imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-16 12:22:03 +00:00
Code Activity

gcloud: Wed Mar 1 10:23:17 UTC 2023

Browse source
This commit is contained in:
Automated 2023-03-01 10:23:17 +00:00
parent 7664984b79
commit bdaa0b3cfc
230 changed files with 8963 additions and 242 deletions
Download patch file Download diff file Expand all files Collapse all files

74
gcloud/privateca/certificates/create
View file

@ -16,8 +16,16 @@ SYNOPSIS
: --use-preset-profile=USE_PRESET_PROFILE
| --extended-key-usages=[EXTENDED_KEY_USAGES,...] --is-ca-cert
--key-usages=[KEY_USAGES,...] --max-chain-length=MAX_CHAIN_LENGTH
| --unconstrained-chain-length]) [--ca=CA] [--labels=[KEY=VALUE,...]]
[--validity=VALIDITY; default="P30D"]
| --unconstrained-chain-length --no-name-constraints-critical
--name-excluded-dns=[NAME_EXCLUDED_DNS,...]
--name-excluded-email=[NAME_EXCLUDED_EMAIL,...]
--name-excluded-ip=[NAME_EXCLUDED_IP,...]
--name-excluded-uri=[NAME_EXCLUDED_URI,...]
--name-permitted-dns=[NAME_PERMITTED_DNS,...]
--name-permitted-email=[NAME_PERMITTED_EMAIL,...]
--name-permitted-ip=[NAME_PERMITTED_IP,...]
--name-permitted-uri=[NAME_PERMITTED_URI,...]]) [--ca=CA]
[--labels=[KEY=VALUE,...]] [--validity=VALIDITY; default="P30D"]
[--template=TEMPLATE : --template-location=TEMPLATE_LOCATION]
[GCLOUD_WIDE_FLAG ...]
@ -237,6 +245,68 @@ REQUIRED FLAGS
neither --use-preset-profile nor --max-chain-length are
provided.
The x509 name constraints configurations
--name-constraints-critical
Indicates whether or not name constraints are marked as
critical. Name constraints are considered critical unless
explicitly set to false. Enabled by default, use
--no-name-constraints-critical to disable.
--name-excluded-dns=[NAME_EXCLUDED_DNS,...]
One or more comma-separated DNS names which are excluded from
being issued certificates. Any DNS name that can be constructed
by simply adding zero or more labels to the left-hand side of
the name satisfies the name constraint. For example,
example.com, www.example.com, www.sub.example.com would satisfy
example.com, while example1.com does not.
--name-excluded-email=[NAME_EXCLUDED_EMAIL,...]
One or more comma-separated emails which are excluded from
being issued certificates. The value can be a particular email
address, a hostname to indicate all email addresses on that
host or a domain with a leading period (e.g. .example.com) to
indicate all email addresses in that domain.
--name-excluded-ip=[NAME_EXCLUDED_IP,...]
One or more comma-separated IP ranges which are excluded from
being issued certificates. For IPv4 addresses, the ranges are
expressed using CIDR notation as specified in RFC 4632. For
IPv6 addresses, the ranges are expressed in similar encoding as
IPv4
--name-excluded-uri=[NAME_EXCLUDED_URI,...]
One or more comma-separated URIs which are excluded from being
issued certificates. The value can be a hostname or a domain
with a leading period (like .example.com)
--name-permitted-dns=[NAME_PERMITTED_DNS,...]
One or more comma-separated DNS names which are permitted to be
issued certificates. Any DNS name that can be constructed by
simply adding zero or more labels to the left-hand side of the
name satisfies the name constraint. For example, example.com,
www.example.com, www.sub.example.com would satisfy example.com,
while example1.com does not.
--name-permitted-email=[NAME_PERMITTED_EMAIL,...]
One or more comma-separated email addresses which are permitted
to be issued certificates. The value can be a particular email
address, a hostname to indicate all email addresses on that
host or a domain with a leading period (e.g. .example.com) to
indicate all email addresses in that domain.
--name-permitted-ip=[NAME_PERMITTED_IP,...]
One or more comma-separated IP ranges which are permitted to be
issued certificates. For IPv4 addresses, the ranges are
expressed using CIDR notation as specified in RFC 4632. For
IPv6 addresses, the ranges are expressed in similar encoding as
IPv4
--name-permitted-uri=[NAME_PERMITTED_URI,...]
One or more comma-separated URIs which are permitted to be
issued certificates. The value can be a hostname or a domain
with a leading period (like .example.com)
OPTIONAL FLAGS
--ca=CA
The name of an existing certificate authority to use for issuing the