imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-11 07:29:40 +00:00
Code Activity

gcloud: Wed Nov 15 11:42:54 UTC 2023

Browse source
This commit is contained in:
Automated 2023-11-15 11:42:54 +00:00
parent 03f0979970
commit d3074f94bb
224 changed files with 6432 additions and 626 deletions
Download patch file Download diff file Expand all files Collapse all files

29
gcloud/beta/container/binauthz/attestations/list
View file

@ -4,16 +4,18 @@ NAME
SYNOPSIS
gcloud beta container binauthz attestations list
(--attestor=ATTESTOR : --attestor-project=ATTESTOR_PROJECT)
[--artifact-url=ARTIFACT_URL] [--filter=EXPRESSION] [--limit=LIMIT]
[--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
[GCLOUD_WIDE_FLAG ...]
[--artifact-url=ARTIFACT_URL]
[--attestor=ATTESTOR : --attestor-project=ATTESTOR_PROJECT]
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) This command lists Binary Authorization attestations for your
project. Command line flags specify which artifact to list the attestations
for. If no artifact is specified, then this lists all URLs with associated
occurrences.
project. Command line flags specify which attestor and artifact to list the
attestations for. If no attestor is specified, this lists all attestations
in the project, which requires the containeranalysis.occurrences.get
permission. If no artifact is specified, then this lists all URLs with
associated occurrences.
EXAMPLES
List the Occurrence messages for all attestations bound to the passed
@ -29,15 +31,17 @@ EXAMPLES
--attestor=projects/foo/attestors/bar \
--artifact-url='gcr.io/foo/example-image@sha256:abcd'
REQUIRED FLAGS
FLAGS
--artifact-url=ARTIFACT_URL
Container URL. May be in the gcr.io/repository/image format, or may
optionally contain the http or https scheme
Attestor resource - The Attestor whose Container Analysis Note will be
queried for attestations. Note that the caller must have the
containeranalysis.notes.listOccurrences permission on the note being
queried. The arguments in this group can be used to specify the attributes
of this resource.
This must be specified.
--attestor=ATTESTOR
ID of the attestor or fully qualified identifier for the attestor.
@ -57,11 +61,6 @@ REQUIRED FLAGS
▸ provide the argument --project on the command line;
▸ set the property core/project.
FLAGS
--artifact-url=ARTIFACT_URL
Container URL. May be in the gcr.io/repository/image format, or may
optionally contain the http or https scheme
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.

23
gcloud/beta/container/binauthz/attestations/sign-and-create
View file

@ -12,8 +12,9 @@ SYNOPSIS
--keyversion-project=KEYVERSION_PROJECT)
[--dsse-type=DSSE_TYPE;
default="application/vnd.dev.cosign.simplesigning.v1+json"]
[--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE]
[--pae-encode-payload | --validate] [GCLOUD_WIDE_FLAG ...]
[--pae-encode-payload]
[--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE] [--validate]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) This command signs and creates a Binary Authorization attestation
@ -122,6 +123,9 @@ OPTIONAL FLAGS
--dsse-type=DSSE_TYPE; default="application/vnd.dev.cosign.simplesigning.v1+json"
DSSE type used for pae encoding.
--pae-encode-payload
Whether to pae-encode the payload before signing.
--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE
If provided, the ID of the public key that will be used to verify the
Attestation instead of the default generated one. This ID should match
@ -131,18 +135,9 @@ OPTIONAL FLAGS
This parameter is only necessary if the --public-key-id-override flag
was provided when this KMS key was added to the Attestor.
exclusive flags
At most one of these can be specified:
--pae-encode-payload
Whether to pae-encode the payload before signing. Note: currently
validation is not supported for attestations with pae-encoded
payload.
--validate
Whether to validate that the Attestation can be verified by the
provided Attestor.
--validate
Whether to validate that the Attestation can be verified by the
provided Attestor.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,

25
gcloud/beta/container/fleet/create
View file

@ -3,7 +3,10 @@ NAME
SYNOPSIS
gcloud beta container fleet create [--async] [--display-name=DISPLAY_NAME]
[--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
[--labels=[KEY=VALUE,...]]
[--security-posture=SECURITY_POSTURE
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) This command can fail for the following reasons:
@ -36,6 +39,26 @@ FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
Default cluster configurations to apply across the fleet.
Security posture config.
--security-posture=SECURITY_POSTURE
To apply standard security posture to clusters in the fleet,
$ gcloud beta container fleet create --security-posture=standard
SECURITY_POSTURE must be one of: disabled, standard.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
To apply standard vulnerability scanning to clusters in the fleet,
$ gcloud beta container fleet create \
--workload-vulnerability-scanning=standard
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
enterprise.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

40
gcloud/beta/container/fleet/identity-service/apply
View file

@ -1,19 +1,16 @@
NAME
gcloud beta container fleet identity-service apply - update an Identity
Service Feature Spec
gcloud beta container fleet identity-service apply - update the Identity
Service Feature
SYNOPSIS
gcloud beta container fleet identity-service apply
([--config=CONFIG : [--membership=MEMBERSHIP : --location=LOCATION]])
(--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
[(--config=CONFIG | --origin=ORIGIN)
: [--membership=MEMBERSHIP : --location=LOCATION]])
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Applies the authentication configuration to the Identity Service
feature spec for this membership. This configuration is now the "source of
truth" for the cluster and can only be updated by using this command or the
Cloud Console. Any local authentication configuration on the cluster is
overwritten by this configuration, including any local updates made after
you run this command.
(BETA) This command updates the Identity Service Feature in a fleet.
EXAMPLES
To apply an Identity Service configuration to a membership, run:
@ -22,14 +19,31 @@ EXAMPLES
--membership=MEMBERSHIP_NAME \
--config=/path/to/identity-service.yaml
To create or modify a fleet-level default membership configuration, run:
$ gcloud beta container fleet identity-service apply \
--fleet-default-member-config=/path/to/identity-service.yaml
To apply an existing fleet-level default membership configuration to a
membership, run:
$ gcloud beta container fleet identity-service apply \
--origin=fleet --membership=MEMBERSHIP_NAME
REQUIRED FLAGS
At least one of these must be specified:
--config=CONFIG
The path to an identity-service.yaml config file.
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to an identity-service.yaml configuration file.
This flag argument must be specified if any of the other arguments in
this group are specified.
Exactly one of these must be specified:
--config=CONFIG
The path to an identity-service.yaml configuration file.
--origin=ORIGIN
Applies the fleet-level default membership configuration to a
membership. ORIGIN must be (only one value is supported): fleet.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this

13
gcloud/beta/container/fleet/identity-service/delete
View file

@ -1,6 +1,6 @@
NAME
gcloud beta container fleet identity-service delete - remove the Identity
Service Feature Spec for the given membership
gcloud beta container fleet identity-service delete - delete a resource
from the Identity Service Feature
SYNOPSIS
gcloud beta container fleet identity-service delete
@ -8,14 +8,19 @@ SYNOPSIS
[--membership=MEMBERSHIP : --location=LOCATION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Removes the Identity Service Feature Spec for the given membership.
(BETA) Deletes a resource from the Identity Service Feature.
EXAMPLES
To delete an Identity Service configuration for a membership, run:
To delete the Identity Service configuration from a membership, run:
$ gcloud beta container fleet identity-service delete \
--membership=MEMBERSHIP_NAME
To delete the fleet-level default membership configuration, run:
$ gcloud beta container fleet identity-service delete \
--fleet-default-member-config
FLAGS
--fleet-default-member-config
If specified, deletes the default membership configuration present in

8
gcloud/beta/container/fleet/identity-service/enable
View file

@ -1,5 +1,5 @@
NAME
gcloud beta container fleet identity-service enable - enable Identity
gcloud beta container fleet identity-service enable - enable the Identity
Service Feature
SYNOPSIS
@ -15,6 +15,12 @@ EXAMPLES
$ gcloud beta container fleet identity-service enable
To enable the Identity Service Feature with a fleet-level default
membership configuration, run:
$ gcloud beta container fleet identity-service enable \
--fleet-default-member-config=/path/to/identity-service.yaml
FLAGS
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to an identity-service.yaml identity configuration file. If

7
gcloud/beta/container/fleet/identity-service/help
View file

@ -17,11 +17,10 @@ COMMANDS
COMMAND is one of the following:
apply
(BETA) Update an Identity Service Feature Spec.
(BETA) Update the Identity Service Feature.
delete
(BETA) Remove the Identity Service Feature Spec for the given
membership.
(BETA) Delete a resource from the Identity Service Feature.
describe
(BETA) Prints the status of all clusters with Identity Service
@ -31,7 +30,7 @@ COMMANDS
(BETA) Disable Identity Service Feature.
enable
(BETA) Enable Identity Service Feature.
(BETA) Enable the Identity Service Feature.
NOTES
This command is currently in beta and might change without notice. These

13
gcloud/beta/container/fleet/mesh/disable
View file

@ -2,7 +2,8 @@ NAME
gcloud beta container fleet mesh disable - disable Service Mesh Feature
SYNOPSIS
gcloud beta container fleet mesh disable [--force] [GCLOUD_WIDE_FLAG ...]
gcloud beta container fleet mesh disable [--fleet-default-member-config]
[--force] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Disable the Service Mesh Feature in a fleet.
@ -18,6 +19,16 @@ EXAMPLES
--fleet-default-member-config
FLAGS
--fleet-default-member-config
If specified, deletes the default membership configuration present in
your fleet.
To delete the fleet-level default Membership configuration present in
your fleet, run:
$ gcloud beta container fleet mesh disable \
--fleet-default-member-config
--force
Disable this feature, even if it is currently in use. Force disablement
may result in unexpected behavior.

14
gcloud/beta/container/fleet/mesh/enable
View file

@ -2,7 +2,9 @@ NAME
gcloud beta container fleet mesh enable - enable Service Mesh Feature
SYNOPSIS
gcloud beta container fleet mesh enable [GCLOUD_WIDE_FLAG ...]
gcloud beta container fleet mesh enable
[--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Enable the Service Mesh Feature in a fleet.
@ -18,6 +20,16 @@ EXAMPLES
$ gcloud beta container fleet mesh enable \
--fleet-default-member-config=/path/to/service-mesh.yaml
FLAGS
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to a service-mesh.yaml configuration file.
To enable the Service Mesh Feature with a fleet-level default
membership configuration, run:
$ gcloud beta container fleet mesh enable \
--fleet-default-member-config=/path/to/service-mesh.yaml
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

22
gcloud/beta/container/fleet/update
View file

@ -4,6 +4,8 @@ NAME
SYNOPSIS
gcloud beta container fleet update [--async] [--display-name=DISPLAY_NAME]
[--update-labels=[KEY=VALUE,...]]
[--security-posture=SECURITY_POSTURE
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -38,6 +40,26 @@ FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
Default cluster configurations to apply across the fleet.
Security posture config.
--security-posture=SECURITY_POSTURE
To apply standard security posture to clusters in the fleet,
$ gcloud beta container fleet update --security-posture=standard
SECURITY_POSTURE must be one of: disabled, standard.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
To apply standard vulnerability scanning to clusters in the fleet,
$ gcloud beta container fleet update \
--workload-vulnerability-scanning=standard
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
enterprise.
At most one of these can be specified:
--clear-labels

25
gcloud/beta/container/hub/create
View file

@ -3,7 +3,10 @@ NAME
SYNOPSIS
gcloud beta container hub create [--async] [--display-name=DISPLAY_NAME]
[--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
[--labels=[KEY=VALUE,...]]
[--security-posture=SECURITY_POSTURE
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) This command can fail for the following reasons:
@ -36,6 +39,26 @@ FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
Default cluster configurations to apply across the fleet.
Security posture config.
--security-posture=SECURITY_POSTURE
To apply standard security posture to clusters in the fleet,
$ gcloud beta container hub create --security-posture=standard
SECURITY_POSTURE must be one of: disabled, standard.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
To apply standard vulnerability scanning to clusters in the fleet,
$ gcloud beta container hub create \
--workload-vulnerability-scanning=standard
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
enterprise.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

40
gcloud/beta/container/hub/identity-service/apply
View file

@ -1,19 +1,16 @@
NAME
gcloud beta container hub identity-service apply - update an Identity
Service Feature Spec
gcloud beta container hub identity-service apply - update the Identity
Service Feature
SYNOPSIS
gcloud beta container hub identity-service apply
([--config=CONFIG : [--membership=MEMBERSHIP : --location=LOCATION]])
(--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
[(--config=CONFIG | --origin=ORIGIN)
: [--membership=MEMBERSHIP : --location=LOCATION]])
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Applies the authentication configuration to the Identity Service
feature spec for this membership. This configuration is now the "source of
truth" for the cluster and can only be updated by using this command or the
Cloud Console. Any local authentication configuration on the cluster is
overwritten by this configuration, including any local updates made after
you run this command.
(BETA) This command updates the Identity Service Feature in a fleet.
EXAMPLES
To apply an Identity Service configuration to a membership, run:
@ -22,14 +19,31 @@ EXAMPLES
--membership=MEMBERSHIP_NAME \
--config=/path/to/identity-service.yaml
To create or modify a fleet-level default membership configuration, run:
$ gcloud beta container hub identity-service apply \
--fleet-default-member-config=/path/to/identity-service.yaml
To apply an existing fleet-level default membership configuration to a
membership, run:
$ gcloud beta container hub identity-service apply --origin=fleet \
--membership=MEMBERSHIP_NAME
REQUIRED FLAGS
At least one of these must be specified:
--config=CONFIG
The path to an identity-service.yaml config file.
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to an identity-service.yaml configuration file.
This flag argument must be specified if any of the other arguments in
this group are specified.
Exactly one of these must be specified:
--config=CONFIG
The path to an identity-service.yaml configuration file.
--origin=ORIGIN
Applies the fleet-level default membership configuration to a
membership. ORIGIN must be (only one value is supported): fleet.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this

13
gcloud/beta/container/hub/identity-service/delete
View file

@ -1,6 +1,6 @@
NAME
gcloud beta container hub identity-service delete - remove the Identity
Service Feature Spec for the given membership
gcloud beta container hub identity-service delete - delete a resource from
the Identity Service Feature
SYNOPSIS
gcloud beta container hub identity-service delete
@ -8,14 +8,19 @@ SYNOPSIS
[--membership=MEMBERSHIP : --location=LOCATION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Removes the Identity Service Feature Spec for the given membership.
(BETA) Deletes a resource from the Identity Service Feature.
EXAMPLES
To delete an Identity Service configuration for a membership, run:
To delete the Identity Service configuration from a membership, run:
$ gcloud beta container hub identity-service delete \
--membership=MEMBERSHIP_NAME
To delete the fleet-level default membership configuration, run:
$ gcloud beta container hub identity-service delete \
--fleet-default-member-config
FLAGS
--fleet-default-member-config
If specified, deletes the default membership configuration present in

10
gcloud/beta/container/hub/identity-service/enable
View file

@ -1,6 +1,6 @@
NAME
gcloud beta container hub identity-service enable - enable Identity Service
Feature
gcloud beta container hub identity-service enable - enable the Identity
Service Feature
SYNOPSIS
gcloud beta container hub identity-service enable
@ -15,6 +15,12 @@ EXAMPLES
$ gcloud beta container hub identity-service enable
To enable the Identity Service Feature with a fleet-level default
membership configuration, run:
$ gcloud beta container hub identity-service enable \
--fleet-default-member-config=/path/to/identity-service.yaml
FLAGS
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to an identity-service.yaml identity configuration file. If

7
gcloud/beta/container/hub/identity-service/help
View file

@ -17,11 +17,10 @@ COMMANDS
COMMAND is one of the following:
apply
(BETA) Update an Identity Service Feature Spec.
(BETA) Update the Identity Service Feature.
delete
(BETA) Remove the Identity Service Feature Spec for the given
membership.
(BETA) Delete a resource from the Identity Service Feature.
describe
(BETA) Prints the status of all clusters with Identity Service
@ -31,7 +30,7 @@ COMMANDS
(BETA) Disable Identity Service Feature.
enable
(BETA) Enable Identity Service Feature.
(BETA) Enable the Identity Service Feature.
NOTES
This command is currently in beta and might change without notice. These

13
gcloud/beta/container/hub/mesh/disable
View file

@ -2,7 +2,8 @@ NAME
gcloud beta container hub mesh disable - disable Service Mesh Feature
SYNOPSIS
gcloud beta container hub mesh disable [--force] [GCLOUD_WIDE_FLAG ...]
gcloud beta container hub mesh disable [--fleet-default-member-config]
[--force] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Disable the Service Mesh Feature in a fleet.
@ -18,6 +19,16 @@ EXAMPLES
--fleet-default-member-config
FLAGS
--fleet-default-member-config
If specified, deletes the default membership configuration present in
your fleet.
To delete the fleet-level default Membership configuration present in
your fleet, run:
$ gcloud beta container hub mesh disable \
--fleet-default-member-config
--force
Disable this feature, even if it is currently in use. Force disablement
may result in unexpected behavior.

14
gcloud/beta/container/hub/mesh/enable
View file

@ -2,7 +2,9 @@ NAME
gcloud beta container hub mesh enable - enable Service Mesh Feature
SYNOPSIS
gcloud beta container hub mesh enable [GCLOUD_WIDE_FLAG ...]
gcloud beta container hub mesh enable
[--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Enable the Service Mesh Feature in a fleet.
@ -18,6 +20,16 @@ EXAMPLES
$ gcloud beta container hub mesh enable \
--fleet-default-member-config=/path/to/service-mesh.yaml
FLAGS
--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
The path to a service-mesh.yaml configuration file.
To enable the Service Mesh Feature with a fleet-level default
membership configuration, run:
$ gcloud beta container hub mesh enable \
--fleet-default-member-config=/path/to/service-mesh.yaml
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

22
gcloud/beta/container/hub/update
View file

@ -4,6 +4,8 @@ NAME
SYNOPSIS
gcloud beta container hub update [--async] [--display-name=DISPLAY_NAME]
[--update-labels=[KEY=VALUE,...]]
[--security-posture=SECURITY_POSTURE
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -38,6 +40,26 @@ FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
Default cluster configurations to apply across the fleet.
Security posture config.
--security-posture=SECURITY_POSTURE
To apply standard security posture to clusters in the fleet,
$ gcloud beta container hub update --security-posture=standard
SECURITY_POSTURE must be one of: disabled, standard.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
To apply standard vulnerability scanning to clusters in the fleet,
$ gcloud beta container hub update \
--workload-vulnerability-scanning=standard
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
enterprise.
At most one of these can be specified:
--clear-labels