gcloud: Wed Jul 12 10:20:16 UTC 2023

gcloud/alpha/network-security/firewall-endpoint-associations/help

@@ -29,6 +29,9 @@ COMMANDS
      list
         (ALPHA) List Firewall Plus endpoint associations.
 
+     update
+        (ALPHA) Update a Firewall Plus endpoint association.
+
 NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct

gcloud/alpha/network-security/firewall-endpoint-associations/update

@@ -0,0 +1,175 @@
+NAME
+    gcloud alpha network-security firewall-endpoint-associations update -
+        update a Firewall Plus endpoint association
+
+SYNOPSIS
+    gcloud alpha network-security firewall-endpoint-associations update
+        (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) [--async]
+        [--max-wait=MAX_WAIT; default="60m"] [--update-labels=[KEY=VALUE,...]]
+        [--clear-labels | --remove-labels=[KEY,...]]
+        [--no-tls-inspection-policy
+          | [--tls-inspection-policy=TLS_INSPECTION_POLICY
+          : --tls-inspection-policy-project=TLS_INSPECTION_POLICY_PROJECT
+          --tls-inspection-policy-region=TLS_INSPECTION_POLICY_REGION]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update a firewall endpoint association. Check the progress of
+    association update by using gcloud network-security
+    firewall-endpoint-associations describe.
+
+    For more examples, refer to the EXAMPLES section below.
+
+EXAMPLES
+    To update labels k1 and k2, run:
+
+        $ gcloud alpha network-security firewall-endpoint-associations \
+            update my-assoc --zone=us-central1-a --project=my-proj \
+            --update-labels=k1=v1,k2=v2
+
+    To remove labels k3 and k4, run:
+
+        $ gcloud alpha network-security firewall-endpoint-associations \
+            update my-assoc --zone=us-central1-a --project=my-proj \
+            --remove-labels=k3,k4
+
+    To clear all labels from the firewall endpoint association, run:
+
+        $ gcloud alpha network-security firewall-endpoint-associations \
+            update my-assoc --zone=us-central1-a --project=my-proj \
+            --clear-labels
+
+POSITIONAL ARGUMENTS
+     Firewall endpoint association resource - Firewall Plus. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways.
+
+     To set the project attribute:
+      ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       FIREWALL_ENDPOINT_ASSOCIATION
+          ID of the firewall endpoint association or fully qualified identifier
+          for the firewall endpoint association.
+
+          To set the association-name attribute:
+          ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --zone=ZONE
+          Zone of the firewall endpoint association.
+
+          To set the zone attribute:
+          ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command
+            line with a fully specified name;
+          ▸ provide the argument --zone on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete. The default is True. Enabled by default, use --no-async to
+        disable.
+
+     --max-wait=MAX_WAIT; default="60m"
+        Time to synchronously wait for the operation to complete, after which
+        the operation continues asynchronously. Ignored if --no-async isn't
+        specified. See $ gcloud topic datetimes for information on time
+        formats.
+
+     --update-labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to update. If a label exists, its value
+        is modified. Otherwise, a new label is created.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     At most one of these can be specified:
+
+       --clear-labels
+          Remove all labels. If --update-labels is also specified then
+          --clear-labels is applied first.
+
+          For example, to remove all labels:
+
+              $ gcloud alpha network-security firewall-endpoint-associations \
+                update --clear-labels
+
+          To remove all existing labels and create two new labels, foo and baz:
+
+              $ gcloud alpha network-security firewall-endpoint-associations \
+                update --clear-labels --update-labels foo=bar,baz=qux
+
+       --remove-labels=[KEY,...]
+          List of label keys to remove. If a label does not exist it is
+          silently ignored. If --update-labels is also specified then
+          --update-labels is applied first.
+
+     At most one of these can be specified:
+
+       --no-tls-inspection-policy
+          Remove TLS inspection policy from this association.
+
+       TLS Inspection Policy resource - Path to TLS Inspection Policy
+       configuration to use for intercepting TLS-encrypted traffic in this
+       network. The arguments in this group can be used to specify the
+       attributes of this resource.
+
+         --tls-inspection-policy=TLS_INSPECTION_POLICY
+            ID of the TLS Inspection Policy or fully qualified identifier for
+            the TLS Inspection Policy.
+
+            To set the tls_inspection_policy attribute:
+            ▫ provide the argument --tls-inspection-policy on the command
+              line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --tls-inspection-policy-project=TLS_INSPECTION_POLICY_PROJECT
+            Project of the TLS Inspection Policy.
+
+            To set the tls-inspection-policy-project attribute:
+            ▫ provide the argument --tls-inspection-policy on the command
+              line with a fully specified name;
+            ▫ provide the argument --tls-inspection-policy-project on the
+              command line;
+            ▫ provide the argument --project on the command line;
+            ▫ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the
+              command line with a fully specified name.
+
+         --tls-inspection-policy-region=TLS_INSPECTION_POLICY_REGION
+            Region of the TLS Inspection Policy. NOTE: TLS Inspection Policy
+            needs to be in the same region as Firewall Plus endpoint resource.
+
+            To set the tls-inspection-policy-region attribute:
+            ▫ provide the argument --tls-inspection-policy on the command
+              line with a fully specified name;
+            ▫ provide the argument --tls-inspection-policy-region on the
+              command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-security firewall-endpoint-associations update
+