count will be assigned. For Virtio-net, each + interface will get min(floor(#vCPU / #vNIC), 32) queues. For gVNIC, + each interface will get min(floor(#vCPU / #vNIC / 2), 16) qeueus. + --network-performance-configs=[PROPERTY=VALUE,...] Configures network performance settings for the instance. If this flag is not specified, the instance will be created with its default network diff --git a/gcloud/alpha/compute/resource-policies/create/group-placement b/gcloud/alpha/compute/resource-policies/create/group-placement index ca4fb6350..f47b697c4 100644 --- a/gcloud/alpha/compute/resource-policies/create/group-placement +++ b/gcloud/alpha/compute/resource-policies/create/group-placement @@ -44,7 +44,7 @@ FLAGS An optional, textual description for the backend. --max-distance=MAX_DISTANCE - Specifies the number of max logical switches. + Specifies the number of max logical switches between VMs. --region=REGION Region of the resource policy to operate on. If not specified, you diff --git a/gcloud/alpha/compute/routers/add-bgp-peer b/gcloud/alpha/compute/routers/add-bgp-peer index 8e69b7385..16d853e1e 100644 --- a/gcloud/alpha/compute/routers/add-bgp-peer +++ b/gcloud/alpha/compute/routers/add-bgp-peer @@ -141,7 +141,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/alpha/compute/routers/create b/gcloud/alpha/compute/routers/create index e52a7cd53..1822fa953 100644 --- a/gcloud/alpha/compute/routers/create +++ b/gcloud/alpha/compute/routers/create @@ -90,7 +90,7 @@ OPTIONAL FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/alpha/compute/routers/update b/gcloud/alpha/compute/routers/update index f3b35e51f..6ada818d8 100644 --- a/gcloud/alpha/compute/routers/update +++ b/gcloud/alpha/compute/routers/update @@ -81,7 +81,7 @@ FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -102,7 +102,7 @@ FLAGS this router. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -123,7 +123,7 @@ FLAGS the current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/alpha/compute/routers/update-bgp-peer b/gcloud/alpha/compute/routers/update-bgp-peer index 77ab82dff..00deab55b 100644 --- a/gcloud/alpha/compute/routers/update-bgp-peer +++ b/gcloud/alpha/compute/routers/update-bgp-peer @@ -127,7 +127,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -148,7 +148,7 @@ OPTIONAL FLAGS this peer. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -169,7 +169,7 @@ OPTIONAL FLAGS current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion index 5eb6dfb63..1c2311d57 100644 --- a/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion +++ b/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -139,7 +139,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud compute security-policies rules add-preconfig-waf-exclusion $ gcloud beta compute security-policies rules \ add-preconfig-waf-exclusion diff --git a/gcloud/alpha/compute/security-policies/rules/create b/gcloud/alpha/compute/security-policies/rules/create index 2c6b4db3b..336c11a8a 100644 --- a/gcloud/alpha/compute/security-policies/rules/create +++ b/gcloud/alpha/compute/security-policies/rules/create @@ -114,8 +114,8 @@ OPTIONAL FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion index e643f0d6e..0cd908927 100644 --- a/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion +++ b/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -157,7 +157,10 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion $ gcloud beta compute security-policies rules \ remove-preconfig-waf-exclusion diff --git a/gcloud/alpha/compute/security-policies/rules/update b/gcloud/alpha/compute/security-policies/rules/update index a76d04800..74a5fe14d 100644 --- a/gcloud/alpha/compute/security-policies/rules/update +++ b/gcloud/alpha/compute/security-policies/rules/update @@ -102,8 +102,8 @@ FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/alpha/compute/security-policies/update b/gcloud/alpha/compute/security-policies/update index 95da93598..7e440f47c 100644 --- a/gcloud/alpha/compute/security-policies/update +++ b/gcloud/alpha/compute/security-policies/update @@ -35,7 +35,8 @@ POSITIONAL ARGUMENTS FLAGS --ddos-protection=DDOS_PROTECTION The DDoS protection level for network load balancing and instances with - external IPs. DDOS_PROTECTION must be one of: STANDARD, ADVANCED. + external IPs. DDOS_PROTECTION must be one of: STANDARD, ADVANCED, + ADVANCED_PREVIEW. --description=DESCRIPTION An optional, textual description for the security policy. @@ -84,7 +85,7 @@ FLAGS --network-ddos-protection=NETWORK_DDOS_PROTECTION The DDoS protection level for network load balancing and instances with external IPs. NETWORK_DDOS_PROTECTION must be one of: STANDARD, - ADVANCED. + ADVANCED, ADVANCED_PREVIEW. --recaptcha-redirect-site-key=RECAPTCHA_REDIRECT_SITE_KEY The reCAPTCHA site key to be used for rules using the redirect action diff --git a/gcloud/alpha/compute/vpn-gateways/create b/gcloud/alpha/compute/vpn-gateways/create index e4018f784..35a8e1d21 100644 --- a/gcloud/alpha/compute/vpn-gateways/create +++ b/gcloud/alpha/compute/vpn-gateways/create @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha compute vpn-gateways create NAME --network=NETWORK - [--description=DESCRIPTION] + [--description=DESCRIPTION] [--gateway-ip-version=GATEWAY_IP_VERSION] [--interconnect-attachments=[INTERCONNECT_ATTACHMENTS,...]] [--region=REGION] [--stack-type=STACK_TYPE] [GCLOUD_WIDE_FLAG ...] @@ -36,6 +36,15 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the VPN gateway. + --gateway-ip-version=GATEWAY_IP_VERSION + The IP family of the gateway IPs for the HA-VPN gateway interfaces. If + not specified, IPV4 will be used. GATEWAY_IP_VERSION must be one of: + + IPV4 + Every HA-VPN gateway interface is configured with an IPv4 address. + IPV6 + Every HA-VPN gateway interface is configured with an IPv6 address. + --interconnect-attachments=[INTERCONNECT_ATTACHMENTS,...] Names of interconnect attachments (VLAN attachments) associated with the VPN gateway interfaces. You must specify this field when using a diff --git a/gcloud/alpha/container/azure/clusters/update b/gcloud/alpha/container/azure/clusters/update index 4e51404ec..82d3fa410 100644 --- a/gcloud/alpha/container/azure/clusters/update +++ b/gcloud/alpha/container/azure/clusters/update @@ -11,7 +11,7 @@ SYNOPSIS [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] [--clear-description | --description=DESCRIPTION] [--client=CLIENT | --azure-application-id=AZURE_APPLICATION_ID - --azure-tenant-id=AZURE_TENANT_ID] + --azure-tenant-id=AZURE_TENANT_ID --clear-client] [--disable-managed-prometheus | --enable-managed-prometheus] [GCLOUD_WIDE_FLAG ...] @@ -133,6 +133,11 @@ FLAGS --azure-tenant-id=AZURE_TENANT_ID ID of the Azure Tenant to manage Azure resources. + --clear-client + Clear the Azure client. This flag is required when updating to use + Azure workload identity federation from Azure client to manage + Azure resources. + Monitoring Config At most one of these can be specified: diff --git a/gcloud/alpha/container/bare-metal/admin-clusters/update b/gcloud/alpha/container/bare-metal/admin-clusters/update index f4899c01b..5cc843b6f 100644 --- a/gcloud/alpha/container/bare-metal/admin-clusters/update +++ b/gcloud/alpha/container/bare-metal/admin-clusters/update @@ -6,6 +6,7 @@ SYNOPSIS gcloud alpha container bare-metal admin-clusters update (ADMIN_CLUSTER : --location=LOCATION) [--async] [--description=DESCRIPTION] [--enable-application-logs] + [--island-mode-service-address-cidr-blocks=SERVICE_ADDRESS,[...]] [--login-user=LOGIN_USER] [--maintenance-address-cidr-blocks=[MAINTENANCE_ADDRESS_CIDR_BLOCKS, ...]] [--max-pods-per-node=MAX_PODS_PER_NODE] [--validate-only] @@ -67,6 +68,13 @@ FLAGS Whether collection of application logs/metrics should be enabled (in addition to system logs/metrics). + Populate one of the network configs. + + Island mode CIDR network configuration. + + --island-mode-service-address-cidr-blocks=SERVICE_ADDRESS,[...] + IPv4 address range for all services in the cluster. + Anthos on bare metal node access related settings for the admin cluster. --login-user=LOGIN_USER diff --git a/gcloud/alpha/container/vmware/node-pools/delete b/gcloud/alpha/container/vmware/node-pools/delete index 56dbc05f5..c87257d24 100644 --- a/gcloud/alpha/container/vmware/node-pools/delete +++ b/gcloud/alpha/container/vmware/node-pools/delete @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha container vmware node-pools delete (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--allow-missing] - [--async] [GCLOUD_WIDE_FLAG ...] + [--async] [--ignore-errors] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a node pool in an Anthos cluster on VMware. @@ -60,6 +60,10 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --ignore-errors + If set, the deletion of a VMware node pool resource will succeed even + if errors occur during deletion. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/dataplex/content/create b/gcloud/alpha/dataplex/content/create index 57f1a0c19..0850e8aae 100644 --- a/gcloud/alpha/dataplex/content/create +++ b/gcloud/alpha/dataplex/content/create @@ -32,8 +32,8 @@ REQUIRED FLAGS Notebook related configurations. --kernel-type=KERNEL_TYPE - Kernel Type of the notebook. KERNEL_TYPE must be (currently only - one value is supported): + Kernel Type of the notebook. KERNEL_TYPE must be (only one value is + supported): PYTHON3 python3 @@ -42,7 +42,7 @@ REQUIRED FLAGS --query-engine=QUERY_ENGINE Query Engine to be used for the Sql Query. QUERY_ENGINE must be - (currently only one value is supported): + (only one value is supported): SPARK spark diff --git a/gcloud/alpha/dataplex/content/update b/gcloud/alpha/dataplex/content/update index d45dfb9ff..17a55f0b8 100644 --- a/gcloud/alpha/dataplex/content/update +++ b/gcloud/alpha/dataplex/content/update @@ -84,8 +84,8 @@ FLAGS Notebook related configurations. --kernel-type=KERNEL_TYPE - Kernel Type of the notebook. KERNEL_TYPE must be (currently only - one value is supported): + Kernel Type of the notebook. KERNEL_TYPE must be (only one value is + supported): PYTHON3 python3 @@ -94,7 +94,7 @@ FLAGS --query-engine=QUERY_ENGINE Query Engine to be used for the Sql Query. QUERY_ENGINE must be - (currently only one value is supported): + (only one value is supported): SPARK spark diff --git a/gcloud/alpha/dns/record-sets/create b/gcloud/alpha/dns/record-sets/create index 27d454c8a..9d69eb411 100644 --- a/gcloud/alpha/dns/record-sets/create +++ b/gcloud/alpha/dns/record-sets/create @@ -147,8 +147,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/alpha/dns/record-sets/update b/gcloud/alpha/dns/record-sets/update index 4bfae052f..02d1ed5bf 100644 --- a/gcloud/alpha/dns/record-sets/update +++ b/gcloud/alpha/dns/record-sets/update @@ -114,8 +114,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/alpha/domains/registrations/configure/contacts b/gcloud/alpha/domains/registrations/configure/contacts index 67f1a8f26..87abaf429 100644 --- a/gcloud/alpha/domains/registrations/configure/contacts +++ b/gcloud/alpha/domains/registrations/configure/contacts @@ -155,8 +155,8 @@ OTHER FLAGS complete. --notices=[NOTICE,...] - Notices about special properties of contacts. NOTICE must be (currently - only one value is supported): + Notices about special properties of contacts. NOTICE must be (only one + value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/alpha/domains/registrations/transfer b/gcloud/alpha/domains/registrations/transfer index 48aea7a10..f6ec57ddf 100644 --- a/gcloud/alpha/domains/registrations/transfer +++ b/gcloud/alpha/domains/registrations/transfer @@ -206,7 +206,7 @@ OTHER FLAGS --notices=[NOTICE,...] Notices about special properties of certain domains or contacts. NOTICE - must be (currently only one value is supported): + must be (only one value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/alpha/functions/deploy b/gcloud/alpha/functions/deploy index 1903b59d2..36fb57fc7 100644 --- a/gcloud/alpha/functions/deploy +++ b/gcloud/alpha/functions/deploy @@ -516,14 +516,27 @@ FLAGS --clear-vpc-connector Clears the VPC connector field. - --vpc-connector=VPC_CONNECTOR - The VPC Access connector that the function can connect to. It can be - either the fully-qualified URI, or the short name of the VPC Access - connector resource. If the short name is used, the connector must - belong to the same project. The format of this field is either - projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} or - ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access - connector. + Connector resource - The VPC Access connector that the function can + connect to. It can be either the fully-qualified URI, or the short name + of the VPC Access connector resource. If the short name is used, the + connector must belong to the same project. The format of this field is + either projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} + or ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access + connector. This represents a Cloud resource. (NOTE) Some attributes are + not given arguments in this group but can be set in other ways. To set + the project attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. To set the region attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --region on the command line. + + --vpc-connector=VPC_CONNECTOR + ID of the connector or fully qualified identifier for the + connector. To set the connector attribute: + ▫ provide the argument --vpc-connector on the command line. --memory=MEMORY Limit on the amount of memory the function can use. diff --git a/gcloud/alpha/healthcare/datasets/deidentify b/gcloud/alpha/healthcare/datasets/deidentify index 5df5388a1..268afff61 100644 --- a/gcloud/alpha/healthcare/datasets/deidentify +++ b/gcloud/alpha/healthcare/datasets/deidentify @@ -85,7 +85,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/alpha/healthcare/dicom-stores/deidentify b/gcloud/alpha/healthcare/dicom-stores/deidentify index e6b90aa4c..e16c0857a 100644 --- a/gcloud/alpha/healthcare/dicom-stores/deidentify +++ b/gcloud/alpha/healthcare/dicom-stores/deidentify @@ -90,7 +90,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/alpha/memcache/instances/create b/gcloud/alpha/memcache/instances/create index 5c1c77409..e608e7a3f 100644 --- a/gcloud/alpha/memcache/instances/create +++ b/gcloud/alpha/memcache/instances/create @@ -105,7 +105,7 @@ OPTIONAL FLAGS --memcached-version=MEMCACHED_VERSION Optional major version of Memcached software to use with the instance. If not provided, default of "1.5" will be used. MEMCACHED_VERSION must - be (currently only one value is supported): + be (only one value is supported): 1.5 Memcached major version 1.5 diff --git a/gcloud/alpha/metastore/services/imports/create b/gcloud/alpha/metastore/services/imports/create index a96d385ec..07fc4506a 100644 --- a/gcloud/alpha/metastore/services/imports/create +++ b/gcloud/alpha/metastore/services/imports/create @@ -76,7 +76,7 @@ OPTIONAL FLAGS --database-dump-type=DATABASE_DUMP_TYPE; default="MYSQL" The type of the database dump. If unspecified, defaults to MYSQL. - DATABASE_DUMP_TYPE must be (currently only one value is supported): + DATABASE_DUMP_TYPE must be (only one value is supported): mysql Database dump is a MYSQL dump file. @@ -86,7 +86,7 @@ OPTIONAL FLAGS MYSQL. The --database-type option is deprecated; use --database-dump-type - instead. DATABASE_TYPE must be (currently only one value is supported): + instead. DATABASE_TYPE must be (only one value is supported): mysql MySQL Database diff --git a/gcloud/alpha/network-connectivity/internal-ranges/create b/gcloud/alpha/network-connectivity/internal-ranges/create index e9c1785cc..f9fa35313 100644 --- a/gcloud/alpha/network-connectivity/internal-ranges/create +++ b/gcloud/alpha/network-connectivity/internal-ranges/create @@ -103,7 +103,7 @@ OPTIONAL FLAGS --overlaps=[OVERLAPS,...] Overlap specifications for the range being created. OVERLAPS must be - (currently only one value is supported): + (only one value is supported): overlap-route-range Allows for creation or existence of routes that have a more diff --git a/gcloud/alpha/recaptcha/keys/create b/gcloud/alpha/recaptcha/keys/create index 08efc1add..7c80bdbfe 100644 --- a/gcloud/alpha/recaptcha/keys/create +++ b/gcloud/alpha/recaptcha/keys/create @@ -12,7 +12,7 @@ SYNOPSIS --security-preference=SECURITY_PREFERENCE --testing-challenge=TESTING_CHALLENGE]) [--labels=[KEY=VALUE,...]] [--testing-score=TESTING_SCORE] - [--waf-feature=WAF_FEATURE --waf-service=WAF_SERVICE] + [--waf-feature=WAF_FEATURE : --waf-service=WAF_SERVICE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -165,6 +165,9 @@ OPTIONAL FLAGS challenge-page Redirects suspicious traffic to reCAPTCHA challenge page. + express + Assesses requests without tokens or frontend integration. + session-token Use reCAPTCHA session-tokens to protect the whole user session on the site's domain. @@ -181,8 +184,8 @@ OPTIONAL FLAGS fastly Fastly - This flag argument must be specified if any of the other arguments in - this group are specified. + unspecified + No specified WAF service GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/resource-manager/tags/keys/create b/gcloud/alpha/resource-manager/tags/keys/create index be26b29d4..a426c7c43 100644 --- a/gcloud/alpha/resource-manager/tags/keys/create +++ b/gcloud/alpha/resource-manager/tags/keys/create @@ -46,8 +46,8 @@ FLAGS --purpose=PURPOSE Purpose specifier of the TagKey that can only be set on creation. Specifying this field adds additional validation from the policy system - that corresponds to the purpose. PURPOSE must be (currently only one - value is supported): GCE_FIREWALL. + that corresponds to the purpose. PURPOSE must be (only one value is + supported): GCE_FIREWALL. --purpose-data=[network=NETWORK] Purpose data of the TagKey that can only be set on creation. This data diff --git a/gcloud/alpha/run/jobs/add-iam-policy-binding b/gcloud/alpha/run/jobs/add-iam-policy-binding index 0b939469f..2260ed937 100644 --- a/gcloud/alpha/run/jobs/add-iam-policy-binding +++ b/gcloud/alpha/run/jobs/add-iam-policy-binding @@ -4,13 +4,11 @@ NAME SYNOPSIS gcloud alpha run jobs add-iam-policy-binding JOB --member=PRINCIPAL - --role=ROLE [--region=REGION] - [--condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + --role=ROLE [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Add an IAM policy binding to the IAM policy of a Cloud Run job. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To add an IAM policy binding for the role of 'roles/run.invoker' for the @@ -20,17 +18,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To add an IAM policy binding which expires at the end of the year 2019 for - the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with job - 'my-job' and region 'us-central1', run: - - $ gcloud alpha run jobs add-iam-policy-binding my-job \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -83,43 +70,6 @@ OPTIONAL FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. - At most one of these can be specified: - - --condition=[KEY=VALUE,...] - A condition to include in the binding. When the condition is - explicitly specified as None (--condition=None), a binding without a - condition is added. When the condition is specified and is not None, - --role cannot be a basic role. Basic roles are roles/editor, - roles/owner, and roles/viewer. For more on conditions, refer to the - conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/run/jobs/remove-iam-policy-binding b/gcloud/alpha/run/jobs/remove-iam-policy-binding index 6cdce09e8..3fccd63a8 100644 --- a/gcloud/alpha/run/jobs/remove-iam-policy-binding +++ b/gcloud/alpha/run/jobs/remove-iam-policy-binding @@ -4,13 +4,11 @@ NAME SYNOPSIS gcloud alpha run jobs remove-iam-policy-binding JOB --member=PRINCIPAL - --role=ROLE [--region=REGION] - [--all | --condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + --role=ROLE [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Remove an IAM policy binding from the IAM policy of a job. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To remove an IAM policy binding for the role of 'roles/run.invoker' for the @@ -21,17 +19,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To remove an IAM policy binding which expires at the end of the year 2019 - for the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - job 'my-job' and region 'us-central1', run: - - $ gcloud alpha run jobs remove-iam-policy-binding my-job \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -85,47 +72,6 @@ OPTIONAL FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. - At most one of these can be specified: - - --all - Remove all bindings with this role and principal, irrespective of any - conditions. - - --condition=[KEY=VALUE,...] - The condition of the binding that you want to remove. When the - condition is explicitly specified as None (--condition=None), a - binding without a condition is removed. Otherwise, only a binding - with a condition that exactly matches the specified condition - (including the optional description) is removed. For more on - conditions, refer to the conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/run/services/add-iam-policy-binding b/gcloud/alpha/run/services/add-iam-policy-binding index 58cae60fe..68b6d23a1 100644 --- a/gcloud/alpha/run/services/add-iam-policy-binding +++ b/gcloud/alpha/run/services/add-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud alpha run services add-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Add an IAM policy binding to the IAM policy of a Cloud Run service. - One binding consists of a member, a role, and an optional condition. + One binding consists of a member, and a role. EXAMPLES To add an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To add an IAM policy binding which expires at the end of the year 2019 for - the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud alpha run services add-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -100,43 +87,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --condition=[KEY=VALUE,...] - A condition to include in the binding. When the condition is - explicitly specified as None (--condition=None), a binding without a - condition is added. When the condition is specified and is not None, - --role cannot be a basic role. Basic roles are roles/editor, - roles/owner, and roles/viewer. For more on conditions, refer to the - conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/alpha/run/services/remove-iam-policy-binding b/gcloud/alpha/run/services/remove-iam-policy-binding index cab377997..f27835bee 100644 --- a/gcloud/alpha/run/services/remove-iam-policy-binding +++ b/gcloud/alpha/run/services/remove-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud alpha run services remove-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--all | --condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Remove an IAM policy binding from the IAM policy of a service. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To remove an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To remove an IAM policy binding which expires at the end of the year 2019 - for the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud alpha run services remove-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -101,47 +88,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --all - Remove all bindings with this role and principal, irrespective of any - conditions. - - --condition=[KEY=VALUE,...] - The condition of the binding that you want to remove. When the - condition is explicitly specified as None (--condition=None), a - binding without a condition is removed. Otherwise, only a binding - with a condition that exactly matches the specified condition - (including the optional description) is removed. For more on - conditions, refer to the conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/alpha/scc/custom-modules/sha/create b/gcloud/alpha/scc/custom-modules/sha/create index 987a82dc4..54c6cde14 100644 --- a/gcloud/alpha/scc/custom-modules/sha/create +++ b/gcloud/alpha/scc/custom-modules/sha/create @@ -18,11 +18,11 @@ EXAMPLES $ gcloud alpha scc custom-modules sha create \ --organization=organizations/123 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha create --organization=123 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml @@ -30,11 +30,11 @@ EXAMPLES run: $ gcloud alpha scc custom-modules sha create --folder=folders/456 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha create --folder=456 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml @@ -42,11 +42,11 @@ EXAMPLES run: $ gcloud alpha scc custom-modules sha create \ - --project=projects/789 --display-name="Test display name" \ + --project=projects/789 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha create --project=789 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml diff --git a/gcloud/alpha/scc/custom-modules/sha/test b/gcloud/alpha/scc/custom-modules/sha/test index ed1f3839e..2d9039a44 100644 --- a/gcloud/alpha/scc/custom-modules/sha/test +++ b/gcloud/alpha/scc/custom-modules/sha/test @@ -19,18 +19,18 @@ EXAMPLES $ gcloud alpha scc custom-modules sha test 123456 \ --organization=organizations/123 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test 123456 \ --organization=123 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test \ organizations/123/securityHealthAnalyticsSettings/\ customModules/123456 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml @@ -39,17 +39,17 @@ EXAMPLES $ gcloud alpha scc custom-modules sha test 123456 \ --folder=folders/456 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test 123456 --folder=456 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test \ folders/456/securityHealthAnalyticsSettings/customModules/\ 123456 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml @@ -58,17 +58,17 @@ EXAMPLES $ gcloud alpha scc custom-modules sha test 123456 \ --project=projects/789 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test 123456 --project=789 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml $ gcloud alpha scc custom-modules sha test \ projects/789/securityHealthAnalyticsSettings/customModules/\ 123456 \ - --display-name="Test display name"--enablement-state="ENABLED" \ + --display-name="test_display_name"--enablement-state="ENABLED" \ --custom-config-from-file=/tmp/custom_config.yaml \ --test-data-from-file=/tmp/test_data.yaml diff --git a/gcloud/alpha/scc/custom-modules/sha/update b/gcloud/alpha/scc/custom-modules/sha/update index 02d638309..59bc039c6 100644 --- a/gcloud/alpha/scc/custom-modules/sha/update +++ b/gcloud/alpha/scc/custom-modules/sha/update @@ -19,16 +19,16 @@ EXAMPLES $ gcloud alpha scc custom-modules sha update 123456 \ --organization=organizations/123 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update 123456 \ - --organization=123 --display-name="Test display name" \ + --organization=123 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update \ organizations/123/securityHealthAnalyticsSettings/\ - customModules/123456 --display-name="Test display name" \ + customModules/123456 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml @@ -36,16 +36,16 @@ EXAMPLES folder 456, run: $ gcloud alpha scc custom-modules sha update 123456 \ - --folder=folders/456 --display-name="Test display name" \ + --folder=folders/456 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update 123456 --folder=456 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update \ folders/456/securityHealthAnalyticsSettings/customModules/\ - 123456 --display-name="Test display name" \ + 123456 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml @@ -53,16 +53,16 @@ EXAMPLES project 789, run: $ gcloud alpha scc custom-modules sha update 123456 \ - --project=projects/789 --display-name="Test display name" \ + --project=projects/789 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update 123456 --project=789 \ - --display-name="Test display name" \ + --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml $ gcloud alpha scc custom-modules sha update \ projects/789/securityHealthAnalyticsSettings/customModules/\ - 123456 --display-name="Test display name" \ + 123456 --display-name="test_display_name" \ --enablement-state="ENABLED" \ --custom-config-from-file=custom_config.yaml diff --git a/gcloud/alpha/services/api-keys/undelete b/gcloud/alpha/services/api-keys/undelete index 4e1f6e6a8..3e8a28ae7 100644 --- a/gcloud/alpha/services/api-keys/undelete +++ b/gcloud/alpha/services/api-keys/undelete @@ -14,19 +14,20 @@ DESCRIPTION EXAMPLES UnDelete an API Key (Key or key-string should be specified): - To undelete with key `1234`, run: + To undelete with key 1234, run: $ gcloud alpha services api-keys undelete 1234 - To undelete with `1234` in project - `myproject` using the fully qualified API key name, run: + To undelete with 1234 in project myproject using the fully qualified API + key name, run: $ gcloud alpha services api-keys undelete \ projects/myproject/locations/global/keys/1234 - To undelete using a Key-string, run: + To undelete using a Key-string, run: - $gcloud alpha services api-keys undelete --key-string='my-key-string' + $ gcloud alpha services api-keys undelete \ + --key-string='my-key-string' POSITIONAL ARGUMENTS Exactly one of these must be specified: diff --git a/gcloud/alpha/workstations/configs/help b/gcloud/alpha/workstations/configs/help index 4320bface..7e6bf5af9 100644 --- a/gcloud/alpha/workstations/configs/help +++ b/gcloud/alpha/workstations/configs/help @@ -28,6 +28,9 @@ COMMANDS list (ALPHA) List workstation configurations. + update + (ALPHA) Updates a workstation configuration. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/workstations/configs/update b/gcloud/alpha/workstations/configs/update new file mode 100644 index 000000000..379221685 --- /dev/null +++ b/gcloud/alpha/workstations/configs/update @@ -0,0 +1,214 @@ +NAME + gcloud alpha workstations configs update - updates a workstation + configuration + +SYNOPSIS + gcloud alpha workstations configs update + (CONFIG : --cluster=CLUSTER --region=REGION) [--async] + [--boot-disk-size=BOOT_DISK_SIZE] + [--container-args=[CONTAINER_ARGS,...]] + [--container-command=[CONTAINER_COMMAND,...]] + [--container-env=[CONTAINER_ENV,...]] + [--container-run-as-user=CONTAINER_RUN_AS_USER] + [--container-working-dir=CONTAINER_WORKING_DIR] + [--disable-public-ip-addresses] [--enable-confidential-compute] + [--idle-timeout=IDLE_TIMEOUT] [--machine-type=MACHINE_TYPE] + [--network-tags=[NETWORK_TAGS,...]] [--pool-size=POOL_SIZE] + [--running-timeout=RUNNING_TIMEOUT] [--service-account=SERVICE_ACCOUNT] + [--shielded-integrity-monitoring] [--shielded-secure-boot] + [--shielded-vtpm] + [--container-custom-image=CONTAINER_CUSTOM_IMAGE + | --container-predefined-image=CONTAINER_PREDEFINED_IMAGE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Updates a workstation configuration. + +EXAMPLES + To update a configuration with the 'e2-standard-8' machine type and a + IntelliJ image, run: + + $ gcloud alpha workstations configs update CONFIG \ + --machine-type=e2-standard-8 \ + --container-predefined-image=intellij + + To update a configuration to disable Secure Boot, virtual trusted platform + module (vTPM) and integrity monitoring, run: + + $ gcloud alpha workstations configs update CONFIG \ + --no-shielded-secure-boot --no-shielded-vtpm \ + --no-shielded-integrity-monitoring + +POSITIONAL ARGUMENTS + Config resource - The group of arguments defining a config The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. To set the project attribute: + ◆ provide the argument config on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + CONFIG + ID of the config or fully qualified identifier for the config. To set + the config attribute: + ▸ provide the argument config on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --cluster=CLUSTER + The cluster for the config. To set the cluster attribute: + ▸ provide the argument config on the command line with a fully + specified name; + ▸ provide the argument --cluster on the command line. + + --region=REGION + The location for the config. To set the region attribute: + ▸ provide the argument config on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --boot-disk-size=BOOT_DISK_SIZE + Size of the boot disk in GB. + + --container-args=[CONTAINER_ARGS,...] + Arguments passed to the entrypoint. + + Example: + + $ gcloud alpha workstations configs update \ + --container-args=arg_1,arg_2 + + --container-command=[CONTAINER_COMMAND,...] + If set, overrides the default ENTRYPOINT specified by the image. + + Example: + + $ gcloud alpha workstations configs update \ + --container-command=executable,parameter_1,parameter_2 + + --container-env=[CONTAINER_ENV,...] + Environment variables passed to the container. + + Example: + + $ gcloud alpha workstations configs update \ + --container-env=key1=value1,key2=value2 + + --container-run-as-user=CONTAINER_RUN_AS_USER + If set, overrides the USER specified in the image with the given uid. + + --container-working-dir=CONTAINER_WORKING_DIR + If set, overrides the default DIR specified by the image. + + --disable-public-ip-addresses + Default value is false. If set, instances will have no public IP + address. + + --enable-confidential-compute + Default value is false. If set, instances will have confidential + compute enabled. + + --idle-timeout=IDLE_TIMEOUT + How long (in seconds) to wait before automatically stopping an instance + that hasn't received any user traffic. A value of 0 indicates that this + instance should never time out due to idleness. + + --machine-type=MACHINE_TYPE + Machine type determines the specifications of the Compute Engine + machines that the workstations created under this configuration will + run on. MACHINE_TYPE must be one of: e2-standard-2, e2-standard-4, + e2-standard-8, e2-standard-16, e2-standard-32, n2-standard-8, + n1-standard-4, t2d-standard-6, n2d-standard-2, n2d-standard-4, + n2d-standard-8, n2d-standard-16, n2d-standard-32. + + --network-tags=[NETWORK_TAGS,...] + Network tags to add to the Google Compute Engine machines backing the + Workstations. + + Example: + + $ gcloud alpha workstations configs update --network-tags=tag_1,tag_2 + + --pool-size=POOL_SIZE + Number of instances to pool for faster Workstation starup. + + --running-timeout=RUNNING_TIMEOUT + How long (in seconds) to wait before automatically stopping a + workstation after it started. A value of 0 indicates that workstations + using this config should never time out. + + --service-account=SERVICE_ACCOUNT + Email address of the service account that will be used on VM instances + used to support this config. This service account must have permission + to pull the specified container image. If not set, VMs will run without + a service account, in which case the image must be publicly accessible. + + --shielded-integrity-monitoring + Default value is false. If set, instances will have integrity + monitoring enabled. + + --shielded-secure-boot + Default value is false. If set, instances will have Secure Boot + enabled. + + --shielded-vtpm + Default value is false. If set, instances will have vTPM enabled. + + At most one of these can be specified: + + --container-custom-image=CONTAINER_CUSTOM_IMAGE + A docker image for the workstation. This image must be accessible by + the service account configured in this configuration + (--service-account). If no service account is defined, this image + must be public. + + --container-predefined-image=CONTAINER_PREDEFINED_IMAGE + Code editor on base images. CONTAINER_PREDEFINED_IMAGE must be one + of: + + base-image + Base image - no IDE + clion + CLion + codeoss + Code OSS + goland + GoLand + intellij + IntelliJ IDEA Ultimate + phpstorm + PhpStorm + pycharm + PyCharm Professional + rider + Rider + rubymine + RubyMine + webstorm + WebStorm + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta workstations configs update + diff --git a/gcloud/alpha/workstations/help b/gcloud/alpha/workstations/help index a9bff6e2d..15f5376c5 100644 --- a/gcloud/alpha/workstations/help +++ b/gcloud/alpha/workstations/help @@ -36,6 +36,9 @@ COMMANDS list (ALPHA) List workstations. + ssh + (ALPHA) SSH into a running workstation. + start (ALPHA) Start a workstation. diff --git a/gcloud/alpha/workstations/ssh b/gcloud/alpha/workstations/ssh new file mode 100644 index 000000000..620cb1d0d --- /dev/null +++ b/gcloud/alpha/workstations/ssh @@ -0,0 +1,100 @@ +NAME + gcloud alpha workstations ssh - SSH into a running workstation + +SYNOPSIS + gcloud alpha workstations ssh + (WORKSTATION : --cluster=CLUSTER --config=CONFIG --region=REGION) + [--command=COMMAND] [--port=PORT; default=22] + [--user=USER; default="user"] [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] + +DESCRIPTION + (ALPHA) SSH into a running workstation. + +EXAMPLES + To ssh into a running workstation, run: + + $ gcloud alpha workstations ssh WORKSTATION + + To specify the workstation port, run: + + $ gcloud alpha workstations ssh WORKSTATION --port=22 + + To ssh into a running workstation with a username, run: + + $ gcloud alpha workstations ssh WORKSTATION --user=my-user + + To run a command on the workstation, such as getting a snapshot of the + guest's process tree, run: $ gcloud alpha workstations ssh WORKSTATION --command="ps -ejH" + +POSITIONAL ARGUMENTS + Workstation resource - The group of arguments defining a workstation The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument workstation on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + WORKSTATION + ID of the workstation or fully qualified identifier for the + workstation. To set the workstation attribute: + ▸ provide the argument workstation on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --cluster=CLUSTER + The cluster for the workstation. To set the cluster attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --cluster on the command line. + + --config=CONFIG + The config for the workstation. To set the config attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --config on the command line. + + --region=REGION + The location for the workstation. To set the region attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + [-- SSH_ARGS ...] + Flags and positionals passed to the underlying ssh implementation. + + The '--' argument must be specified between gcloud specific args on the + left and SSH_ARGS on the right. + +FLAGS + --command=COMMAND + A command to run on the workstation. + + Runs the command on the target workstation and then exits. + + --port=PORT; default=22 + The port on the workstation to which traffic should be sent. + + --user=USER; default="user" + The username with which to SSH. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta workstations ssh + diff --git a/gcloud/auth/enterprise-certificate-config/create/help b/gcloud/auth/enterprise-certificate-config/create/help new file mode 100644 index 000000000..ee1e45159 --- /dev/null +++ b/gcloud/auth/enterprise-certificate-config/create/help @@ -0,0 +1,39 @@ +NAME + gcloud auth enterprise-certificate-config create - create enterprise + certificate configurations + +SYNOPSIS + gcloud auth enterprise-certificate-config create COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + The gcloud auth enterprise-certificate-config create group lets you create + enterprise certificate configurations. This configuration will be used by + gcloud to communicate with the enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + linux + Create an enterprise-certificate configuration file for Linux. + + macos + Create an enterprise-certificate configuration file for MacOS. + + windows + Create an enterprise-certificate configuration file for Windows. + +NOTES + These variants are also available: + + $ gcloud alpha auth enterprise-certificate-config create + + $ gcloud beta auth enterprise-certificate-config create + diff --git a/gcloud/auth/enterprise-certificate-config/create/linux b/gcloud/auth/enterprise-certificate-config/create/linux new file mode 100644 index 000000000..5338116cf --- /dev/null +++ b/gcloud/auth/enterprise-certificate-config/create/linux @@ -0,0 +1,69 @@ +NAME + gcloud auth enterprise-certificate-config create linux - create an + enterprise-certificate configuration file for Linux + +SYNOPSIS + gcloud auth enterprise-certificate-config create linux --label=LABEL + --module=MODULE --slot=SLOT [--ecp=ECP] [--ecp-client=ECP_CLIENT] + [--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD] + [--user-pin=USER_PIN] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud auth enterprise-certificate-config create linux \ + --module=$PATH_TO_PKCS11_MODULE --slot=$PKCS11_SLOT_ID \ + --label=$PKCS11_OBJECT_LABEL --user-pin=$PKCS11_USER_PIN + +REQUIRED FLAGS + --label=LABEL + The PKCS #11 label for the target credentials. The certificate, public + key, and private key MUST have the same label. + enterprise-certificate-proxy will use all three objects. + + --module=MODULE + The full file path to the PKCS #11 module. + + --slot=SLOT + The PKCS #11 slot containing the target credentials. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + + --user-pin=USER_PIN + The user pin used to login to the PKCS #11 module. If there is no user + pin leave this field empty. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha auth enterprise-certificate-config create linux + + $ gcloud beta auth enterprise-certificate-config create linux + diff --git a/gcloud/auth/enterprise-certificate-config/create/macos b/gcloud/auth/enterprise-certificate-config/create/macos new file mode 100644 index 000000000..ea976cb2f --- /dev/null +++ b/gcloud/auth/enterprise-certificate-config/create/macos @@ -0,0 +1,55 @@ +NAME + gcloud auth enterprise-certificate-config create macos - create an + enterprise-certificate configuration file for MacOS + +SYNOPSIS + gcloud auth enterprise-certificate-config create macos --issuer=ISSUER + [--ecp=ECP] [--ecp-client=ECP_CLIENT] [--output-file=OUTPUT_FILE] + [--tls-offload=TLS_OFFLOAD] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud auth enterprise-certificate-config create macos \ + --issuer=$CERT_ISSUER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha auth enterprise-certificate-config create macos + + $ gcloud beta auth enterprise-certificate-config create macos + diff --git a/gcloud/auth/enterprise-certificate-config/create/windows b/gcloud/auth/enterprise-certificate-config/create/windows new file mode 100644 index 000000000..9181b4c1e --- /dev/null +++ b/gcloud/auth/enterprise-certificate-config/create/windows @@ -0,0 +1,62 @@ +NAME + gcloud auth enterprise-certificate-config create windows - create an + enterprise-certificate configuration file for Windows + +SYNOPSIS + gcloud auth enterprise-certificate-config create windows --issuer=ISSUER + --provider=PROVIDER --store=STORE [--ecp=ECP] [--ecp-client=ECP_CLIENT] + [--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud auth enterprise-certificate-config create windows \ + --issuer=$CERT_ISSUER --store=$STORE --provider=$PROVIDER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + + --provider=PROVIDER + The Windows secure store provider. + + --store=STORE + The Windows secure store. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha auth enterprise-certificate-config create windows + + $ gcloud beta auth enterprise-certificate-config create windows + diff --git a/gcloud/auth/enterprise-certificate-config/help b/gcloud/auth/enterprise-certificate-config/help new file mode 100644 index 000000000..2a45a576e --- /dev/null +++ b/gcloud/auth/enterprise-certificate-config/help @@ -0,0 +1,34 @@ +NAME + gcloud auth enterprise-certificate-config - manage enterprise certificate + configurations + +SYNOPSIS + gcloud auth enterprise-certificate-config GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Currently only create is implemented. + + The gcloud auth enterprise-certificate-config group lets you create + enterprise certificate configurations. This configuration will be used by + gcloud to communicate with the enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + create + Create enterprise certificate configurations. + +NOTES + These variants are also available: + + $ gcloud alpha auth enterprise-certificate-config + + $ gcloud beta auth enterprise-certificate-config + diff --git a/gcloud/auth/help b/gcloud/auth/help index df26bb003..d0696d151 100644 --- a/gcloud/auth/help +++ b/gcloud/auth/help @@ -52,6 +52,9 @@ GROUPS application-default Manage your active Application Default Credentials. + enterprise-certificate-config + Manage enterprise certificate configurations. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/auth/login b/gcloud/auth/login index effe1d6e3..812d745ad 100644 --- a/gcloud/auth/login +++ b/gcloud/auth/login @@ -26,16 +26,23 @@ DESCRIPTION gcloud auth activate-service-account with the corresponding JSON key file. In addition to Google user credentials, authorization using workload - identity federation or service account keys is also supported. + identity federation, workforce identity federation, or service account keys + is also supported. + + For authorization with external accounts or service accounts, the + --cred-file flag must be specified with the path to the workload identity + credential configuration file or service account key file (JSON). + + Login with workload and workforce identity federation is also supported in + both gsutil and bq. This command is the recommended way of using external + accounts. - For authorization with external accounts (workload identity pools) or - service accounts, the --cred-file flag must be specified with the path to - the workload identity credential configuration file or service account key - file (JSON). Login with workload identity federation is also supported in - gsutil and this command is the recommended way of using external accounts. For more information on workload identity federation, see: https://cloud.google.com/iam/docs/workload-identity-federation. + For more information on workforce identity federation, see: + https://cloud.google.com/iam/docs/workforce-identity-federation. + For more information on authorization and credential types, see: https://cloud.google.com/sdk/docs/authorizing. @@ -44,9 +51,15 @@ EXAMPLES $ gcloud auth login - To obtain access credentials using workload identity federation, run: + To obtain access credentials using workload or workforce identity + federation, run: - $ gcloud auth login --cred-file=/path/to/workload/configuration/file + $ gcloud auth login --cred-file=/path/to/configuration/file + + To obtain access credentials using a browser-based sign-in flow with + workforce identity federation, run: + + $ gcloud auth login --login-config=/path/to/configuration/file POSITIONAL ARGUMENTS [ACCOUNT] @@ -124,10 +137,10 @@ FLAGS Enabled by default, use --no-launch-browser to disable. --login-config=LOGIN_CONFIG - Path to the login configuration file (workforce pool, generated by the - Cloud Console or gcloud iam workforce-pools create-login-config). - Overrides the default auth/login_config_file property value for this - command invocation. + Path to the workforce identity federation login configuration file + which can be generated using the gcloud iam workforce-pools + create-login-config command. Overrides the default + auth/login_config_file property value for this command invocation. --update-adc Write the obtained credentials to the well-known location for diff --git a/gcloud/beta/alloydb/instances/create b/gcloud/beta/alloydb/instances/create index e8987878b..d79abe9ba 100644 --- a/gcloud/beta/alloydb/instances/create +++ b/gcloud/beta/alloydb/instances/create @@ -65,8 +65,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/beta/alloydb/instances/update b/gcloud/beta/alloydb/instances/update index a0280e6d0..153bf63ab 100644 --- a/gcloud/beta/alloydb/instances/update +++ b/gcloud/beta/alloydb/instances/update @@ -40,8 +40,8 @@ OPTIONAL FLAGS complete. --availability-type=AVAILABILITY_TYPE - Specifies level of availability. AVAILABILITY_TYPE must be (currently - only one value is supported): + Specifies level of availability. AVAILABILITY_TYPE must be (only one + value is supported): REGIONAL Provides high availability and is recommended for production diff --git a/gcloud/beta/auth/enterprise-certificate-config/create/help b/gcloud/beta/auth/enterprise-certificate-config/create/help new file mode 100644 index 000000000..c893b3ada --- /dev/null +++ b/gcloud/beta/auth/enterprise-certificate-config/create/help @@ -0,0 +1,40 @@ +NAME + gcloud beta auth enterprise-certificate-config create - create enterprise + certificate configurations + +SYNOPSIS + gcloud beta auth enterprise-certificate-config create COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) The gcloud beta auth enterprise-certificate-config create group lets + you create enterprise certificate configurations. This configuration will + be used by gcloud to communicate with the enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + linux + (BETA) Create an enterprise-certificate configuration file for Linux. + + macos + (BETA) Create an enterprise-certificate configuration file for MacOS. + + windows + (BETA) Create an enterprise-certificate configuration file for Windows. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud auth enterprise-certificate-config create + + $ gcloud alpha auth enterprise-certificate-config create + diff --git a/gcloud/beta/auth/enterprise-certificate-config/create/linux b/gcloud/beta/auth/enterprise-certificate-config/create/linux new file mode 100644 index 000000000..1c39d474c --- /dev/null +++ b/gcloud/beta/auth/enterprise-certificate-config/create/linux @@ -0,0 +1,70 @@ +NAME + gcloud beta auth enterprise-certificate-config create linux - create an + enterprise-certificate configuration file for Linux + +SYNOPSIS + gcloud beta auth enterprise-certificate-config create linux --label=LABEL + --module=MODULE --slot=SLOT [--ecp=ECP] [--ecp-client=ECP_CLIENT] + [--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD] + [--user-pin=USER_PIN] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud beta auth enterprise-certificate-config create linux \ + --module=$PATH_TO_PKCS11_MODULE --slot=$PKCS11_SLOT_ID \ + --label=$PKCS11_OBJECT_LABEL --user-pin=$PKCS11_USER_PIN + +REQUIRED FLAGS + --label=LABEL + The PKCS #11 label for the target credentials. The certificate, public + key, and private key MUST have the same label. + enterprise-certificate-proxy will use all three objects. + + --module=MODULE + The full file path to the PKCS #11 module. + + --slot=SLOT + The PKCS #11 slot containing the target credentials. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + + --user-pin=USER_PIN + The user pin used to login to the PKCS #11 module. If there is no user + pin leave this field empty. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud auth enterprise-certificate-config create linux + + $ gcloud alpha auth enterprise-certificate-config create linux + diff --git a/gcloud/beta/auth/enterprise-certificate-config/create/macos b/gcloud/beta/auth/enterprise-certificate-config/create/macos new file mode 100644 index 000000000..e1a69cf37 --- /dev/null +++ b/gcloud/beta/auth/enterprise-certificate-config/create/macos @@ -0,0 +1,56 @@ +NAME + gcloud beta auth enterprise-certificate-config create macos - create an + enterprise-certificate configuration file for MacOS + +SYNOPSIS + gcloud beta auth enterprise-certificate-config create macos --issuer=ISSUER + [--ecp=ECP] [--ecp-client=ECP_CLIENT] [--output-file=OUTPUT_FILE] + [--tls-offload=TLS_OFFLOAD] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud beta auth enterprise-certificate-config create macos \ + --issuer=$CERT_ISSUER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud auth enterprise-certificate-config create macos + + $ gcloud alpha auth enterprise-certificate-config create macos + diff --git a/gcloud/beta/auth/enterprise-certificate-config/create/windows b/gcloud/beta/auth/enterprise-certificate-config/create/windows new file mode 100644 index 000000000..0167ebb63 --- /dev/null +++ b/gcloud/beta/auth/enterprise-certificate-config/create/windows @@ -0,0 +1,63 @@ +NAME + gcloud beta auth enterprise-certificate-config create windows - create an + enterprise-certificate configuration file for Windows + +SYNOPSIS + gcloud beta auth enterprise-certificate-config create windows + --issuer=ISSUER --provider=PROVIDER --store=STORE [--ecp=ECP] + [--ecp-client=ECP_CLIENT] [--output-file=OUTPUT_FILE] + [--tls-offload=TLS_OFFLOAD] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) This command creates a configuration file used by gcloud to use the + enterprise-certificate-proxy component for mTLS. + +EXAMPLES + To create a credential configuration run: + + $ gcloud beta auth enterprise-certificate-config create windows \ + --issuer=$CERT_ISSUER --store=$STORE --provider=$PROVIDER + +REQUIRED FLAGS + --issuer=ISSUER + The certificate issuer. + + --provider=PROVIDER + The Windows secure store provider. + + --store=STORE + The Windows secure store. + +OPTIONAL FLAGS + --ecp=ECP + Provide a custom path to the enterprise-certificate-proxy binary. This + flag must be the full path to the binary. + + --ecp-client=ECP_CLIENT + Provide a custom path to the enterprise-certificate-proxy shared client + library. This flag must be the full path to the shared library. + + --output-file=OUTPUT_FILE + Override the file path that the enterprise-certificate-proxy + configuration is written to. + + --tls-offload=TLS_OFFLOAD + Provide a custom path to the enterprise-certificate-proxy shared tls + offload library. This flag must be the full path to the shared library. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud auth enterprise-certificate-config create windows + + $ gcloud alpha auth enterprise-certificate-config create windows + diff --git a/gcloud/beta/auth/enterprise-certificate-config/help b/gcloud/beta/auth/enterprise-certificate-config/help new file mode 100644 index 000000000..d24d60163 --- /dev/null +++ b/gcloud/beta/auth/enterprise-certificate-config/help @@ -0,0 +1,35 @@ +NAME + gcloud beta auth enterprise-certificate-config - manage enterprise + certificate configurations + +SYNOPSIS + gcloud beta auth enterprise-certificate-config GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Currently only create is implemented. + + The gcloud beta auth enterprise-certificate-config group lets you create + enterprise certificate configurations. This configuration will be used by + gcloud to communicate with the enterprise-certificate-proxy. + + See more details at gcloud topic client-certificate. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + create + (BETA) Create enterprise certificate configurations. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud auth enterprise-certificate-config + + $ gcloud alpha auth enterprise-certificate-config + diff --git a/gcloud/beta/auth/help b/gcloud/beta/auth/help index e7c5d93e9..156fc341f 100644 --- a/gcloud/beta/auth/help +++ b/gcloud/beta/auth/help @@ -52,6 +52,9 @@ GROUPS application-default (BETA) Manage your active Application Default Credentials. + enterprise-certificate-config + (BETA) Manage enterprise certificate configurations. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/beta/auth/login b/gcloud/beta/auth/login index 49b4aafbb..0fb3ad2c0 100644 --- a/gcloud/beta/auth/login +++ b/gcloud/beta/auth/login @@ -26,16 +26,23 @@ DESCRIPTION gcloud auth activate-service-account with the corresponding JSON key file. In addition to Google user credentials, authorization using workload - identity federation or service account keys is also supported. + identity federation, workforce identity federation, or service account keys + is also supported. + + For authorization with external accounts or service accounts, the + --cred-file flag must be specified with the path to the workload identity + credential configuration file or service account key file (JSON). + + Login with workload and workforce identity federation is also supported in + both gsutil and bq. This command is the recommended way of using external + accounts. - For authorization with external accounts (workload identity pools) or - service accounts, the --cred-file flag must be specified with the path to - the workload identity credential configuration file or service account key - file (JSON). Login with workload identity federation is also supported in - gsutil and this command is the recommended way of using external accounts. For more information on workload identity federation, see: https://cloud.google.com/iam/docs/workload-identity-federation. + For more information on workforce identity federation, see: + https://cloud.google.com/iam/docs/workforce-identity-federation. + For more information on authorization and credential types, see: https://cloud.google.com/sdk/docs/authorizing. @@ -44,10 +51,15 @@ EXAMPLES $ gcloud beta auth login - To obtain access credentials using workload identity federation, run: + To obtain access credentials using workload or workforce identity + federation, run: - $ gcloud beta auth login \ - --cred-file=/path/to/workload/configuration/file + $ gcloud beta auth login --cred-file=/path/to/configuration/file + + To obtain access credentials using a browser-based sign-in flow with + workforce identity federation, run: + + $ gcloud beta auth login --login-config=/path/to/configuration/file POSITIONAL ARGUMENTS [ACCOUNT] @@ -125,10 +137,10 @@ FLAGS Enabled by default, use --no-launch-browser to disable. --login-config=LOGIN_CONFIG - Path to the login configuration file (workforce pool, generated by the - Cloud Console or gcloud iam workforce-pools create-login-config). - Overrides the default auth/login_config_file property value for this - command invocation. + Path to the workforce identity federation login configuration file + which can be generated using the gcloud iam workforce-pools + create-login-config command. Overrides the default + auth/login_config_file property value for this command invocation. --update-adc Write the obtained credentials to the well-known location for diff --git a/gcloud/beta/beyondcorp/app/connections/create b/gcloud/beta/beyondcorp/app/connections/create index a99d42b99..358fa1ea3 100644 --- a/gcloud/beta/beyondcorp/app/connections/create +++ b/gcloud/beta/beyondcorp/app/connections/create @@ -104,7 +104,7 @@ OPTIONAL FLAGS --type=TYPE; default="TCP_PROXY" The type of network connnectivity used by the connection. TYPE must be - (currently only one value is supported): + (only one value is supported): tcp TCP connection diff --git a/gcloud/beta/compute/commitments/update b/gcloud/beta/compute/commitments/update index 2b9dc5a1d..03716e988 100644 --- a/gcloud/beta/compute/commitments/update +++ b/gcloud/beta/compute/commitments/update @@ -3,7 +3,7 @@ NAME SYNOPSIS gcloud beta compute commitments update COMMITMENT [--auto-renew] - [--region=REGION] [GCLOUD_WIDE_FLAG ...] + [--plan=PLAN] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Update Compute Engine commitments. @@ -15,6 +15,18 @@ EXAMPLES $ gcloud beta compute commitments update commitment-1 --auto-renew \ --region=us-central1 + To disable auto renewal on a commitment called commitment-1 in the + us-central1 region, run: + + $ gcloud beta compute commitments update commitment-1 \ + --no-auto-renew --region=us-central1 + + To upgrade the term of a commitment called commitment-1 from 12-month to + 36-month, in the us-central1 region, run: + + $ gcloud beta compute commitments update commitment-1 \ + --plan=36-month --region=us-central1 + POSITIONAL ARGUMENTS COMMITMENT Name of the commitment to update. @@ -23,6 +35,10 @@ FLAGS --auto-renew Enable auto renewal for the commitment. + --plan=PLAN + Duration of the commitment. PLAN must be (only one value is supported): + 36-month. + --region=REGION Region of the commitment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/beta/compute/images/import b/gcloud/beta/compute/images/import index 9f41e2d1d..510bb7476 100644 --- a/gcloud/beta/compute/images/import +++ b/gcloud/beta/compute/images/import @@ -181,7 +181,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --log-location=LOG_LOCATION diff --git a/gcloud/beta/compute/instance-templates/create b/gcloud/beta/compute/instance-templates/create index 38580482e..b1939c9df 100644 --- a/gcloud/beta/compute/instance-templates/create +++ b/gcloud/beta/compute/instance-templates/create @@ -18,6 +18,8 @@ SYNOPSIS [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] [--host-error-timeout-seconds=HOST_ERROR_TIMEOUT_SECONDS] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] @@ -385,10 +387,23 @@ FLAGS Default. Stop the VM without preserving memory. The VM can be restarted later. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to the instance that + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/beta/compute/instances/create b/gcloud/beta/compute/instances/create index 32f95993b..4e3240dcd 100644 --- a/gcloud/beta/compute/instances/create +++ b/gcloud/beta/compute/instances/create @@ -21,6 +21,8 @@ SYNOPSIS [--host-error-timeout-seconds=HOST_ERROR_TIMEOUT_SECONDS] [--hostname=HOSTNAME] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--ipv6-public-ptr-domain=IPV6_PUBLIC_PTR_DOMAIN] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] @@ -445,10 +447,23 @@ FLAGS Default. Stop the VM without preserving memory. The VM can be restarted later. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to the instance that + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/beta/compute/instances/import b/gcloud/beta/compute/instances/import index 9a1d8f0af..447640cf9 100644 --- a/gcloud/beta/compute/instances/import +++ b/gcloud/beta/compute/instances/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --hostname=HOSTNAME diff --git a/gcloud/beta/compute/instances/network-interfaces/update b/gcloud/beta/compute/instances/network-interfaces/update index 2379ee295..bcafec2e6 100644 --- a/gcloud/beta/compute/instances/network-interfaces/update +++ b/gcloud/beta/compute/instances/network-interfaces/update @@ -6,6 +6,8 @@ SYNOPSIS gcloud beta compute instances network-interfaces update INSTANCE_NAME [--aliases=ALIASES] [--external-ipv6-address=EXTERNAL_IPV6_ADDRESS] [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--network=NETWORK] [--network-interface=NETWORK_INTERFACE; default="nic0"] [--private-network-ip=PRIVATE_NETWORK_IP] [--stack-type=STACK_TYPE] @@ -53,10 +55,24 @@ FLAGS be used together with --external-ipv6-address. Currently only /96 is supported and the default value is 96. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to an instance. The + address must be the first IP address in the range or a /96 IP address + range. This option can only be used on a dual stack instance network + interface. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range, should be used together with + --internal-ipv6-address=fd20::. Only /96 IP address range is supported + and the default value is 96. If not set, then either the prefix length + from --internal-ipv6-address=fd20::/96 will be used or the default + value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/beta/compute/machine-images/import b/gcloud/beta/compute/machine-images/import index 4c804f500..a178b8123 100644 --- a/gcloud/beta/compute/machine-images/import +++ b/gcloud/beta/compute/machine-images/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --labels=[KEY=VALUE,...] diff --git a/gcloud/beta/compute/networks/subnets/update b/gcloud/beta/compute/networks/subnets/update index 7a1671153..60daaf757 100644 --- a/gcloud/beta/compute/networks/subnets/update +++ b/gcloud/beta/compute/networks/subnets/update @@ -158,7 +158,7 @@ FLAGS --purpose=PURPOSE The purpose of the subnetwork is set to REGIONAL_MANAGED_PROXY to migrate from the INTERNAL_HTTPS_LOAD_BALANCER purpose. PURPOSE must - be (currently only one value is supported): + be (only one value is supported): REGIONAL_MANAGED_PROXY The proxy-only subnet for regional HTTP(S) load balancers. @@ -178,7 +178,7 @@ FLAGS This field is only valid when updating a reserved IP address range used for the purpose of Internal HTTP(S) Load Balancer. - ROLE must be (currently only one value is supported): + ROLE must be (only one value is supported): ACTIVE The ACTIVE subnet that is currently used. diff --git a/gcloud/beta/compute/os-config/os-upgrade b/gcloud/beta/compute/os-config/os-upgrade index 7d2df2058..918f45c13 100644 --- a/gcloud/beta/compute/os-config/os-upgrade +++ b/gcloud/beta/compute/os-config/os-upgrade @@ -36,12 +36,12 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --source-os=SOURCE_OS - OS version of the source instance to upgrade. SOURCE_OS must be - (currently only one value is supported): windows-2008r2. + OS version of the source instance to upgrade. SOURCE_OS must be (only + one value is supported): windows-2008r2. --target-os=TARGET_OS - Version of the OS after upgrade. TARGET_OS must be (currently only one - value is supported): windows-2012r2. + Version of the OS after upgrade. TARGET_OS must be (only one value is + supported): windows-2012r2. OPTIONAL FLAGS --async diff --git a/gcloud/beta/compute/public-advertised-prefixes/update b/gcloud/beta/compute/public-advertised-prefixes/update index 6e4b30e19..b2e540b9d 100644 --- a/gcloud/beta/compute/public-advertised-prefixes/update +++ b/gcloud/beta/compute/public-advertised-prefixes/update @@ -18,8 +18,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --status=STATUS - The status of public advertised prefix. STATUS must be (currently only - one value is supported): ptr-configured. + The status of public advertised prefix. STATUS must be (only one value + is supported): ptr-configured. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/compute/resource-policies/create/group-placement b/gcloud/beta/compute/resource-policies/create/group-placement index dba277a0a..cb34af36b 100644 --- a/gcloud/beta/compute/resource-policies/create/group-placement +++ b/gcloud/beta/compute/resource-policies/create/group-placement @@ -6,7 +6,8 @@ SYNOPSIS gcloud beta compute resource-policies create group-placement NAME [--availability-domain-count=AVAILABILITY_DOMAIN_COUNT] [--collocation=COLLOCATION] [--description=DESCRIPTION] - [--region=REGION] [--vm-count=VM_COUNT] [GCLOUD_WIDE_FLAG ...] + [--max-distance=MAX_DISTANCE] [--region=REGION] [--vm-count=VM_COUNT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a Compute Engine Group Placement Resource Policy. @@ -38,6 +39,9 @@ FLAGS --description=DESCRIPTION An optional, textual description for the backend. + --max-distance=MAX_DISTANCE + Specifies the number of max logical switches between VMs. + --region=REGION Region of the resource policy to operate on. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/beta/compute/routers/add-bgp-peer b/gcloud/beta/compute/routers/add-bgp-peer index c1ac1d325..15b33c0b8 100644 --- a/gcloud/beta/compute/routers/add-bgp-peer +++ b/gcloud/beta/compute/routers/add-bgp-peer @@ -141,7 +141,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/beta/compute/routers/create b/gcloud/beta/compute/routers/create index 4ad798664..4189bf7cd 100644 --- a/gcloud/beta/compute/routers/create +++ b/gcloud/beta/compute/routers/create @@ -90,7 +90,7 @@ OPTIONAL FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/beta/compute/routers/update b/gcloud/beta/compute/routers/update index 1bd45fae1..56a55588f 100644 --- a/gcloud/beta/compute/routers/update +++ b/gcloud/beta/compute/routers/update @@ -81,7 +81,7 @@ FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -102,7 +102,7 @@ FLAGS this router. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -123,7 +123,7 @@ FLAGS the current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/beta/compute/routers/update-bgp-peer b/gcloud/beta/compute/routers/update-bgp-peer index 0877862c5..468e86d8f 100644 --- a/gcloud/beta/compute/routers/update-bgp-peer +++ b/gcloud/beta/compute/routers/update-bgp-peer @@ -127,7 +127,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -148,7 +148,7 @@ OPTIONAL FLAGS this peer. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -169,7 +169,7 @@ OPTIONAL FLAGS current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion index 4d2de9f80..dc51eccb5 100644 --- a/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion +++ b/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -136,8 +136,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud compute security-policies rules add-preconfig-waf-exclusion $ gcloud alpha compute security-policies rules \ add-preconfig-waf-exclusion diff --git a/gcloud/beta/compute/security-policies/rules/create b/gcloud/beta/compute/security-policies/rules/create index 73efeb48e..405547310 100644 --- a/gcloud/beta/compute/security-policies/rules/create +++ b/gcloud/beta/compute/security-policies/rules/create @@ -105,8 +105,8 @@ OPTIONAL FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion index 306601128..f960da85b 100644 --- a/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion +++ b/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -154,8 +154,11 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion $ gcloud alpha compute security-policies rules \ remove-preconfig-waf-exclusion diff --git a/gcloud/beta/compute/security-policies/rules/update b/gcloud/beta/compute/security-policies/rules/update index 4ed4c8ec5..773dc0d7b 100644 --- a/gcloud/beta/compute/security-policies/rules/update +++ b/gcloud/beta/compute/security-policies/rules/update @@ -94,8 +94,8 @@ FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/beta/compute/security-policies/update b/gcloud/beta/compute/security-policies/update index 5d6931252..c9adf9349 100644 --- a/gcloud/beta/compute/security-policies/update +++ b/gcloud/beta/compute/security-policies/update @@ -76,7 +76,7 @@ FLAGS --network-ddos-protection=NETWORK_DDOS_PROTECTION The DDoS protection level for network load balancing and instances with external IPs. NETWORK_DDOS_PROTECTION must be one of: STANDARD, - ADVANCED. + ADVANCED, ADVANCED_PREVIEW. --recaptcha-redirect-site-key=RECAPTCHA_REDIRECT_SITE_KEY The reCAPTCHA site key to be used for rules using the redirect action diff --git a/gcloud/beta/dns/record-sets/create b/gcloud/beta/dns/record-sets/create index 47301763a..cdc7f967f 100644 --- a/gcloud/beta/dns/record-sets/create +++ b/gcloud/beta/dns/record-sets/create @@ -146,8 +146,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/beta/dns/record-sets/update b/gcloud/beta/dns/record-sets/update index e6ce16102..816e70366 100644 --- a/gcloud/beta/dns/record-sets/update +++ b/gcloud/beta/dns/record-sets/update @@ -113,8 +113,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/beta/domains/registrations/configure/contacts b/gcloud/beta/domains/registrations/configure/contacts index 04c282387..b12c8de1c 100644 --- a/gcloud/beta/domains/registrations/configure/contacts +++ b/gcloud/beta/domains/registrations/configure/contacts @@ -155,8 +155,8 @@ OTHER FLAGS complete. --notices=[NOTICE,...] - Notices about special properties of contacts. NOTICE must be (currently - only one value is supported): + Notices about special properties of contacts. NOTICE must be (only one + value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/beta/domains/registrations/transfer b/gcloud/beta/domains/registrations/transfer index 11670ff8d..5ac307c96 100644 --- a/gcloud/beta/domains/registrations/transfer +++ b/gcloud/beta/domains/registrations/transfer @@ -206,7 +206,7 @@ OTHER FLAGS --notices=[NOTICE,...] Notices about special properties of certain domains or contacts. NOTICE - must be (currently only one value is supported): + must be (only one value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/beta/functions/deploy b/gcloud/beta/functions/deploy index 93609c6a5..0e32291ba 100644 --- a/gcloud/beta/functions/deploy +++ b/gcloud/beta/functions/deploy @@ -512,14 +512,27 @@ FLAGS --clear-vpc-connector Clears the VPC connector field. - --vpc-connector=VPC_CONNECTOR - The VPC Access connector that the function can connect to. It can be - either the fully-qualified URI, or the short name of the VPC Access - connector resource. If the short name is used, the connector must - belong to the same project. The format of this field is either - projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} or - ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access - connector. + Connector resource - The VPC Access connector that the function can + connect to. It can be either the fully-qualified URI, or the short name + of the VPC Access connector resource. If the short name is used, the + connector must belong to the same project. The format of this field is + either projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} + or ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access + connector. This represents a Cloud resource. (NOTE) Some attributes are + not given arguments in this group but can be set in other ways. To set + the project attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. To set the region attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --region on the command line. + + --vpc-connector=VPC_CONNECTOR + ID of the connector or fully qualified identifier for the + connector. To set the connector attribute: + ▫ provide the argument --vpc-connector on the command line. --memory=MEMORY Limit on the amount of memory the function can use. diff --git a/gcloud/beta/healthcare/datasets/deidentify b/gcloud/beta/healthcare/datasets/deidentify index a3b9913f4..49d321f36 100644 --- a/gcloud/beta/healthcare/datasets/deidentify +++ b/gcloud/beta/healthcare/datasets/deidentify @@ -85,7 +85,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/beta/healthcare/dicom-stores/deidentify b/gcloud/beta/healthcare/dicom-stores/deidentify index f8c3d61b5..0ee9feb83 100644 --- a/gcloud/beta/healthcare/dicom-stores/deidentify +++ b/gcloud/beta/healthcare/dicom-stores/deidentify @@ -90,7 +90,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/beta/memcache/instances/create b/gcloud/beta/memcache/instances/create index c414fcae0..19bfae2a1 100644 --- a/gcloud/beta/memcache/instances/create +++ b/gcloud/beta/memcache/instances/create @@ -105,7 +105,7 @@ OPTIONAL FLAGS --memcached-version=MEMCACHED_VERSION Optional major version of Memcached software to use with the instance. If not provided, default of "1.5" will be used. MEMCACHED_VERSION must - be (currently only one value is supported): + be (only one value is supported): 1.5 Memcached major version 1.5 diff --git a/gcloud/beta/metastore/services/imports/create b/gcloud/beta/metastore/services/imports/create index bc6aaf653..244d342b8 100644 --- a/gcloud/beta/metastore/services/imports/create +++ b/gcloud/beta/metastore/services/imports/create @@ -76,7 +76,7 @@ OPTIONAL FLAGS --database-dump-type=DATABASE_DUMP_TYPE; default="MYSQL" The type of the database dump. If unspecified, defaults to MYSQL. - DATABASE_DUMP_TYPE must be (currently only one value is supported): + DATABASE_DUMP_TYPE must be (only one value is supported): mysql Database dump is a MYSQL dump file. @@ -86,7 +86,7 @@ OPTIONAL FLAGS MYSQL. The --database-type option is deprecated; use --database-dump-type - instead. DATABASE_TYPE must be (currently only one value is supported): + instead. DATABASE_TYPE must be (only one value is supported): mysql MySQL Database diff --git a/gcloud/beta/resource-manager/tags/keys/create b/gcloud/beta/resource-manager/tags/keys/create index 22d6c98a9..e84d82164 100644 --- a/gcloud/beta/resource-manager/tags/keys/create +++ b/gcloud/beta/resource-manager/tags/keys/create @@ -46,8 +46,8 @@ FLAGS --purpose=PURPOSE Purpose specifier of the TagKey that can only be set on creation. Specifying this field adds additional validation from the policy system - that corresponds to the purpose. PURPOSE must be (currently only one - value is supported): GCE_FIREWALL. + that corresponds to the purpose. PURPOSE must be (only one value is + supported): GCE_FIREWALL. --purpose-data=[network=NETWORK] Purpose data of the TagKey that can only be set on creation. This data diff --git a/gcloud/beta/run/jobs/add-iam-policy-binding b/gcloud/beta/run/jobs/add-iam-policy-binding index 878f4bfcf..8260d1168 100644 --- a/gcloud/beta/run/jobs/add-iam-policy-binding +++ b/gcloud/beta/run/jobs/add-iam-policy-binding @@ -4,13 +4,11 @@ NAME SYNOPSIS gcloud beta run jobs add-iam-policy-binding JOB --member=PRINCIPAL - --role=ROLE [--region=REGION] - [--condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + --role=ROLE [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Add an IAM policy binding to the IAM policy of a Cloud Run job. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To add an IAM policy binding for the role of 'roles/run.invoker' for the @@ -20,17 +18,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To add an IAM policy binding which expires at the end of the year 2019 for - the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with job - 'my-job' and region 'us-central1', run: - - $ gcloud beta run jobs add-iam-policy-binding my-job \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -83,43 +70,6 @@ OPTIONAL FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. - At most one of these can be specified: - - --condition=[KEY=VALUE,...] - A condition to include in the binding. When the condition is - explicitly specified as None (--condition=None), a binding without a - condition is added. When the condition is specified and is not None, - --role cannot be a basic role. Basic roles are roles/editor, - roles/owner, and roles/viewer. For more on conditions, refer to the - conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/run/jobs/remove-iam-policy-binding b/gcloud/beta/run/jobs/remove-iam-policy-binding index f65074349..6d7aa266b 100644 --- a/gcloud/beta/run/jobs/remove-iam-policy-binding +++ b/gcloud/beta/run/jobs/remove-iam-policy-binding @@ -4,13 +4,11 @@ NAME SYNOPSIS gcloud beta run jobs remove-iam-policy-binding JOB --member=PRINCIPAL - --role=ROLE [--region=REGION] - [--all | --condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + --role=ROLE [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Remove an IAM policy binding from the IAM policy of a job. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To remove an IAM policy binding for the role of 'roles/run.invoker' for the @@ -21,17 +19,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To remove an IAM policy binding which expires at the end of the year 2019 - for the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - job 'my-job' and region 'us-central1', run: - - $ gcloud beta run jobs remove-iam-policy-binding my-job \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -85,47 +72,6 @@ OPTIONAL FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. - At most one of these can be specified: - - --all - Remove all bindings with this role and principal, irrespective of any - conditions. - - --condition=[KEY=VALUE,...] - The condition of the binding that you want to remove. When the - condition is explicitly specified as None (--condition=None), a - binding without a condition is removed. Otherwise, only a binding - with a condition that exactly matches the specified condition - (including the optional description) is removed. For more on - conditions, refer to the conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/run/services/add-iam-policy-binding b/gcloud/beta/run/services/add-iam-policy-binding index 4aaefb227..c8bbd3ea0 100644 --- a/gcloud/beta/run/services/add-iam-policy-binding +++ b/gcloud/beta/run/services/add-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud beta run services add-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Add an IAM policy binding to the IAM policy of a Cloud Run service. - One binding consists of a member, a role, and an optional condition. + One binding consists of a member, and a role. EXAMPLES To add an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To add an IAM policy binding which expires at the end of the year 2019 for - the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud beta run services add-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -100,43 +87,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --condition=[KEY=VALUE,...] - A condition to include in the binding. When the condition is - explicitly specified as None (--condition=None), a binding without a - condition is added. When the condition is specified and is not None, - --role cannot be a basic role. Basic roles are roles/editor, - roles/owner, and roles/viewer. For more on conditions, refer to the - conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/beta/run/services/remove-iam-policy-binding b/gcloud/beta/run/services/remove-iam-policy-binding index f324a0d55..9ff289c70 100644 --- a/gcloud/beta/run/services/remove-iam-policy-binding +++ b/gcloud/beta/run/services/remove-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud beta run services remove-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--all | --condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Remove an IAM policy binding from the IAM policy of a service. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To remove an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To remove an IAM policy binding which expires at the end of the year 2019 - for the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud beta run services remove-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -101,47 +88,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --all - Remove all bindings with this role and principal, irrespective of any - conditions. - - --condition=[KEY=VALUE,...] - The condition of the binding that you want to remove. When the - condition is explicitly specified as None (--condition=None), a - binding without a condition is removed. Otherwise, only a binding - with a condition that exactly matches the specified condition - (including the optional description) is removed. For more on - conditions, refer to the conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/beta/services/api-keys/undelete b/gcloud/beta/services/api-keys/undelete index 1a6b38897..eaa873722 100644 --- a/gcloud/beta/services/api-keys/undelete +++ b/gcloud/beta/services/api-keys/undelete @@ -14,19 +14,19 @@ DESCRIPTION EXAMPLES UnDelete an API Key (Key or key-string should be specified): - To undelete with key `1234`, run: + To undelete with key 1234, run: $ gcloud beta services api-keys undelete 1234 - To undelete with `1234` in project - `myproject` using the fully qualified API key name, run: + To undelete with 1234 in project myproject using the fully qualified API + key name, run: $ gcloud beta services api-keys undelete \ projects/myproject/locations/global/keys/1234 - To undelete using a Key-string, run: + To undelete using a Key-string, run: - $gcloud beta services api-keys undelete --key-string='my-key-string' + $ gcloud beta services api-keys undelete --key-string='my-key-string' POSITIONAL ARGUMENTS Exactly one of these must be specified: diff --git a/gcloud/beta/workstations/configs/help b/gcloud/beta/workstations/configs/help index f6844e16d..e8fa0a793 100644 --- a/gcloud/beta/workstations/configs/help +++ b/gcloud/beta/workstations/configs/help @@ -28,6 +28,9 @@ COMMANDS list (BETA) List workstation configurations. + update + (BETA) Updates a workstation configuration. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/workstations/configs/update b/gcloud/beta/workstations/configs/update new file mode 100644 index 000000000..f8f19ff59 --- /dev/null +++ b/gcloud/beta/workstations/configs/update @@ -0,0 +1,212 @@ +NAME + gcloud beta workstations configs update - updates a workstation + configuration + +SYNOPSIS + gcloud beta workstations configs update + (CONFIG : --cluster=CLUSTER --region=REGION) [--async] + [--boot-disk-size=BOOT_DISK_SIZE] + [--container-args=[CONTAINER_ARGS,...]] + [--container-command=[CONTAINER_COMMAND,...]] + [--container-env=[CONTAINER_ENV,...]] + [--container-run-as-user=CONTAINER_RUN_AS_USER] + [--container-working-dir=CONTAINER_WORKING_DIR] + [--disable-public-ip-addresses] [--enable-confidential-compute] + [--idle-timeout=IDLE_TIMEOUT] [--machine-type=MACHINE_TYPE] + [--network-tags=[NETWORK_TAGS,...]] [--pool-size=POOL_SIZE] + [--running-timeout=RUNNING_TIMEOUT] [--service-account=SERVICE_ACCOUNT] + [--shielded-integrity-monitoring] [--shielded-secure-boot] + [--shielded-vtpm] + [--container-custom-image=CONTAINER_CUSTOM_IMAGE + | --container-predefined-image=CONTAINER_PREDEFINED_IMAGE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Updates a workstation configuration. + +EXAMPLES + To update a configuration with the 'e2-standard-8' machine type and a + IntelliJ image, run: + + $ gcloud beta workstations configs update CONFIG \ + --machine-type=e2-standard-8 \ + --container-predefined-image=intellij + + To update a configuration to disable Secure Boot, virtual trusted platform + module (vTPM) and integrity monitoring, run: + + $ gcloud beta workstations configs update CONFIG \ + --no-shielded-secure-boot --no-shielded-vtpm \ + --no-shielded-integrity-monitoring + +POSITIONAL ARGUMENTS + Config resource - The group of arguments defining a config The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. To set the project attribute: + ◆ provide the argument config on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + CONFIG + ID of the config or fully qualified identifier for the config. To set + the config attribute: + ▸ provide the argument config on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --cluster=CLUSTER + The cluster for the config. To set the cluster attribute: + ▸ provide the argument config on the command line with a fully + specified name; + ▸ provide the argument --cluster on the command line. + + --region=REGION + The location for the config. To set the region attribute: + ▸ provide the argument config on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --boot-disk-size=BOOT_DISK_SIZE + Size of the boot disk in GB. + + --container-args=[CONTAINER_ARGS,...] + Arguments passed to the entrypoint. + + Example: + + $ gcloud beta workstations configs update \ + --container-args=arg_1,arg_2 + + --container-command=[CONTAINER_COMMAND,...] + If set, overrides the default ENTRYPOINT specified by the image. + + Example: + + $ gcloud beta workstations configs update \ + --container-command=executable,parameter_1,parameter_2 + + --container-env=[CONTAINER_ENV,...] + Environment variables passed to the container. + + Example: + + $ gcloud beta workstations configs update \ + --container-env=key1=value1,key2=value2 + + --container-run-as-user=CONTAINER_RUN_AS_USER + If set, overrides the USER specified in the image with the given uid. + + --container-working-dir=CONTAINER_WORKING_DIR + If set, overrides the default DIR specified by the image. + + --disable-public-ip-addresses + Default value is false. If set, instances will have no public IP + address. + + --enable-confidential-compute + Default value is false. If set, instances will have confidential + compute enabled. + + --idle-timeout=IDLE_TIMEOUT + How long (in seconds) to wait before automatically stopping an instance + that hasn't received any user traffic. A value of 0 indicates that this + instance should never time out due to idleness. + + --machine-type=MACHINE_TYPE + Machine type determines the specifications of the Compute Engine + machines that the workstations created under this configuration will + run on. MACHINE_TYPE must be one of: e2-standard-2, e2-standard-4, + e2-standard-8, e2-standard-16, e2-standard-32, n2-standard-8, + n1-standard-4, t2d-standard-6, n2d-standard-2, n2d-standard-4, + n2d-standard-8, n2d-standard-16, n2d-standard-32. + + --network-tags=[NETWORK_TAGS,...] + Network tags to add to the Google Compute Engine machines backing the + Workstations. + + Example: + + $ gcloud beta workstations configs update --network-tags=tag_1,tag_2 + + --pool-size=POOL_SIZE + Number of instances to pool for faster Workstation starup. + + --running-timeout=RUNNING_TIMEOUT + How long (in seconds) to wait before automatically stopping a + workstation after it started. A value of 0 indicates that workstations + using this config should never time out. + + --service-account=SERVICE_ACCOUNT + Email address of the service account that will be used on VM instances + used to support this config. This service account must have permission + to pull the specified container image. If not set, VMs will run without + a service account, in which case the image must be publicly accessible. + + --shielded-integrity-monitoring + Default value is false. If set, instances will have integrity + monitoring enabled. + + --shielded-secure-boot + Default value is false. If set, instances will have Secure Boot + enabled. + + --shielded-vtpm + Default value is false. If set, instances will have vTPM enabled. + + At most one of these can be specified: + + --container-custom-image=CONTAINER_CUSTOM_IMAGE + A docker image for the workstation. This image must be accessible by + the service account configured in this configuration + (--service-account). If no service account is defined, this image + must be public. + + --container-predefined-image=CONTAINER_PREDEFINED_IMAGE + Code editor on base images. CONTAINER_PREDEFINED_IMAGE must be one + of: + + base-image + Base image - no IDE + clion + CLion + codeoss + Code OSS + goland + GoLand + intellij + IntelliJ IDEA Ultimate + phpstorm + PhpStorm + pycharm + PyCharm Professional + rider + Rider + rubymine + RubyMine + webstorm + WebStorm + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha workstations configs update + diff --git a/gcloud/beta/workstations/help b/gcloud/beta/workstations/help index ae94ce111..884d1c1ea 100644 --- a/gcloud/beta/workstations/help +++ b/gcloud/beta/workstations/help @@ -36,6 +36,9 @@ COMMANDS list (BETA) List workstations. + ssh + (BETA) SSH into a running workstation. + start (BETA) Start a workstation. diff --git a/gcloud/beta/workstations/ssh b/gcloud/beta/workstations/ssh new file mode 100644 index 000000000..43a990c40 --- /dev/null +++ b/gcloud/beta/workstations/ssh @@ -0,0 +1,98 @@ +NAME + gcloud beta workstations ssh - SSH into a running workstation + +SYNOPSIS + gcloud beta workstations ssh + (WORKSTATION : --cluster=CLUSTER --config=CONFIG --region=REGION) + [--command=COMMAND] [--port=PORT; default=22] + [--user=USER; default="user"] [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] + +DESCRIPTION + (BETA) SSH into a running workstation. + +EXAMPLES + To ssh into a running workstation, run: + + $ gcloud beta workstations ssh WORKSTATION + + To specify the workstation port, run: + + $ gcloud beta workstations ssh WORKSTATION --port=22 + + To ssh into a running workstation with a username, run: + + $ gcloud beta workstations ssh WORKSTATION --user=my-user + + To run a command on the workstation, such as getting a snapshot of the + guest's process tree, run: $ gcloud beta workstations ssh WORKSTATION --command="ps -ejH" + +POSITIONAL ARGUMENTS + Workstation resource - The group of arguments defining a workstation The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument workstation on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + WORKSTATION + ID of the workstation or fully qualified identifier for the + workstation. To set the workstation attribute: + ▸ provide the argument workstation on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --cluster=CLUSTER + The cluster for the workstation. To set the cluster attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --cluster on the command line. + + --config=CONFIG + The config for the workstation. To set the config attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --config on the command line. + + --region=REGION + The location for the workstation. To set the region attribute: + ▸ provide the argument workstation on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + [-- SSH_ARGS ...] + Flags and positionals passed to the underlying ssh implementation. + + The '--' argument must be specified between gcloud specific args on the + left and SSH_ARGS on the right. + +FLAGS + --command=COMMAND + A command to run on the workstation. + + Runs the command on the target workstation and then exits. + + --port=PORT; default=22 + The port on the workstation to which traffic should be sent. + + --user=USER; default="user" + The username with which to SSH. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha workstations ssh + diff --git a/gcloud/bms/instances/disable-serial-console b/gcloud/bms/instances/disable-serial-console new file mode 100644 index 000000000..eea609ad3 --- /dev/null +++ b/gcloud/bms/instances/disable-serial-console @@ -0,0 +1,66 @@ +NAME + gcloud bms instances disable-serial-console - disable interactive serial + console for a Bare Metal Solution instance + +SYNOPSIS + gcloud bms instances disable-serial-console (INSTANCE : --region=REGION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Disables interactive serial console for a Bare Metal Solution instance. + +EXAMPLES + To disable interactive serial console for an instance named test-instance, + run: + + $ gcloud bms instances disable-serial-console test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to disable interactive serial console for. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. To + set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This variant is also available: + + $ gcloud alpha bms instances disable-serial-console + diff --git a/gcloud/bms/instances/enable-serial-console b/gcloud/bms/instances/enable-serial-console new file mode 100644 index 000000000..c92a7e2bb --- /dev/null +++ b/gcloud/bms/instances/enable-serial-console @@ -0,0 +1,66 @@ +NAME + gcloud bms instances enable-serial-console - enable interactive serial + console for a Bare Metal Solution instance + +SYNOPSIS + gcloud bms instances enable-serial-console (INSTANCE : --region=REGION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Enables interactive serial console for a Bare Metal Solution instance. + +EXAMPLES + To enable interactive serial console for an instance named test-instance, + run: + + $ gcloud bms instances enable-serial-console test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to enable interactive serial console for. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. To + set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This variant is also available: + + $ gcloud alpha bms instances enable-serial-console + diff --git a/gcloud/bms/instances/help b/gcloud/bms/instances/help index b61068326..45cb90c45 100644 --- a/gcloud/bms/instances/help +++ b/gcloud/bms/instances/help @@ -18,6 +18,12 @@ COMMANDS describe Describe a Bare Metal solution instance. + disable-serial-console + Disable interactive serial console for a Bare Metal Solution instance. + + enable-serial-console + Enable interactive serial console for a Bare Metal Solution instance. + list List Bare Metal Solution instances in a project. diff --git a/gcloud/compute/commitments/update b/gcloud/compute/commitments/update index 418a4cf7f..caafa5510 100644 --- a/gcloud/compute/commitments/update +++ b/gcloud/compute/commitments/update @@ -2,7 +2,7 @@ NAME gcloud compute commitments update - update Compute Engine commitments SYNOPSIS - gcloud compute commitments update COMMITMENT [--auto-renew] + gcloud compute commitments update COMMITMENT [--auto-renew] [--plan=PLAN] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -15,6 +15,18 @@ EXAMPLES $ gcloud compute commitments update commitment-1 --auto-renew \ --region=us-central1 + To disable auto renewal on a commitment called commitment-1 in the + us-central1 region, run: + + $ gcloud compute commitments update commitment-1 --no-auto-renew \ + --region=us-central1 + + To upgrade the term of a commitment called commitment-1 from 12-month to + 36-month, in the us-central1 region, run: + + $ gcloud compute commitments update commitment-1 --plan=36-month \ + --region=us-central1 + POSITIONAL ARGUMENTS COMMITMENT Name of the commitment to update. @@ -23,6 +35,10 @@ FLAGS --auto-renew Enable auto renewal for the commitment. + --plan=PLAN + Duration of the commitment. PLAN must be (only one value is supported): + 36-month. + --region=REGION Region of the commitment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/compute/images/import b/gcloud/compute/images/import index afda5be17..8f819dce6 100644 --- a/gcloud/compute/images/import +++ b/gcloud/compute/images/import @@ -117,7 +117,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --log-location=LOG_LOCATION diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create index 8843ede15..b46bb67fd 100644 --- a/gcloud/compute/instance-templates/create +++ b/gcloud/compute/instance-templates/create @@ -17,6 +17,8 @@ SYNOPSIS [--external-ipv6-address=EXTERNAL_IPV6_ADDRESS] [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] @@ -363,10 +365,23 @@ FLAGS Default. Stop the VM without preserving memory. The VM can be restarted later. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to the instance that + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/compute/instances/create b/gcloud/compute/instances/create index aa995374b..eab3ae70c 100644 --- a/gcloud/compute/instances/create +++ b/gcloud/compute/instances/create @@ -20,6 +20,8 @@ SYNOPSIS [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] [--hostname=HOSTNAME] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--ipv6-public-ptr-domain=IPV6_PUBLIC_PTR_DOMAIN] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] @@ -430,10 +432,23 @@ FLAGS Default. Stop the VM without preserving memory. The VM can be restarted later. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to the instance that + is created. The address must be the first IP address in the range or + from a /96 IP address range. This option can be used only when creating + a single instance. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range. It should be used together with --internal-ipv6-address. + Only /96 IP address range is supported and the default value is 96. If + not set, either the prefix length from --internal-ipv6-address will be + used or the default value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. @@ -597,6 +612,13 @@ FLAGS Specifies the Network Interface Controller (NIC) type for the interface. NIC_TYPE must be one of: GVNIC, VIRTIO_NET. + queue-count + Specifies the networking queue count for this interface. Both Rx + and Tx queues will be set to this number. If it's not specified, a + default queue count will be assigned. For Virtio-net, each + interface will get min(floor(#vCPU / #vNIC), 32) queues. For gVNIC, + each interface will get min(floor(#vCPU / #vNIC / 2), 16) qeueus. + stack-type Specifies whether IPv6 is enabled on the interface. STACK_TYPE must be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY. diff --git a/gcloud/compute/instances/import b/gcloud/compute/instances/import index 231162fc8..36425332e 100644 --- a/gcloud/compute/instances/import +++ b/gcloud/compute/instances/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --hostname=HOSTNAME diff --git a/gcloud/compute/instances/network-interfaces/update b/gcloud/compute/instances/network-interfaces/update index 22b688e9e..b9f566e5f 100644 --- a/gcloud/compute/instances/network-interfaces/update +++ b/gcloud/compute/instances/network-interfaces/update @@ -6,6 +6,8 @@ SYNOPSIS gcloud compute instances network-interfaces update INSTANCE_NAME [--aliases=ALIASES] [--external-ipv6-address=EXTERNAL_IPV6_ADDRESS] [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] + [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] + [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--network=NETWORK] [--network-interface=NETWORK_INTERFACE; default="nic0"] [--private-network-ip=PRIVATE_NETWORK_IP] [--stack-type=STACK_TYPE] @@ -53,10 +55,24 @@ FLAGS be used together with --external-ipv6-address. Currently only /96 is supported and the default value is 96. + --internal-ipv6-address=INTERNAL_IPV6_ADDRESS + Assigns the given internal IPv6 address or range to an instance. The + address must be the first IP address in the range or a /96 IP address + range. This option can only be used on a dual stack instance network + interface. + + --internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH + Optional field that indicates the prefix length of the internal IPv6 + address range, should be used together with + --internal-ipv6-address=fd20::. Only /96 IP address range is supported + and the default value is 96. If not set, then either the prefix length + from --internal-ipv6-address=fd20::/96 will be used or the default + value of 96 will be assigned. + --ipv6-network-tier=IPV6_NETWORK_TIER Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. IPV6_NETWORK_TIER must - be (currently only one value is supported): + be (only one value is supported): PREMIUM High quality, Google-grade network tier. diff --git a/gcloud/compute/machine-images/import b/gcloud/compute/machine-images/import index 467f24090..10fc2d3a6 100644 --- a/gcloud/compute/machine-images/import +++ b/gcloud/compute/machine-images/import @@ -124,7 +124,7 @@ OPTIONAL FLAGS Enables one or more features for VM instances that use the image for their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. - GUEST_OS_FEATURE must be (currently only one value is supported): + GUEST_OS_FEATURE must be (only one value is supported): UEFI_COMPATIBLE. --labels=[KEY=VALUE,...] diff --git a/gcloud/compute/networks/subnets/update b/gcloud/compute/networks/subnets/update index b5cba7d77..9f20164ea 100644 --- a/gcloud/compute/networks/subnets/update +++ b/gcloud/compute/networks/subnets/update @@ -146,7 +146,7 @@ FLAGS --purpose=PURPOSE The purpose of the subnetwork is set to REGIONAL_MANAGED_PROXY to migrate from the INTERNAL_HTTPS_LOAD_BALANCER purpose. PURPOSE must - be (currently only one value is supported): + be (only one value is supported): REGIONAL_MANAGED_PROXY The proxy-only subnet for regional HTTP(S) load balancers. @@ -166,7 +166,7 @@ FLAGS This field is only valid when updating a reserved IP address range used for the purpose of Internal HTTP(S) Load Balancer. - ROLE must be (currently only one value is supported): + ROLE must be (only one value is supported): ACTIVE The ACTIVE subnet that is currently used. diff --git a/gcloud/compute/public-advertised-prefixes/update b/gcloud/compute/public-advertised-prefixes/update index e75cd9611..3a3371082 100644 --- a/gcloud/compute/public-advertised-prefixes/update +++ b/gcloud/compute/public-advertised-prefixes/update @@ -18,8 +18,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --status=STATUS - The status of public advertised prefix. STATUS must be (currently only - one value is supported): ptr-configured. + The status of public advertised prefix. STATUS must be (only one value + is supported): ptr-configured. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/compute/routers/add-bgp-peer b/gcloud/compute/routers/add-bgp-peer index edf16797d..18bc06b8a 100644 --- a/gcloud/compute/routers/add-bgp-peer +++ b/gcloud/compute/routers/add-bgp-peer @@ -141,7 +141,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/compute/routers/create b/gcloud/compute/routers/create index 27cb8536f..e14c38d4c 100644 --- a/gcloud/compute/routers/create +++ b/gcloud/compute/routers/create @@ -90,7 +90,7 @@ OPTIONAL FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/compute/routers/update b/gcloud/compute/routers/update index 8af0ed703..c4dfda0d7 100644 --- a/gcloud/compute/routers/update +++ b/gcloud/compute/routers/update @@ -80,7 +80,7 @@ FLAGS this router. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -101,7 +101,7 @@ FLAGS this router. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -122,7 +122,7 @@ FLAGS the current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/compute/routers/update-bgp-peer b/gcloud/compute/routers/update-bgp-peer index 2edeb25ef..7f64893da 100644 --- a/gcloud/compute/routers/update-bgp-peer +++ b/gcloud/compute/routers/update-bgp-peer @@ -127,7 +127,7 @@ OPTIONAL FLAGS this peer. This list can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -148,7 +148,7 @@ OPTIONAL FLAGS this peer. This list is appended to any existing advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any @@ -169,7 +169,7 @@ OPTIONAL FLAGS current set of custom advertisements. This field can only be specified in custom advertisement mode. - GROUP must be (currently only one value is supported): + GROUP must be (only one value is supported): ALL_SUBNETS Automatically advertise all available subnets. This excludes any diff --git a/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion new file mode 100644 index 000000000..db92d5de7 --- /dev/null +++ b/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -0,0 +1,146 @@ +NAME + gcloud compute security-policies rules add-preconfig-waf-exclusion - add an + exclusion configuration for preconfigured WAF evaluation into a + security policy rule + +SYNOPSIS + gcloud compute security-policies rules add-preconfig-waf-exclusion PRIORITY + --target-rule-set=TARGET_RULE_SET + [--request-cookie-to-exclude=[op=OP],[val=VAL]] + [--request-header-to-exclude=[op=OP],[val=VAL]] + [--request-query-param-to-exclude=[op=OP],[val=VAL]] + [--request-uri-to-exclude=[op=OP],[val=VAL]] + [--security-policy=SECURITY_POLICY] [--target-rule-ids=[RULE_ID,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute security-policies rules add-preconfig-waf-exclusion is used + to add an exclusion configuration for preconfigured WAF evaluation into a + security policy rule. + + Note that request field exclusions are associated with a target, which can + be a single rule set, or a rule set plus a list of rule IDs under the rule + set. + +EXAMPLES + To add specific request field exclusions that are associated with the + target of 'sqli-stable': ['owasp-crs-v030001-id942110-sqli', + 'owasp-crs-v030001-id942120-sqli'], run: + + $ gcloud compute security-policies rules \ + add-preconfig-waf-exclusion 1000 --security-policy=my-policy \ + --target-rule-set=sqli-stable \ + --target-rule-ids=owasp-crs-v030001-id942110-sqli,\ + owasp-crs-v030001-id942120-sqli \ + --request-header-to-exclude=op=EQUALS,val=abc \ + --request-header-to-exclude=op=STARTS_WITH,val=xyz \ + --request-uri-to-exclude=op=EQUALS_ANY + + To add specific request field exclusions that are associated with the + target of 'sqli-stable': [], run: + + $ gcloud compute security-policies rules \ + add-preconfig-waf-exclusion 1000 --security-policy=my-policy \ + --target-rule-set=sqli-stable \ + --request-cookie-to-exclude=op=EQUALS_ANY + +POSITIONAL ARGUMENTS + PRIORITY + The priority of the rule to add the exclusion configuration for + preconfigured WAF evaluation. Rules are evaluated in order from highest + priority to lowest priority where 0 is the highest priority and + 2147483647 is the lowest priority. + +REQUIRED FLAGS + --target-rule-set=TARGET_RULE_SET + Target WAF rule set where the request field exclusions being added + would apply. + + This, together with the target rule IDs (if given), determines the + target for associating request field exclusions. See --target-rule-ids. + +OPTIONAL FLAGS + --request-cookie-to-exclude=[op=OP],[val=VAL] + Adds a request cookie to the request field exclusions associated with + the rule set and rule IDs (if given). This specifies a request cookie + whose value will be excluded from inspection during preconfigured WAF + evaluation. + + You can specify an exact match or a partial match by using a field + operator and a field value. Available field operators are: + ◆ EQUALS: the operator matches if the field value equals the + specified value. + ◆ STARTS_WITH: the operator matches if the field value starts with + the specified value. + ◆ ENDS_WITH: the operator matches if the field value ends with the + specified value. + ◆ CONTAINS: the operator matches if the field value contains the + specified value. + ◆ EQUALS_ANY: the operator matches if the field value is any value. + + A field value must be given if the field operator is not EQUALS_ANY, + and cannot be given if the field operator is EQUALS_ANY. For example, + --request-header-to-exclude op=EQUALS,val=abc or + --request-header-to-exclude op=EQUALS_ANY. + + This flag can be repeated to specify multiple request headers to + exclude. For example, --request-header-to-exclude op=EQUALS,val=abc + --request-header-to-exclude op=STARTS_WITH,val=xyz. + + --request-header-to-exclude=[op=OP],[val=VAL] + Adds a request header to the request field exclusions associated with + the rule set and rule IDs (if given). This specifies a request header + whose value will be excluded from inspection during preconfigured WAF + evaluation. + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request headers. + + --request-query-param-to-exclude=[op=OP],[val=VAL] + Adds a request query parameter to the request field exclusions + associated with the rule set and rule IDs (if given). This specifies a + request query parameter in the query string or in the POST body whose + value will be excluded from inspection during preconfigured WAF + evaluation. + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request query parameters. + + --request-uri-to-exclude=[op=OP],[val=VAL] + Adds a request URI to the request field exclusions associated with the + rule set and rule IDs (if given). This specifies a request URI from the + request line to be excluded from inspection during preconfigured WAF + evaluation. + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request URIs. + + --security-policy=SECURITY_POLICY + The security policy that this rule belongs to. + + --target-rule-ids=[RULE_ID,...] + A comma-separated list of target rule IDs under the WAF rule set where + the request field exclusions being added would apply. If omitted, the + added request field exclusions will be associated with the rule set + only, which would apply to all the rule IDs under the rule set. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha compute security-policies rules \ + add-preconfig-waf-exclusion + + $ gcloud beta compute security-policies rules \ + add-preconfig-waf-exclusion + diff --git a/gcloud/compute/security-policies/rules/create b/gcloud/compute/security-policies/rules/create index 7e37fafb1..cbf250836 100644 --- a/gcloud/compute/security-policies/rules/create +++ b/gcloud/compute/security-policies/rules/create @@ -102,8 +102,8 @@ OPTIONAL FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/compute/security-policies/rules/help b/gcloud/compute/security-policies/rules/help index 36a0e3789..c3b845f94 100644 --- a/gcloud/compute/security-policies/rules/help +++ b/gcloud/compute/security-policies/rules/help @@ -16,6 +16,10 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + add-preconfig-waf-exclusion + Add an exclusion configuration for preconfigured WAF evaluation into a + security policy rule. + create Create a Compute Engine security policy rule. @@ -25,6 +29,10 @@ COMMANDS describe Describe a Compute Engine security policy rule. + remove-preconfig-waf-exclusion + Remove an exclusion configuration for preconfigured WAF evaluation from + a security policy rule. + update Update a Compute Engine security policy rule. diff --git a/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion new file mode 100644 index 000000000..0e4e022fe --- /dev/null +++ b/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -0,0 +1,164 @@ +NAME + gcloud compute security-policies rules remove-preconfig-waf-exclusion - + remove an exclusion configuration for preconfigured WAF evaluation from + a security policy rule + +SYNOPSIS + gcloud compute security-policies rules remove-preconfig-waf-exclusion + PRIORITY --target-rule-set=TARGET_RULE_SET + [--request-cookie-to-exclude=[op=OP],[val=VAL]] + [--request-header-to-exclude=[op=OP],[val=VAL]] + [--request-query-param-to-exclude=[op=OP],[val=VAL]] + [--request-uri-to-exclude=[op=OP],[val=VAL]] + [--security-policy=SECURITY_POLICY] [--target-rule-ids=[RULE_ID,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute security-policies rules remove-preconfig-waf-exclusion is + used to remove an exclusion configuration for preconfigured WAF evaluation + from a security policy rule. + + Note that request field exclusions are associated with a target, which can + be a single rule set, or a rule set plus a list of rule IDs under the rule + set. + + It is possible to remove request field exclusions at 3 levels: + ▪ Remove specific request field exclusions that are associated with a + matching target. + ▪ Remove all the request field exclusions that are associated with a + matching target. + ▪ Remove all the request field exclusions that are configured under the + security policy rule, regardless of the target. + +EXAMPLES + To remove specific request field exclusions that are associated with the + target of 'sqli-stable': ['owasp-crs-v030001-id942110-sqli', + 'owasp-crs-v030001-id942120-sqli'], run: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion 1000 \ + --security-policy=my-policy --target-rule-set=sqli-stable \ + --target-rule-ids=owasp-crs-v030001-id942110-sqli,\ + owasp-crs-v030001-id942120-sqli \ + --request-header-to-exclude=op=EQUALS,val=abc \ + --request-header-to-exclude=op=STARTS_WITH,val=xyz \ + --request-uri-to-exclude=op=EQUALS_ANY + + To remove all the request field exclusions that are associated with the + target of 'sqli-stable': ['owasp-crs-v030001-id942110-sqli', + 'owasp-crs-v030001-id942120-sqli'], run: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion 1000 \ + --security-policy=my-policy --target-rule-set=sqli-stable \ + --target-rule-ids=owasp-crs-v030001-id942110-sqli,\ + owasp-crs-v030001-id942120-sqli + + To remove all the request field exclusions that are associated with the + target of 'sqli-stable': [], run: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion 1000 \ + --security-policy=my-policy --target-rule-set=sqli-stable + + To remove all the request field exclusions that are configured under the + security policy rule, regardless of the target, run: + + $ gcloud compute security-policies rules \ + remove-preconfig-waf-exclusion 1000 \ + --security-policy=my-policy --target-rule-set=* + +POSITIONAL ARGUMENTS + PRIORITY + The priority of the rule to remove the exclusion configuration for + preconfigured WAF evaluation. Rules are evaluated in order from highest + priority to lowest priority where 0 is the highest priority and + 2147483647 is the lowest priority. + +REQUIRED FLAGS + --target-rule-set=TARGET_RULE_SET + Target WAF rule set from where to remove the request field exclusions. + + This, together with the target rule IDs (if given), determines the + target for associating request field exclusions. See --target-rule-ids. + + Note that the removal of request field exclusions is restricted to + those associated with a matching target. Set this flag to * if you want + to remove request field exclusions regardless of the target. + +OPTIONAL FLAGS + --request-cookie-to-exclude=[op=OP],[val=VAL] + Removes a request cookie from the existing request field exclusions + associated with the rule set and rule IDs (if given). + + You can specify an exact match or a partial match by using a field + operator and a field value. Available field operators are: + ◆ EQUALS: the operator matches if the field value equals the + specified value. + ◆ STARTS_WITH: the operator matches if the field value starts with + the specified value. + ◆ ENDS_WITH: the operator matches if the field value ends with the + specified value. + ◆ CONTAINS: the operator matches if the field value contains the + specified value. + ◆ EQUALS_ANY: the operator matches if the field value is any value. + + A field value must be given if the field operator is not EQUALS_ANY, + and cannot be given if the field operator is EQUALS_ANY. For example, + --request-header-to-exclude op=EQUALS,val=abc or + --request-header-to-exclude op=EQUALS_ANY. + + This flag can be repeated to specify multiple request headers to + exclude. For example, --request-header-to-exclude op=EQUALS,val=abc + --request-header-to-exclude op=STARTS_WITH,val=xyz. + + --request-header-to-exclude=[op=OP],[val=VAL] + Removes a request header from the existing request field exclusions + associated with the rule set and rule IDs (if given). + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request headers. + + --request-query-param-to-exclude=[op=OP],[val=VAL] + Removes a request query parameter from the existing request field + exclusions associated with the rule set and rule IDs (if given). + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request query parameters. + + --request-uri-to-exclude=[op=OP],[val=VAL] + Removes a request URI from the existing request field exclusions + associated with the rule set and rule IDs (if given). + + Refer to the syntax under --request-cookie-to-exclude. + + This flag can be repeated to specify multiple request URIs. + + --security-policy=SECURITY_POLICY + The security policy that this rule belongs to. + + --target-rule-ids=[RULE_ID,...] + A comma-separated list of target rule IDs under the WAF rule set from + where to remove the request field exclusions. If omitted, the removal + of request field exclusions is restricted to those associated with the + rule set only, without specific rule IDs. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha compute security-policies rules \ + remove-preconfig-waf-exclusion + + $ gcloud beta compute security-policies rules \ + remove-preconfig-waf-exclusion + diff --git a/gcloud/compute/security-policies/rules/update b/gcloud/compute/security-policies/rules/update index 213517248..16690b5c8 100644 --- a/gcloud/compute/security-policies/rules/update +++ b/gcloud/compute/security-policies/rules/update @@ -91,8 +91,8 @@ FLAGS --conform-action=CONFORM_ACTION Action to take when requests are under the given threshold. When requests are throttled, this is also the action for all requests which - are not dropped. CONFORM_ACTION must be (currently only one value is - supported): allow. + are not dropped. CONFORM_ACTION must be (only one value is supported): + allow. --description=DESCRIPTION An optional, textual description for the rule. diff --git a/gcloud/container/azure/clusters/update b/gcloud/container/azure/clusters/update index 57e118440..1cc9aa67d 100644 --- a/gcloud/container/azure/clusters/update +++ b/gcloud/container/azure/clusters/update @@ -10,7 +10,8 @@ SYNOPSIS [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] [--clear-description | --description=DESCRIPTION] [--client=CLIENT | --azure-application-id=AZURE_APPLICATION_ID - --azure-tenant-id=AZURE_TENANT_ID] [GCLOUD_WIDE_FLAG ...] + --azure-tenant-id=AZURE_TENANT_ID --clear-client] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update an Anthos cluster on Azure. @@ -129,6 +130,11 @@ FLAGS --azure-tenant-id=AZURE_TENANT_ID ID of the Azure Tenant to manage Azure resources. + --clear-client + Clear the Azure client. This flag is required when updating to use + Azure workload identity federation from Azure client to manage + Azure resources. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/dataplex/content/create b/gcloud/dataplex/content/create index d5820eaad..6a971d0c9 100644 --- a/gcloud/dataplex/content/create +++ b/gcloud/dataplex/content/create @@ -32,8 +32,8 @@ REQUIRED FLAGS Notebook related configurations. --kernel-type=KERNEL_TYPE - Kernel Type of the notebook. KERNEL_TYPE must be (currently only - one value is supported): + Kernel Type of the notebook. KERNEL_TYPE must be (only one value is + supported): PYTHON3 python3 @@ -42,7 +42,7 @@ REQUIRED FLAGS --query-engine=QUERY_ENGINE Query Engine to be used for the Sql Query. QUERY_ENGINE must be - (currently only one value is supported): + (only one value is supported): SPARK spark diff --git a/gcloud/dataplex/content/update b/gcloud/dataplex/content/update index cd993bf08..09993b389 100644 --- a/gcloud/dataplex/content/update +++ b/gcloud/dataplex/content/update @@ -83,8 +83,8 @@ FLAGS Notebook related configurations. --kernel-type=KERNEL_TYPE - Kernel Type of the notebook. KERNEL_TYPE must be (currently only - one value is supported): + Kernel Type of the notebook. KERNEL_TYPE must be (only one value is + supported): PYTHON3 python3 @@ -93,7 +93,7 @@ FLAGS --query-engine=QUERY_ENGINE Query Engine to be used for the Sql Query. QUERY_ENGINE must be - (currently only one value is supported): + (only one value is supported): SPARK spark diff --git a/gcloud/dns/record-sets/create b/gcloud/dns/record-sets/create index 169f548a1..c89b6a6a0 100644 --- a/gcloud/dns/record-sets/create +++ b/gcloud/dns/record-sets/create @@ -144,8 +144,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/dns/record-sets/update b/gcloud/dns/record-sets/update index 88a4f3ae8..df10023c6 100644 --- a/gcloud/dns/record-sets/update +++ b/gcloud/dns/record-sets/update @@ -112,8 +112,8 @@ REQUIRED FLAGS --routing-policy-backup-data-type=ROUTING_POLICY_BACKUP_DATA_TYPE For FAILOVER routing policies, the type of routing policy the backup data uses. Currently, this must be GEO. - ROUTING_POLICY_BACKUP_DATA_TYPE must be (currently only one - value is supported): GEO. + ROUTING_POLICY_BACKUP_DATA_TYPE must be (only one value is + supported): GEO. This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/domains/registrations/configure/contacts b/gcloud/domains/registrations/configure/contacts index 5d5017082..ebf189917 100644 --- a/gcloud/domains/registrations/configure/contacts +++ b/gcloud/domains/registrations/configure/contacts @@ -155,8 +155,8 @@ OTHER FLAGS complete. --notices=[NOTICE,...] - Notices about special properties of contacts. NOTICE must be (currently - only one value is supported): + Notices about special properties of contacts. NOTICE must be (only one + value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/domains/registrations/transfer b/gcloud/domains/registrations/transfer index 1eb1b70a0..c569e35d3 100644 --- a/gcloud/domains/registrations/transfer +++ b/gcloud/domains/registrations/transfer @@ -206,7 +206,7 @@ OTHER FLAGS --notices=[NOTICE,...] Notices about special properties of certain domains or contacts. NOTICE - must be (currently only one value is supported): + must be (only one value is supported): public-contact-data-acknowledgement By sending this notice you acknowledge that using diff --git a/gcloud/functions/deploy b/gcloud/functions/deploy index c7b9d8dfa..52359cdc2 100644 --- a/gcloud/functions/deploy +++ b/gcloud/functions/deploy @@ -521,14 +521,27 @@ FLAGS --clear-vpc-connector Clears the VPC connector field. - --vpc-connector=VPC_CONNECTOR - The VPC Access connector that the function can connect to. It can be - either the fully-qualified URI, or the short name of the VPC Access - connector resource. If the short name is used, the connector must - belong to the same project. The format of this field is either - projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} or - ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access - connector. + Connector resource - The VPC Access connector that the function can + connect to. It can be either the fully-qualified URI, or the short name + of the VPC Access connector resource. If the short name is used, the + connector must belong to the same project. The format of this field is + either projects/${PROJECT}/locations/${LOCATION}/connectors/${CONNECTOR} + or ${CONNECTOR}, where ${CONNECTOR} is the short name of the VPC Access + connector. This represents a Cloud resource. (NOTE) Some attributes are + not given arguments in this group but can be set in other ways. To set + the project attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. To set the region attribute: + ▸ provide the argument --vpc-connector on the command line with a + fully specified name; + ▸ provide the argument --region on the command line. + + --vpc-connector=VPC_CONNECTOR + ID of the connector or fully qualified identifier for the + connector. To set the connector attribute: + ▫ provide the argument --vpc-connector on the command line. If you don't specify a trigger when deploying an update to an existing function it will keep its current trigger. You must specify diff --git a/gcloud/healthcare/datasets/deidentify b/gcloud/healthcare/datasets/deidentify index 1822bfa7e..aaa7345ad 100644 --- a/gcloud/healthcare/datasets/deidentify +++ b/gcloud/healthcare/datasets/deidentify @@ -74,7 +74,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/healthcare/dicom-stores/deidentify b/gcloud/healthcare/dicom-stores/deidentify index 469de3bee..36aceae8b 100644 --- a/gcloud/healthcare/dicom-stores/deidentify +++ b/gcloud/healthcare/dicom-stores/deidentify @@ -79,7 +79,7 @@ OPTIONAL FLAGS --text-redaction-mode=TEXT_REDACTION_MODE Determines how to redact text from image. TEXT_REDACTION_MODE must be - (currently only one value is supported): + (only one value is supported): all Redact all text. diff --git a/gcloud/memcache/instances/create b/gcloud/memcache/instances/create index 8a4402f92..08caef2d1 100644 --- a/gcloud/memcache/instances/create +++ b/gcloud/memcache/instances/create @@ -104,7 +104,7 @@ OPTIONAL FLAGS --memcached-version=MEMCACHED_VERSION Optional major version of Memcached software to use with the instance. If not provided, default of "1.5" will be used. MEMCACHED_VERSION must - be (currently only one value is supported): + be (only one value is supported): 1.5 Memcached major version 1.5 diff --git a/gcloud/network-connectivity/internal-ranges/create b/gcloud/network-connectivity/internal-ranges/create index 730ade0ee..e990fda81 100644 --- a/gcloud/network-connectivity/internal-ranges/create +++ b/gcloud/network-connectivity/internal-ranges/create @@ -102,7 +102,7 @@ OPTIONAL FLAGS --overlaps=[OVERLAPS,...] Overlap specifications for the range being created. OVERLAPS must be - (currently only one value is supported): + (only one value is supported): overlap-route-range Allows for creation or existence of routes that have a more diff --git a/gcloud/recaptcha/keys/create b/gcloud/recaptcha/keys/create index 63b7eb68e..a0cfa465b 100644 --- a/gcloud/recaptcha/keys/create +++ b/gcloud/recaptcha/keys/create @@ -11,7 +11,7 @@ SYNOPSIS --security-preference=SECURITY_PREFERENCE --testing-challenge=TESTING_CHALLENGE]) [--labels=[KEY=VALUE,...]] [--testing-score=TESTING_SCORE] - [--waf-feature=WAF_FEATURE --waf-service=WAF_SERVICE] + [--waf-feature=WAF_FEATURE : --waf-service=WAF_SERVICE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -156,6 +156,9 @@ OPTIONAL FLAGS challenge-page Redirects suspicious traffic to reCAPTCHA challenge page. + express + Assesses requests without tokens or frontend integration. + session-token Use reCAPTCHA session-tokens to protect the whole user session on the site's domain. @@ -172,8 +175,8 @@ OPTIONAL FLAGS fastly Fastly - This flag argument must be specified if any of the other arguments in - this group are specified. + unspecified + No specified WAF service GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/resource-manager/tags/keys/create b/gcloud/resource-manager/tags/keys/create index 5b3aa393b..bb05e7d0f 100644 --- a/gcloud/resource-manager/tags/keys/create +++ b/gcloud/resource-manager/tags/keys/create @@ -46,8 +46,8 @@ FLAGS --purpose=PURPOSE Purpose specifier of the TagKey that can only be set on creation. Specifying this field adds additional validation from the policy system - that corresponds to the purpose. PURPOSE must be (currently only one - value is supported): GCE_FIREWALL. + that corresponds to the purpose. PURPOSE must be (only one value is + supported): GCE_FIREWALL. --purpose-data=[network=NETWORK] Purpose data of the TagKey that can only be set on creation. This data diff --git a/gcloud/run/services/add-iam-policy-binding b/gcloud/run/services/add-iam-policy-binding index b2cce61d7..4cd205d38 100644 --- a/gcloud/run/services/add-iam-policy-binding +++ b/gcloud/run/services/add-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud run services add-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Add an IAM policy binding to the IAM policy of a Cloud Run service. One - binding consists of a member, a role, and an optional condition. + binding consists of a member, and a role. EXAMPLES To add an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To add an IAM policy binding which expires at the end of the year 2019 for - the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud run services add-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -100,43 +87,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --condition=[KEY=VALUE,...] - A condition to include in the binding. When the condition is - explicitly specified as None (--condition=None), a binding without a - condition is added. When the condition is specified and is not None, - --role cannot be a basic role. Basic roles are roles/editor, - roles/owner, and roles/viewer. For more on conditions, refer to the - conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/run/services/remove-iam-policy-binding b/gcloud/run/services/remove-iam-policy-binding index fd533fa99..0c2110ca1 100644 --- a/gcloud/run/services/remove-iam-policy-binding +++ b/gcloud/run/services/remove-iam-policy-binding @@ -5,15 +5,13 @@ NAME SYNOPSIS gcloud run services remove-iam-policy-binding SERVICE --member=PRINCIPAL --role=ROLE [--platform=PLATFORM; default="managed"] - [--all | --condition=[KEY=VALUE,...] - | --condition-from-file=CONDITION_FROM_FILE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Remove an IAM policy binding from the IAM policy of a service. One binding - consists of a member, a role, and an optional condition. + consists of a member, and a role. EXAMPLES To remove an IAM policy binding for the role of 'roles/run.invoker' for the @@ -24,17 +22,6 @@ EXAMPLES --region='us-central1' --member='user:test-user@gmail.com' \ --role='roles/run.invoker' - To remove an IAM policy binding which expires at the end of the year 2019 - for the role of 'roles/run.invoker' and the user 'test-user@gmail.com' with - service 'my-service' and region 'us-central1', run: - - $ gcloud run services remove-iam-policy-binding my-service \ - --region='us-central1' --member='user:test-user@gmail.com' \ - --role='roles/run.invoker' \ - --condition='expression=request.time < - timestamp("2020-01-01T00:00:00Z"),title=expires_end_of_2019,descrip\ - tion=Expires at midnight on 2019-12-31' - See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. @@ -101,47 +88,6 @@ OPTIONAL FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - At most one of these can be specified: - - --all - Remove all bindings with this role and principal, irrespective of any - conditions. - - --condition=[KEY=VALUE,...] - The condition of the binding that you want to remove. When the - condition is explicitly specified as None (--condition=None), a - binding without a condition is removed. Otherwise, only a binding - with a condition that exactly matches the specified condition - (including the optional description) is removed. For more on - conditions, refer to the conditions overview guide: - https://cloud.google.com/iam/docs/conditions-overview - - When using the --condition flag, include the following key-value - pairs: - - expression - (Required) Condition expression that evaluates to True or False. - This uses a subset of Common Expression Language syntax. - - If the condition expression includes a comma, use a different - delimiter to separate the key-value pairs. Specify the delimiter - before listing the key-value pairs. For example, to specify a - colon (:) as the delimiter, do the following: - --condition=^:^title=TITLE:expression=EXPRESSION. For more - information, see - https://cloud.google.com/sdk/gcloud/reference/topic/escaping. - - title - (Required) A short string describing the purpose of the - expression. - - description - (Optional) Additional description for the expression. - - --condition-from-file=CONDITION_FROM_FILE - Path to a local JSON or YAML file that defines the condition. To see - available fields, see the help for --condition. - Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/workflows/describe b/gcloud/workflows/describe index 5be527905..8099cb86f 100644 --- a/gcloud/workflows/describe +++ b/gcloud/workflows/describe @@ -3,15 +3,17 @@ NAME SYNOPSIS gcloud workflows describe (WORKFLOW : --location=LOCATION) - [GCLOUD_WIDE_FLAG ...] + [--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Display all metadata associated with a workflow of given name. + Display all metadata associated with a workflow of given name and + revisionID. If revisionID is not provided, the metadata for the latest + revision is retrieved. EXAMPLES - To describe the workflow 'my-workflow', run: + To describe the workflow 'my-workflow' at revision '000001-dc1', run: - $ gcloud workflows describe my-workflow + $ gcloud workflows describe my-workflow `--revision-id=000001-dc1` POSITIONAL ARGUMENTS Workflow resource - The name of the workflow to describe. The arguments in @@ -43,6 +45,10 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line; ▸ set the property workflows/location. +FLAGS + --revision-id=REVISION_ID + The revision ID of the workflow to describe. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format,