imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 06:47:12 +00:00
Code Activity

gcloud: Wed Nov 15 11:42:54 UTC 2023

Browse source
This commit is contained in:
Automated 2023-11-15 11:42:54 +00:00
parent 03f0979970
commit d3074f94bb
224 changed files with 6432 additions and 626 deletions
Download patch file Download diff file Expand all files Collapse all files

141
gcloud/vmware/network-policies/external-access-rules/create Normal file
View file

@ -0,0 +1,141 @@
NAME
gcloud vmware network-policies external-access-rules create - create a
VMware Engine external access firewall rule
SYNOPSIS
gcloud vmware network-policies external-access-rules create
(EXTERNAL_ACCESS_RULE
: --location=LOCATION --network-policy=NETWORK_POLICY)
--destination-ranges=DESTINATION_IP_RANGES,[...]
--ip-protocol=IP_PROTOCOL --priority=PRIORITY
--source-ranges=SOURCE_IP_RANGES,[...]
[--action=ACTION; default="ALLOW"] [--async]
[--description=DESCRIPTION]
[--destination-ports=DESTINATION_PORTS,[...]]
[--source-ports=SOURCE_PORTS,[...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Create a VMware Engine external access firewall rule. Check the progress of
a VMware Engine external access firewall rule creation using gcloud vmware
network-policies external-access-rules list.
EXAMPLES
To create an external access firewall rule called my-external-access-rule
associated with the network policy my-network-policy in the us-west2
region, run:
$ gcloud vmware network-policies external-access-rules create \
my-external-access-rule --network-policy=my-network-policy \
--priority=1000 --ip-protocol=TCP \
--source-ranges=34.148.30.114/32 \
--destination-ranges=projects/sample-project/locations/\
us-west2-a/privateClouds/my-private-cloud/externalAddresses/\
my-external-address --source-ports=22,10000-11000 \
--destination-ports=22 --action=ALLOW --location=us-west2 \
--project=sample-project
Or:
$ gcloud vmware network-policies external-access-rules create \
my-external-access-rule --network-policy=my-network-policy \
--priority=1000 --ip-protocol=TCP \
--source-ranges=34.148.30.114/32 \
--destination-ranges=projects/sample-project/locations/\
us-west2-a/privateClouds/my-private-cloud/externalAddresses/\
my-external-address --source-ports=22,10000-11000 \
--destination-ports=22
In the second example, the project and the location are taken from gcloud
properties core/project and compute/region respectively. The --action field
also isn't specified, so its value defaults to ALLOW.
POSITIONAL ARGUMENTS
VMware Engine External Access Rule resource - external_access_rule. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument external_access_rule on the command line with a
fully specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
EXTERNAL_ACCESS_RULE
ID of the VMware Engine External Access Rule or fully qualified
identifier for the VMware Engine External Access Rule.
To set the external-access-rule attribute:
▸ provide the argument external_access_rule on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
The resource name of the location.
To set the location attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --location on the command line;
▸ set the property compute/region.
--network-policy=NETWORK_POLICY
VMware Engine network policy
To set the network-policy attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --network-policy on the command line.
REQUIRED FLAGS
--destination-ranges=DESTINATION_IP_RANGES,[...]
A list of destination IP addresses that the rule applies to. Each entry
in the list can be an ExternalAddress resource name or 0.0.0.0/0. When
the value is set to 0.0.0.0/0, all IP addresses are allowed.
--ip-protocol=IP_PROTOCOL
Internet protocol covered by the rule. Valid values are TCP, UDP, and
ICMP. IP_PROTOCOL must be one of: TCP, UDP, ICMP.
--priority=PRIORITY
Priority of this external access rule. Valid values are numbers between
100 and 4096, with 100 being the highest priority. Firewall rules are
processed from highest to lowest priority.
--source-ranges=SOURCE_IP_RANGES,[...]
A list of source IP addresses that the rule applies to. Each entry in
the list can be a CIDR notation or a single IP address. When the value
is set to 0.0.0.0/0, all IP addresses are allowed.
OPTIONAL FLAGS
--action=ACTION; default="ALLOW"
Whether the firewall rule allows or denies traffic based on a
successful rule match. By default, the action is ALLOW. ACTION must be
one of: ALLOW, DENY.
--async
Return immediately, without waiting for the operation in progress to
complete. The default is True. Enabled by default, use --no-async to
disable.
--description=DESCRIPTION
User-provided description of the external access rule.
--destination-ports=DESTINATION_PORTS,[...]
List of allowed destination ports. Each entry must be either an integer
or a range.
--source-ports=SOURCE_PORTS,[...]
List of allowed source ports. Each entry must be either an integer or a
range.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.

84
gcloud/vmware/network-policies/external-access-rules/delete Normal file
View file

@ -0,0 +1,84 @@
NAME
gcloud vmware network-policies external-access-rules delete - delete a
VMware Engine external access rule
SYNOPSIS
gcloud vmware network-policies external-access-rules delete
(EXTERNAL_ACCESS_RULE
: --location=LOCATION --network-policy=NETWORK_POLICY) [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Delete a VMware Engine external access firewall rule.
EXAMPLES
To delete an external access firewall rule called my-external-access-rule
in project my-project and region us-west2 associated with network policy
my-network-policy, run:
$ gcloud vmware network-policies external-access-rules delete \
my-external-access-rule --location=us-west2 \
--project=my-project --network-policy=my-network-policy
Or:
$ gcloud vmware network-policies external-access-rules delete \
my-external-access-rule --network-policy=my-network-policy
In the second example, the project and the location are taken from gcloud
properties core/project and compute/region respectively.
POSITIONAL ARGUMENTS
VMware Engine External Access Rule resource - external_access_rule. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument external_access_rule on the command line with a
fully specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
EXTERNAL_ACCESS_RULE
ID of the VMware Engine External Access Rule or fully qualified
identifier for the VMware Engine External Access Rule.
To set the external-access-rule attribute:
▸ provide the argument external_access_rule on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
The resource name of the location.
To set the location attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --location on the command line;
▸ set the property compute/region.
--network-policy=NETWORK_POLICY
VMware Engine network policy
To set the network-policy attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --network-policy on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete. The default is True. Enabled by default, use --no-async to
disable.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.

78
gcloud/vmware/network-policies/external-access-rules/describe Normal file
View file

@ -0,0 +1,78 @@
NAME
gcloud vmware network-policies external-access-rules describe - describe a
VMware Engine external access rule
SYNOPSIS
gcloud vmware network-policies external-access-rules describe
(EXTERNAL_ACCESS_RULE
: --location=LOCATION --network-policy=NETWORK_POLICY)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Describe a VMware Engine external access firewall rule.
EXAMPLES
To get a description of an external access firewall rule called
my-external-access-rule in project my-project and region us-west2
associated with network policy my-network-policy, run:
$ gcloud vmware network-policies external-access-rules describe \
my-external-access-rule --network-policy=my-network-policy \
--location=us-west2 --project=my-project
Or:
$ gcloud vmware network-policies external-access-rules describe \
my-external-access-rule --network-policy=my-network-policy
In the second example, the project and the location are taken from gcloud
properties core/project and compute/region respectively.
POSITIONAL ARGUMENTS
VMware Engine External Access Rule resource - external_access_rule. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument external_access_rule on the command line with a
fully specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
EXTERNAL_ACCESS_RULE
ID of the VMware Engine External Access Rule or fully qualified
identifier for the VMware Engine External Access Rule.
To set the external-access-rule attribute:
▸ provide the argument external_access_rule on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
The resource name of the location.
To set the location attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --location on the command line;
▸ set the property compute/region.
--network-policy=NETWORK_POLICY
VMware Engine network policy
To set the network-policy attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --network-policy on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.

34
gcloud/vmware/network-policies/external-access-rules/help Normal file
View file

@ -0,0 +1,34 @@
NAME
gcloud vmware network-policies external-access-rules - manage VMware Engine
external access firewall rules in Google Cloud VMware Engine
SYNOPSIS
gcloud vmware network-policies external-access-rules COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Manage VMware Engine external access firewall rules in Google Cloud VMware
Engine.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
create
Create a VMware Engine external access firewall rule.
delete
Delete a VMware Engine external access rule.
describe
Describe a VMware Engine external access rule.
list
List VMware Engine external access rules.
update
Update a VMware Engine network policy.

117
gcloud/vmware/network-policies/external-access-rules/list Normal file
View file

@ -0,0 +1,117 @@
NAME
gcloud vmware network-policies external-access-rules list - list VMware
Engine external access rules
SYNOPSIS
gcloud vmware network-policies external-access-rules list
(--network-policy=NETWORK_POLICY : --location=LOCATION)
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
List VMware Engine external access firewall rules.
EXAMPLES
To list external access firewall rules in your project in the region
us-west2 associated with network policy my-network-policy, sorted from
oldest to newest, run:
$ gcloud vmware network-policies external-access-rules list \
--location=us-west2 --project=my-project \
--network-policy=my-network-policy --sort-by=~create_time
Or:
$ gcloud vmware network-policies external-access-rules list \
--sort-by=~create_time --network-policy=my-network-policy
In the second example, the project and the location are taken from gcloud
properties core/project and compute/region respectively.
To list custom set of fields of external access firewall rules in a
project, run:
$ gcloud vmware network-policies external-access-rules list \
--format="table(
name.segment(-1):label=NAME,,
priority,
ipProtocol,
sourceIpRanges.flatten(show='values'),
sourcePorts.list(),
destinationIpRanges.flatten(show='values'),
destinationPorts.list(),
action
)"
REQUIRED FLAGS
VMware Engine Network Policy resource - network_policy. The arguments in
this group can be used to specify the attributes of this resource. (NOTE)
Some attributes are not given arguments in this group but can be set in
other ways.
To set the project attribute:
◆ provide the argument --network-policy on the command line with a
fully specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
--network-policy=NETWORK_POLICY
ID of the VMware Engine Network Policy or fully qualified identifier
for the VMware Engine Network Policy.
To set the network-policy attribute:
▸ provide the argument --network-policy on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
The resource name of the location.
To set the location attribute:
▸ provide the argument --network-policy on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property compute/region.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
--uri
Print a list of resource URIs instead of the default output, and change
the command output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To display URIs
alongside other keys instead, use the uri() transform.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.

123
gcloud/vmware/network-policies/external-access-rules/update Normal file
View file

@ -0,0 +1,123 @@
NAME
gcloud vmware network-policies external-access-rules update - update a
VMware Engine network policy
SYNOPSIS
gcloud vmware network-policies external-access-rules update
(EXTERNAL_ACCESS_RULE
: --location=LOCATION --network-policy=NETWORK_POLICY)
[--action=ACTION] [--async] [--description=DESCRIPTION]
[--destination-ports=DESTINATION_PORTS,[...]]
[--destination-ranges=DESTINATION_IP_RANGES,[...]]
[--ip-protocol=IP_PROTOCOL] [--priority=PRIORITY]
[--source-ports=SOURCE_PORTS,[...]]
[--source-ranges=SOURCE_IP_RANGES,[...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Update a VMware Engine external access firewall rule.
EXAMPLES
To update an external access firewall rule named my-external-access-rule so
that it denies the traffic for that rule, run:
$ gcloud vmware network-policies external-access-rules update \
my-external-access-rule --network-policy=my-network-policy \
--action=DENY --location=us-west2 --project=my-project
Or:
$ gcloud vmware network-policies external-access-rules update \
my-external-access-rule --network-policy=my-network-policy \
--action=DENY
In the second example, the project and the location are taken from gcloud
properties core/project and compute/regions respectively.
POSITIONAL ARGUMENTS
VMware Engine External Access Rule resource - external_access_rule. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument external_access_rule on the command line with a
fully specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
EXTERNAL_ACCESS_RULE
ID of the VMware Engine External Access Rule or fully qualified
identifier for the VMware Engine External Access Rule.
To set the external-access-rule attribute:
▸ provide the argument external_access_rule on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
The resource name of the location.
To set the location attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --location on the command line;
▸ set the property compute/region.
--network-policy=NETWORK_POLICY
VMware Engine network policy
To set the network-policy attribute:
▸ provide the argument external_access_rule on the command line
with a fully specified name;
▸ provide the argument --network-policy on the command line.
FLAGS
--action=ACTION
Whether the firewall rule allows or denies traffic based on a
successful rule match. ACTION must be one of: ALLOW, DENY.
--async
Return immediately, without waiting for the operation in progress to
complete. The default is True. Enabled by default, use --no-async to
disable.
--description=DESCRIPTION
User-provided description of the external access rule.
--destination-ports=DESTINATION_PORTS,[...]
List of allowed destination ports. Each entry must be either an integer
or a range.
--destination-ranges=DESTINATION_IP_RANGES,[...]
A list of destination IP addresses that the rule applies to. Each entry
in the list be an ExternalAddress resource name or 0.0.0.0/0. When the
value is set to 0.0.0.0/0, all IP addresses are allowed.
--ip-protocol=IP_PROTOCOL
Internet protocol covered by the rule. Valid values are TCP, UDP, and
ICMP. IP_PROTOCOL must be one of: TCP, UDP, ICMP.
--priority=PRIORITY
Priority of this external access rule. Valid values are numbers between
100 and 4096, with 100 being the highest priority. Firewall rules are
processed from highest to lowest priority.
--source-ports=SOURCE_PORTS,[...]
List of allowed source ports. Each entry must be either an integer or a
range.
--source-ranges=SOURCE_IP_RANGES,[...]
A list of source IP addresses that the rule applies to. Each entry in
the list can be a CIDR notation or a single IP address. When the value
is set to 0.0.0.0/0, all IP addresses are allowed.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.