From daa9cea7765e82af0841d1a4e79c07aa80257716 Mon Sep 17 00:00:00 2001 From: Automated Date: Fri, 2 Jun 2023 10:25:45 +0000 Subject: [PATCH] gcloud: Fri Jun 2 10:25:45 UTC 2023 --- gcloud/_version | 8 +- gcloud/alloydb/clusters/create-secondary | 94 +++++++++++ gcloud/alloydb/clusters/help | 6 + gcloud/alloydb/clusters/promote | 45 ++++++ gcloud/alloydb/instances/create-secondary | 49 ++++++ gcloud/alloydb/instances/help | 3 + .../alpha/alloydb/clusters/create-secondary | 4 +- gcloud/alpha/alloydb/clusters/promote | 4 +- .../alpha/alloydb/instances/create-secondary | 4 +- gcloud/alpha/alloydb/instances/help | 3 + gcloud/alpha/alloydb/instances/inject-fault | 55 +++++++ gcloud/alpha/artifacts/docker/images/list | 13 +- gcloud/alpha/bigtable/instances/tables/update | 27 +++- gcloud/alpha/builds/triggers/run | 27 +++- gcloud/alpha/composer/environments/create | 5 +- .../composer/environments/database-failover | 72 +++++++++ .../environments/fetch-database-properties | 67 ++++++++ gcloud/alpha/composer/environments/help | 6 + gcloud/alpha/compute/backend-buckets/update | 17 +- gcloud/alpha/compute/backend-services/update | 17 +- .../alpha/compute/future-reservations/create | 9 +- .../alpha/compute/future-reservations/update | 23 +++ .../instance-groups/managed/set-autoscaling | 18 ++- gcloud/alpha/compute/routers/get-nat-ip-info | 69 ++++++++ gcloud/alpha/compute/routers/help | 3 + .../rules/add-preconfig-waf-exclusion | 14 +- .../compute/security-policies/rules/create | 12 ++ .../compute/security-policies/rules/delete | 14 +- .../compute/security-policies/rules/describe | 14 +- .../rules/remove-preconfig-waf-exclusion | 14 +- .../compute/security-policies/rules/update | 12 ++ .../alpha/compute/service-attachments/create | 16 +- .../alpha/compute/service-attachments/update | 21 ++- gcloud/alpha/compute/tpus/tpu-vm/help | 3 + gcloud/alpha/compute/tpus/tpu-vm/update | 115 +++++++++++++ gcloud/alpha/container/node-pools/create | 12 ++ gcloud/alpha/dataplex/datascan/create | 9 +- gcloud/alpha/functions/upgrade | 14 +- .../iam/workforce-pools/providers/create-oidc | 14 +- .../iam/workforce-pools/providers/update-oidc | 14 +- gcloud/alpha/netapp/volumes/update | 18 +-- .../network-security/address-groups/add-items | 80 +++++++++ .../address-groups/clone-items | 81 ++++++++++ .../network-security/address-groups/create | 96 +++++++++++ .../network-security/address-groups/delete | 75 +++++++++ .../network-security/address-groups/describe | 71 ++++++++ .../network-security/address-groups/help | 55 +++++++ .../network-security/address-groups/list | 90 +++++++++++ .../address-groups/list-references | 101 ++++++++++++ .../address-groups/remove-items | 80 +++++++++ .../network-security/address-groups/update | 114 +++++++++++++ .../firewall-endpoint-associations/create | 152 ++++++++++++++++++ .../firewall-endpoint-associations/delete | 87 ++++++++++ .../firewall-endpoint-associations/describe | 75 +++++++++ .../firewall-endpoint-associations/help | 39 +++++ .../firewall-endpoint-associations/list | 79 +++++++++ gcloud/alpha/network-security/help | 9 ++ .../org-address-groups/add-items | 82 ++++++++++ .../org-address-groups/clone-items | 83 ++++++++++ .../org-address-groups/create | 97 +++++++++++ .../org-address-groups/delete | 78 +++++++++ .../org-address-groups/describe | 73 +++++++++ .../network-security/org-address-groups/help | 56 +++++++ .../network-security/org-address-groups/list | 97 +++++++++++ .../org-address-groups/list-references | 101 ++++++++++++ .../org-address-groups/remove-items | 82 ++++++++++ .../org-address-groups/update | 117 ++++++++++++++ gcloud/alpha/run/jobs/delete | 8 +- gcloud/alpha/run/jobs/executions/delete | 9 +- gcloud/alpha/scc/assets/group | 15 +- gcloud/alpha/scc/assets/list | 13 +- gcloud/alpha/scc/assets/list-marks | 4 +- gcloud/alpha/scc/assets/update-marks | 4 +- gcloud/alpha/scc/findings/create | 8 +- gcloud/alpha/scc/findings/group | 46 +++--- gcloud/alpha/scc/findings/list | 40 +++-- gcloud/alpha/scc/findings/list-marks | 4 +- gcloud/alpha/scc/findings/update | 3 +- gcloud/alpha/scc/findings/update-marks | 4 +- gcloud/alpha/sql/export/bak | 12 +- gcloud/alpha/sql/import/bak | 19 ++- gcloud/alpha/transfer/agents/install | 12 +- gcloud/alpha/workstations/configs/create | 17 ++ gcloud/artifacts/docker/images/list | 13 +- gcloud/beta/alloydb/clusters/create-secondary | 6 +- gcloud/beta/alloydb/clusters/promote | 6 +- .../beta/alloydb/instances/create-secondary | 6 +- gcloud/beta/artifacts/docker/images/list | 13 +- gcloud/beta/builds/triggers/run | 27 +++- gcloud/beta/composer/environments/create | 5 +- .../composer/environments/database-failover | 70 ++++++++ .../environments/fetch-database-properties | 65 ++++++++ gcloud/beta/composer/environments/help | 6 + gcloud/beta/compute/backend-buckets/update | 17 +- gcloud/beta/compute/backend-services/update | 17 +- .../instance-groups/managed/set-autoscaling | 18 ++- .../rules/add-preconfig-waf-exclusion | 14 +- .../compute/security-policies/rules/create | 12 ++ .../compute/security-policies/rules/delete | 14 +- .../compute/security-policies/rules/describe | 14 +- .../rules/remove-preconfig-waf-exclusion | 14 +- .../compute/security-policies/rules/update | 12 ++ .../beta/compute/service-attachments/create | 16 +- .../beta/compute/service-attachments/update | 21 ++- gcloud/beta/container/node-pools/create | 12 ++ .../iam/workforce-pools/providers/create-oidc | 14 +- .../iam/workforce-pools/providers/update-oidc | 14 +- .../network-security/address-groups/add-items | 78 +++++++++ .../address-groups/clone-items | 79 +++++++++ .../network-security/address-groups/create | 94 +++++++++++ .../network-security/address-groups/delete | 73 +++++++++ .../network-security/address-groups/describe | 69 ++++++++ .../beta/network-security/address-groups/help | 53 ++++++ .../beta/network-security/address-groups/list | 88 ++++++++++ .../address-groups/list-references | 99 ++++++++++++ .../address-groups/remove-items | 78 +++++++++ .../network-security/address-groups/update | 112 +++++++++++++ .../firewall-endpoint-associations/create | 150 +++++++++++++++++ .../firewall-endpoint-associations/delete | 85 ++++++++++ .../firewall-endpoint-associations/describe | 73 +++++++++ .../firewall-endpoint-associations/help | 37 +++++ .../firewall-endpoint-associations/list | 79 +++++++++ gcloud/beta/network-security/help | 9 ++ .../org-address-groups/add-items | 80 +++++++++ .../org-address-groups/clone-items | 81 ++++++++++ .../org-address-groups/create | 95 +++++++++++ .../org-address-groups/delete | 76 +++++++++ .../org-address-groups/describe | 71 ++++++++ .../network-security/org-address-groups/help | 54 +++++++ .../network-security/org-address-groups/list | 95 +++++++++++ .../org-address-groups/list-references | 99 ++++++++++++ .../org-address-groups/remove-items | 80 +++++++++ .../org-address-groups/update | 115 +++++++++++++ gcloud/beta/run/jobs/delete | 8 +- gcloud/beta/run/jobs/executions/delete | 9 +- gcloud/beta/scc/assets/group | 15 +- gcloud/beta/scc/assets/list | 13 +- gcloud/beta/scc/assets/list-marks | 4 +- gcloud/beta/scc/assets/update-marks | 4 +- gcloud/beta/scc/findings/create | 8 +- gcloud/beta/scc/findings/group | 46 +++--- gcloud/beta/scc/findings/list | 40 +++-- gcloud/beta/scc/findings/list-marks | 4 +- gcloud/beta/scc/findings/update | 3 +- gcloud/beta/scc/findings/update-marks | 4 +- gcloud/beta/sql/export/bak | 13 +- gcloud/beta/sql/import/bak | 19 ++- gcloud/beta/workstations/configs/create | 17 ++ gcloud/builds/triggers/run | 27 +++- gcloud/composer/environments/create | 6 +- .../composer/environments/database-failover | 69 ++++++++ .../environments/fetch-database-properties | 64 ++++++++ gcloud/composer/environments/help | 6 + gcloud/compute/backend-buckets/update | 17 +- gcloud/compute/backend-services/update | 17 +- .../instance-groups/managed/set-autoscaling | 18 ++- gcloud/compute/service-attachments/create | 16 +- gcloud/compute/service-attachments/update | 21 ++- gcloud/container/node-pools/create | 12 ++ .../iam/workforce-pools/providers/create-oidc | 14 +- .../iam/workforce-pools/providers/update-oidc | 14 +- .../network-security/address-groups/add-items | 77 +++++++++ .../address-groups/clone-items | 78 +++++++++ gcloud/network-security/address-groups/create | 91 +++++++++++ gcloud/network-security/address-groups/delete | 72 +++++++++ .../network-security/address-groups/describe | 66 ++++++++ gcloud/network-security/address-groups/help | 52 ++++++ gcloud/network-security/address-groups/list | 86 ++++++++++ .../address-groups/list-references | 98 +++++++++++ .../address-groups/remove-items | 77 +++++++++ gcloud/network-security/address-groups/update | 110 +++++++++++++ gcloud/network-security/help | 6 + .../org-address-groups/add-items | 79 +++++++++ .../org-address-groups/clone-items | 80 +++++++++ .../org-address-groups/create | 93 +++++++++++ .../org-address-groups/delete | 74 +++++++++ .../org-address-groups/describe | 70 ++++++++ .../network-security/org-address-groups/help | 52 ++++++ .../network-security/org-address-groups/list | 93 +++++++++++ .../org-address-groups/list-references | 98 +++++++++++ .../org-address-groups/remove-items | 79 +++++++++ .../org-address-groups/update | 112 +++++++++++++ gcloud/privateca/pools/create | 8 +- gcloud/privateca/pools/update | 8 +- gcloud/run/jobs/delete | 8 +- gcloud/run/jobs/executions/delete | 9 +- gcloud/scc/assets/group | 15 +- gcloud/scc/assets/list | 13 +- gcloud/scc/assets/list-marks | 4 +- gcloud/scc/assets/update-marks | 4 +- gcloud/scc/findings/create | 8 +- gcloud/scc/findings/group | 46 +++--- gcloud/scc/findings/list | 40 +++-- gcloud/scc/findings/list-marks | 4 +- gcloud/scc/findings/update | 3 +- gcloud/scc/findings/update-marks | 4 +- gcloud/sql/export/bak | 13 +- gcloud/sql/import/bak | 19 ++- gcloud/transfer/agents/install | 12 +- 199 files changed, 7828 insertions(+), 401 deletions(-) create mode 100644 gcloud/alloydb/clusters/create-secondary create mode 100644 gcloud/alloydb/clusters/promote create mode 100644 gcloud/alloydb/instances/create-secondary create mode 100644 gcloud/alpha/alloydb/instances/inject-fault create mode 100644 gcloud/alpha/composer/environments/database-failover create mode 100644 gcloud/alpha/composer/environments/fetch-database-properties create mode 100644 gcloud/alpha/compute/routers/get-nat-ip-info create mode 100644 gcloud/alpha/compute/tpus/tpu-vm/update create mode 100644 gcloud/alpha/network-security/address-groups/add-items create mode 100644 gcloud/alpha/network-security/address-groups/clone-items create mode 100644 gcloud/alpha/network-security/address-groups/create create mode 100644 gcloud/alpha/network-security/address-groups/delete create mode 100644 gcloud/alpha/network-security/address-groups/describe create mode 100644 gcloud/alpha/network-security/address-groups/help create mode 100644 gcloud/alpha/network-security/address-groups/list create mode 100644 gcloud/alpha/network-security/address-groups/list-references create mode 100644 gcloud/alpha/network-security/address-groups/remove-items create mode 100644 gcloud/alpha/network-security/address-groups/update create mode 100644 gcloud/alpha/network-security/firewall-endpoint-associations/create create mode 100644 gcloud/alpha/network-security/firewall-endpoint-associations/delete create mode 100644 gcloud/alpha/network-security/firewall-endpoint-associations/describe create mode 100644 gcloud/alpha/network-security/firewall-endpoint-associations/help create mode 100644 gcloud/alpha/network-security/firewall-endpoint-associations/list create mode 100644 gcloud/alpha/network-security/org-address-groups/add-items create mode 100644 gcloud/alpha/network-security/org-address-groups/clone-items create mode 100644 gcloud/alpha/network-security/org-address-groups/create create mode 100644 gcloud/alpha/network-security/org-address-groups/delete create mode 100644 gcloud/alpha/network-security/org-address-groups/describe create mode 100644 gcloud/alpha/network-security/org-address-groups/help create mode 100644 gcloud/alpha/network-security/org-address-groups/list create mode 100644 gcloud/alpha/network-security/org-address-groups/list-references create mode 100644 gcloud/alpha/network-security/org-address-groups/remove-items create mode 100644 gcloud/alpha/network-security/org-address-groups/update create mode 100644 gcloud/beta/composer/environments/database-failover create mode 100644 gcloud/beta/composer/environments/fetch-database-properties create mode 100644 gcloud/beta/network-security/address-groups/add-items create mode 100644 gcloud/beta/network-security/address-groups/clone-items create mode 100644 gcloud/beta/network-security/address-groups/create create mode 100644 gcloud/beta/network-security/address-groups/delete create mode 100644 gcloud/beta/network-security/address-groups/describe create mode 100644 gcloud/beta/network-security/address-groups/help create mode 100644 gcloud/beta/network-security/address-groups/list create mode 100644 gcloud/beta/network-security/address-groups/list-references create mode 100644 gcloud/beta/network-security/address-groups/remove-items create mode 100644 gcloud/beta/network-security/address-groups/update create mode 100644 gcloud/beta/network-security/firewall-endpoint-associations/create create mode 100644 gcloud/beta/network-security/firewall-endpoint-associations/delete create mode 100644 gcloud/beta/network-security/firewall-endpoint-associations/describe create mode 100644 gcloud/beta/network-security/firewall-endpoint-associations/help create mode 100644 gcloud/beta/network-security/firewall-endpoint-associations/list create mode 100644 gcloud/beta/network-security/org-address-groups/add-items create mode 100644 gcloud/beta/network-security/org-address-groups/clone-items create mode 100644 gcloud/beta/network-security/org-address-groups/create create mode 100644 gcloud/beta/network-security/org-address-groups/delete create mode 100644 gcloud/beta/network-security/org-address-groups/describe create mode 100644 gcloud/beta/network-security/org-address-groups/help create mode 100644 gcloud/beta/network-security/org-address-groups/list create mode 100644 gcloud/beta/network-security/org-address-groups/list-references create mode 100644 gcloud/beta/network-security/org-address-groups/remove-items create mode 100644 gcloud/beta/network-security/org-address-groups/update create mode 100644 gcloud/composer/environments/database-failover create mode 100644 gcloud/composer/environments/fetch-database-properties create mode 100644 gcloud/network-security/address-groups/add-items create mode 100644 gcloud/network-security/address-groups/clone-items create mode 100644 gcloud/network-security/address-groups/create create mode 100644 gcloud/network-security/address-groups/delete create mode 100644 gcloud/network-security/address-groups/describe create mode 100644 gcloud/network-security/address-groups/help create mode 100644 gcloud/network-security/address-groups/list create mode 100644 gcloud/network-security/address-groups/list-references create mode 100644 gcloud/network-security/address-groups/remove-items create mode 100644 gcloud/network-security/address-groups/update create mode 100644 gcloud/network-security/org-address-groups/add-items create mode 100644 gcloud/network-security/org-address-groups/clone-items create mode 100644 gcloud/network-security/org-address-groups/create create mode 100644 gcloud/network-security/org-address-groups/delete create mode 100644 gcloud/network-security/org-address-groups/describe create mode 100644 gcloud/network-security/org-address-groups/help create mode 100644 gcloud/network-security/org-address-groups/list create mode 100644 gcloud/network-security/org-address-groups/list-references create mode 100644 gcloud/network-security/org-address-groups/remove-items create mode 100644 gcloud/network-security/org-address-groups/update diff --git a/gcloud/_version b/gcloud/_version index bf18703de..b9e26f89c 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 432.0.0 -alpha 2023.05.19 -beta 2023.05.19 +Google Cloud SDK 433.0.0 +alpha 2023.05.26 +beta 2023.05.26 bq 2.0.93 bundled-python3-unix 3.9.16 -core 2023.05.19 +core 2023.05.26 gcloud-crc32c 1.0.0 gsutil 5.24 diff --git a/gcloud/alloydb/clusters/create-secondary b/gcloud/alloydb/clusters/create-secondary new file mode 100644 index 000000000..e11676997 --- /dev/null +++ b/gcloud/alloydb/clusters/create-secondary @@ -0,0 +1,94 @@ +NAME + gcloud alloydb clusters create-secondary - create a new AlloyDB SECONDARY + cluster within a given project + +SYNOPSIS + gcloud alloydb clusters create-secondary CLUSTER + --primary-cluster=PRIMARY_CLUSTER --region=REGION [--async] + [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING + --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new AlloyDB SECONDARY cluster within a given project. + +EXAMPLES + To create a new cluster, run: + + $ gcloud alloydb clusters create-secondary my-cluster \ + --region=us-central1 \ + --primary-cluster=projects/12345/locations/us-central1/\ + clusters/cluster1 + +POSITIONAL ARGUMENTS + CLUSTER + AlloyDB cluster ID + +REQUIRED FLAGS + --primary-cluster=PRIMARY_CLUSTER + AlloyDB primary cluster ID + + --region=REGION + Regional location (e.g. asia-east1, us-east1). See the full list of + regions at https://cloud.google.com/sql/docs/instance-locations. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + Key resource - The Cloud KMS (Key Management Service) cryptokey that will + be used to protect the cluster. The 'AlloyDB Service Agent' service + account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. + The arguments in this group can be used to specify the attributes of this + resource. + + --kms-key=KMS_KEY + ID of the key or fully qualified identifier for the key. + + To set the kms-key attribute: + ▸ provide the argument --kms-key on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --kms-keyring=KMS_KEYRING + The KMS keyring of the key. + + To set the kms-keyring attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-keyring on the command line. + + --kms-location=KMS_LOCATION + The Google Cloud location for the key. + + To set the kms-location attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-location on the command line. + + --kms-project=KMS_PROJECT + The Google Cloud project for the key. + + To set the kms-project attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-project on the command line; + ▸ set the property core/project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha alloydb clusters create-secondary + + $ gcloud beta alloydb clusters create-secondary + diff --git a/gcloud/alloydb/clusters/help b/gcloud/alloydb/clusters/help index a32c0e497..df24069b5 100644 --- a/gcloud/alloydb/clusters/help +++ b/gcloud/alloydb/clusters/help @@ -19,6 +19,9 @@ COMMANDS create Create a new AlloyDB cluster within a given project. + create-secondary + Create a new AlloyDB SECONDARY cluster within a given project. + delete Delete an AlloyDB cluster in a given region. @@ -28,6 +31,9 @@ COMMANDS list List AlloyDB clusters in a given project and region. + promote + Promote an AlloyDB SECONDARY cluster in a given project and region. + restore Restore an AlloyDB cluster from a given backup. diff --git a/gcloud/alloydb/clusters/promote b/gcloud/alloydb/clusters/promote new file mode 100644 index 000000000..2afa54791 --- /dev/null +++ b/gcloud/alloydb/clusters/promote @@ -0,0 +1,45 @@ +NAME + gcloud alloydb clusters promote - promote an AlloyDB SECONDARY cluster in a + given project and region + +SYNOPSIS + gcloud alloydb clusters promote CLUSTER --region=REGION [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Promote an AlloyDB SECONDARY cluster in a given project and region. + +EXAMPLES + To promote a cluster, run: + + $ gcloud alloydb clusters promote my-cluster --region=us-central1 + +POSITIONAL ARGUMENTS + CLUSTER + AlloyDB cluster ID + +REQUIRED FLAGS + --region=REGION + Regional location (e.g. asia-east1, us-east1). See the full list of + regions at https://cloud.google.com/sql/docs/instance-locations. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha alloydb clusters promote + + $ gcloud beta alloydb clusters promote + diff --git a/gcloud/alloydb/instances/create-secondary b/gcloud/alloydb/instances/create-secondary new file mode 100644 index 000000000..91a706a6d --- /dev/null +++ b/gcloud/alloydb/instances/create-secondary @@ -0,0 +1,49 @@ +NAME + gcloud alloydb instances create-secondary - creates a new AlloyDB SECONDARY + instance within a given cluster + +SYNOPSIS + gcloud alloydb instances create-secondary INSTANCE --cluster=CLUSTER + --region=REGION [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Creates a new AlloyDB SECONDARY instance within a given cluster. + +EXAMPLES + To create a new secondary instance, run: + + $ gcloud alloydb instances create-secondary my-instance \ + --cluster=my-cluster --region=us-central1 + +POSITIONAL ARGUMENTS + INSTANCE + AlloyDB instance ID + +REQUIRED FLAGS + --cluster=CLUSTER + AlloyDB cluster ID + + --region=REGION + Regional location (e.g. asia-east1, us-east1). See the full list of + regions at https://cloud.google.com/sql/docs/instance-locations. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha alloydb instances create-secondary + + $ gcloud beta alloydb instances create-secondary + diff --git a/gcloud/alloydb/instances/help b/gcloud/alloydb/instances/help index cedcd553c..1a02fbfe6 100644 --- a/gcloud/alloydb/instances/help +++ b/gcloud/alloydb/instances/help @@ -19,6 +19,9 @@ COMMANDS create Creates a new AlloyDB instance within a given cluster. + create-secondary + Creates a new AlloyDB SECONDARY instance within a given cluster. + delete Deletes an AlloyDB instance within a given cluster. diff --git a/gcloud/alpha/alloydb/clusters/create-secondary b/gcloud/alpha/alloydb/clusters/create-secondary index df274db86..62d77ec4d 100644 --- a/gcloud/alpha/alloydb/clusters/create-secondary +++ b/gcloud/alpha/alloydb/clusters/create-secondary @@ -89,7 +89,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud alloydb clusters create-secondary $ gcloud beta alloydb clusters create-secondary diff --git a/gcloud/alpha/alloydb/clusters/promote b/gcloud/alpha/alloydb/clusters/promote index 9719869e9..674f59aac 100644 --- a/gcloud/alpha/alloydb/clusters/promote +++ b/gcloud/alpha/alloydb/clusters/promote @@ -41,7 +41,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud alloydb clusters promote $ gcloud beta alloydb clusters promote diff --git a/gcloud/alpha/alloydb/instances/create-secondary b/gcloud/alpha/alloydb/instances/create-secondary index 3765b4b8d..10fe47e43 100644 --- a/gcloud/alpha/alloydb/instances/create-secondary +++ b/gcloud/alpha/alloydb/instances/create-secondary @@ -44,7 +44,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud alloydb instances create-secondary $ gcloud beta alloydb instances create-secondary diff --git a/gcloud/alpha/alloydb/instances/help b/gcloud/alpha/alloydb/instances/help index f879d345b..bbfb68bd5 100644 --- a/gcloud/alpha/alloydb/instances/help +++ b/gcloud/alpha/alloydb/instances/help @@ -33,6 +33,9 @@ COMMANDS failover (ALPHA) Failover an AlloyDB instance within a given cluster. + inject-fault + (ALPHA) Inject fault on an AlloyDB instance within a given cluster. + list (ALPHA) Lists AlloyDB instances in a given cluster. diff --git a/gcloud/alpha/alloydb/instances/inject-fault b/gcloud/alpha/alloydb/instances/inject-fault new file mode 100644 index 000000000..191a0f4d8 --- /dev/null +++ b/gcloud/alpha/alloydb/instances/inject-fault @@ -0,0 +1,55 @@ +NAME + gcloud alpha alloydb instances inject-fault - inject fault on an AlloyDB + instance within a given cluster + +SYNOPSIS + gcloud alpha alloydb instances inject-fault INSTANCE --cluster=CLUSTER + --fault-type=FAULT_TYPE --region=REGION [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Inject fault on an AlloyDB instance within a given cluster. + +EXAMPLES + To Inject fault on an instance, run: + + $ gcloud alpha alloydb instances inject-fault my-instance \ + --cluster=my-cluster --region=us-central1 --fault-type=stop-vm + +POSITIONAL ARGUMENTS + INSTANCE + AlloyDB instance ID + +REQUIRED FLAGS + --cluster=CLUSTER + AlloyDB cluster ID + + --fault-type=FAULT_TYPE + Specifies fault type. FAULT_TYPE must be (only one value is supported): + + stop-vm + stop-vm fault type supports stopping the VM. + + --region=REGION + Regional location (e.g. asia-east1, us-east1). See the full list of + regions at https://cloud.google.com/sql/docs/instance-locations. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/artifacts/docker/images/list b/gcloud/alpha/artifacts/docker/images/list index b13e696ab..3a53538d2 100644 --- a/gcloud/alpha/artifacts/docker/images/list +++ b/gcloud/alpha/artifacts/docker/images/list @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud alpha artifacts docker images list [IMAGE_PATH] [--include-tags] - [--occurrence-filter=OCCURRENCE_FILTER; - default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"'] + [--occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" + OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"'] [--show-occurrences] [--show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] @@ -59,14 +59,15 @@ FLAGS --include-tags If specified, all tags associated with each image digest are displayed. - --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"' - A filter for the Occurrences which will be summarized. + --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"' + A filter for the occurrences which will be summarized. --show-occurrences - Show summaries of the various Occurrence types. + Show summaries of the various occurrence types. --show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10 - The number of the most recent images for which to summarize Occurences. + The number of the most recent images for which to summarize + occurrences. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/bigtable/instances/tables/update b/gcloud/alpha/bigtable/instances/tables/update index 881b829e5..ebcc1c534 100644 --- a/gcloud/alpha/bigtable/instances/tables/update +++ b/gcloud/alpha/bigtable/instances/tables/update @@ -4,7 +4,9 @@ NAME SYNOPSIS gcloud alpha bigtable instances tables update (TABLE : --instance=INSTANCE) - [--async] [--deletion-protection] [GCLOUD_WIDE_FLAG ...] + [--async] [--deletion-protection] + [--change-stream-retention-period=CHANGE_STREAM_RETENTION_PERIOD + | --clear-change-stream-retention-period] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update an existing new Cloud Bigtable table with the specified @@ -21,6 +23,17 @@ EXAMPLES $ gcloud alpha bigtable instances tables update my-table \ --instance=my-instance --no-deletion-protection + To enable a change stream with a retention period of 1 day, or to update + your table's change stream retention period to 1 day, run: + + $ gcloud alpha bigtable instances tables update my-table \ + --instance=my-instance --change-stream-retention-period=1d + + To disable a change stream, run: + + $ gcloud alpha bigtable instances tables update my-table \ + --instance=my-instance --clear-change-stream-retention-period + POSITIONAL ARGUMENTS Table resource - Cloud Bigtable table to update. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some @@ -60,6 +73,18 @@ FLAGS --deletion-protection Once specified, the table is deletion protected. + At most one of these can be specified: + + --change-stream-retention-period=CHANGE_STREAM_RETENTION_PERIOD + The length of time to retain change stream data for the table, in the + range of [1 day, 7 days]. Acceptable units are days (d), hours (h), + minutes (m), and seconds (s). If not already specified, enables a + change stream for the table. Examples: 5d or 48h. + + --clear-change-stream-retention-period + This disables the change stream and eventually removes the change + stream data within your retention period. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/builds/triggers/run b/gcloud/alpha/builds/triggers/run index d887cb4e3..ad4cdc0b6 100644 --- a/gcloud/alpha/builds/triggers/run +++ b/gcloud/alpha/builds/triggers/run @@ -3,7 +3,8 @@ NAME SYNOPSIS gcloud alpha builds triggers run (TRIGGER : --region=REGION) - (--branch=BRANCH | --sha=SHA | --tag=TAG) [GCLOUD_WIDE_FLAG ...] + [--substitutions=[KEY=VALUE,...]] + [--branch=BRANCH | --sha=SHA | --tag=TAG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Run a build trigger. @@ -44,8 +45,28 @@ POSITIONAL ARGUMENTS ▸ provide the argument --region on the command line; ▸ set the property builds/region. -REQUIRED FLAGS - Exactly one of these must be specified: +FLAGS + --substitutions=[KEY=VALUE,...] + Parameters to be substituted in the build specification. + + For example (using some nonsensical substitution keys; all keys must + begin with an underscore): + + $ gcloud builds triggers create ... --config config.yaml + --substitutions _FAVORITE_COLOR=blue,_NUM_CANDIES=10 + + This will result in a build where every occurrence of + ${_FAVORITE_COLOR} in certain fields is replaced by "blue", and + similarly for ${_NUM_CANDIES} and "10". + + Only the following built-in variables can be specified with the + --substitutions flag: REPO_NAME, BRANCH_NAME, TAG_NAME, REVISION_ID, + COMMIT_SHA, SHORT_SHA. + + For more details, see: + https://cloud.google.com/cloud-build/docs/api/build-requests#substitutions + + At most one of these can be specified: --branch=BRANCH Branch to run. diff --git a/gcloud/alpha/composer/environments/create b/gcloud/alpha/composer/environments/create index 050219c46..ec354f5ba 100644 --- a/gcloud/alpha/composer/environments/create +++ b/gcloud/alpha/composer/environments/create @@ -7,7 +7,7 @@ SYNOPSIS (ENVIRONMENT : --location=LOCATION) [--airflow-configs=[KEY=VALUE,...]] [--async] [--cloud-sql-machine-type=CLOUD_SQL_MACHINE_TYPE] [--disk-size=DISK_SIZE] [--enable-cloud-data-lineage-integration] - [--env-variables=[NAME=VALUE,...]] + [--enable-high-resilience] [--env-variables=[NAME=VALUE,...]] [--environment-size=ENVIRONMENT_SIZE] [--labels=[KEY=VALUE,...]] [--machine-type=MACHINE_TYPE] [--node-count=NODE_COUNT] [--oauth-scopes=[SCOPE,...]] [--python-version=PYTHON_VERSION] @@ -132,6 +132,9 @@ FLAGS --enable-cloud-data-lineage-integration Enable Cloud Data Lineage integration. + --enable-high-resilience + Enable use of a high resilience, supported for Composer 2 Environments. + --env-variables=[NAME=VALUE,...] A comma-delimited list of environment variable NAME=VALUE pairs to provide to the Airflow scheduler, worker, and webserver processes. NAME diff --git a/gcloud/alpha/composer/environments/database-failover b/gcloud/alpha/composer/environments/database-failover new file mode 100644 index 000000000..db0965ef9 --- /dev/null +++ b/gcloud/alpha/composer/environments/database-failover @@ -0,0 +1,72 @@ +NAME + gcloud alpha composer environments database-failover - run a database + failover operation + +SYNOPSIS + gcloud alpha composer environments database-failover + (ENVIRONMENT : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Run a database failover operation. + +EXAMPLES + To run a manual database failover on the environment named environment-1, + run: $ gcloud alpha composer environments database-failover environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to trigger a database + failover. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud composer environments database-failover + + $ gcloud beta composer environments database-failover + diff --git a/gcloud/alpha/composer/environments/fetch-database-properties b/gcloud/alpha/composer/environments/fetch-database-properties new file mode 100644 index 000000000..c6585a4b4 --- /dev/null +++ b/gcloud/alpha/composer/environments/fetch-database-properties @@ -0,0 +1,67 @@ +NAME + gcloud alpha composer environments fetch-database-properties - fetch + database properties + +SYNOPSIS + gcloud alpha composer environments fetch-database-properties + (ENVIRONMENT : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Fetch database properties. + +EXAMPLES + To fetch database properties for the environment named environment-1, run: $ gcloud alpha composer environments fetch-database-properties \ + environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to fetch database + properties. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud composer environments fetch-database-properties + + $ gcloud beta composer environments fetch-database-properties + diff --git a/gcloud/alpha/composer/environments/help b/gcloud/alpha/composer/environments/help index 37294824f..93d470171 100644 --- a/gcloud/alpha/composer/environments/help +++ b/gcloud/alpha/composer/environments/help @@ -38,12 +38,18 @@ COMMANDS create (ALPHA) Create and initialize a Cloud Composer environment. + database-failover + (ALPHA) Run a database failover operation. + delete (ALPHA) Delete one or more Cloud Composer environments. describe (ALPHA) Get details about a Cloud Composer environment. + fetch-database-properties + (ALPHA) Fetch database properties. + list (ALPHA) List the Cloud Composer environments under a project and location. diff --git a/gcloud/alpha/compute/backend-buckets/update b/gcloud/alpha/compute/backend-buckets/update index e7696936b..20d3681f8 100644 --- a/gcloud/alpha/compute/backend-buckets/update +++ b/gcloud/alpha/compute/backend-buckets/update @@ -173,7 +173,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -245,7 +249,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -334,9 +342,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/compute/backend-services/update b/gcloud/alpha/compute/backend-services/update index 4df4eb96a..0d44ad550 100644 --- a/gcloud/alpha/compute/backend-services/update +++ b/gcloud/alpha/compute/backend-services/update @@ -561,7 +561,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -680,7 +684,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -769,9 +777,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. At most one of these can be specified: diff --git a/gcloud/alpha/compute/future-reservations/create b/gcloud/alpha/compute/future-reservations/create index f688023c8..56335f6e0 100644 --- a/gcloud/alpha/compute/future-reservations/create +++ b/gcloud/alpha/compute/future-reservations/create @@ -200,14 +200,15 @@ OPTIONAL FLAGS Manage the properties of a shared reservation. --share-setting=SHARE_SETTING - Specify if this reservation is shared, and if so, the type of + Specify if this future reservation is shared, and if so, the type of sharing. If you omit this flag, this value is local (not shared) by default. SHARE_SETTING must be one of: local, projects. --share-with=PROJECT,[PROJECT,...] - If this reservation is shared (--share-setting is not local), provide - a list of all of the specific projects that this reservation is - shared with. List must contain project IDs or project numbers. + If this future reservation is shared (--share-setting is not local), + provide a list of all of the specific projects that this future + reservation is shared with. List must contain project IDs or project + numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/compute/future-reservations/update b/gcloud/alpha/compute/future-reservations/update index a3745476a..d95e051b6 100644 --- a/gcloud/alpha/compute/future-reservations/update +++ b/gcloud/alpha/compute/future-reservations/update @@ -11,6 +11,8 @@ SYNOPSIS --machine-type=MACHINE_TYPE --maintenance-interval=MAINTENANCE_INTERVAL --min-cpu-platform=MIN_CPU_PLATFORM] + [--clear-share-settings + | --share-setting=SHARE_SETTING --share-with=PROJECT,[PROJECT,...]] [--start-time=START_TIME --duration=DURATION | --end-time=END_TIME] [GCLOUD_WIDE_FLAG ...] @@ -125,6 +127,27 @@ FLAGS --min-cpu-platform=MIN_CPU_PLATFORM Optional minimum CPU platform of the reservation to create. + Manage the properties of a shared future reservation. + + At most one of these can be specified: + + --clear-share-settings + Clear share settings on future reservation. This will result in + non-shared future reservation. + + Manage the share settings of a future reservation. + + --share-setting=SHARE_SETTING + Specify if this future reservation is shared, and if so, the type + of sharing. If you omit this flag, this value is local (not shared) + by default. SHARE_SETTING must be one of: local, projects. + + --share-with=PROJECT,[PROJECT,...] + If this future reservation is shared (--share-setting is not + local), provide a list of all of the specific projects that this + future reservation is shared with. List must contain project IDs or + project numbers. + Manage the time specific properties for requesting future capacity --start-time=START_TIME diff --git a/gcloud/alpha/compute/instance-groups/managed/set-autoscaling b/gcloud/alpha/compute/instance-groups/managed/set-autoscaling index 8825119bd..3b32d6597 100644 --- a/gcloud/alpha/compute/instance-groups/managed/set-autoscaling +++ b/gcloud/alpha/compute/instance-groups/managed/set-autoscaling @@ -46,12 +46,18 @@ FLAGS This flag allows you to atomically setup complex autoscalers. --cool-down-period=COOL_DOWN_PERIOD - The time period that the autoscaler should wait before it starts - collecting information from a new instance. This prevents the - autoscaler from collecting information when the instance is - initializing, during which the collected usage would not be reliable. - The default is 60s. See $ gcloud topic datetimes for information on - duration formats. + The number of seconds that your application takes to initialize on a VM + instance. This is referred to as the initialization period + (https://cloud.google.com/compute/docs/autoscaler#cool_down_period). + Specifying an accurate initialization period improves autoscaler + decisions. For example, when scaling out, the autoscaler ignores data + from VMs that are still initializing because those VMs might not yet + represent normal usage of your application. The default initialization + period is 60 seconds. See $ gcloud topic datetimes for information on + duration formats. Initialization periods might vary because of numerous + factors. We recommend that you test how long your application may take + to initialize. To do this, create a VM and time your application's + startup process. --cpu-utilization-predictive-method=CPU_UTILIZATION_PREDICTIVE_METHOD Indicates whether to use a predictive algorithm when scaling based on diff --git a/gcloud/alpha/compute/routers/get-nat-ip-info b/gcloud/alpha/compute/routers/get-nat-ip-info new file mode 100644 index 000000000..f0c02fccb --- /dev/null +++ b/gcloud/alpha/compute/routers/get-nat-ip-info @@ -0,0 +1,69 @@ +NAME + gcloud alpha compute routers get-nat-ip-info - display NAT IP information + in a router + +SYNOPSIS + gcloud alpha compute routers get-nat-ip-info NAME [--nat-name=NAT_NAME] + [--region=REGION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) $ gcloud alpha compute routers get-nat-ip-info + + shows a mapping of IP:[usage, mode] allocated to each NAT via the specified + router. + +EXAMPLES + To show NAT IP information from all NATs in router 'r1' in region + 'us-central1', run: + + $ gcloud alpha compute routers get-nat-ip-info r1 \ + --region=us-central1 + + To show NAT IP information for a specific NAT 'nat1' in router 'r1' in + region 'us-central1', run: + + $ gcloud alpha compute routers get-nat-ip-info r1 \ + --region=us-central1 --nat-name="nat1" + +POSITIONAL ARGUMENTS + NAME + Name of the router to get NAT IP info. + +FLAGS + --nat-name=NAT_NAME + The NAT name to filter out NAT IP information + + --region=REGION + Region of the router to get NAT IP info. If not specified, you might be + prompted to select a region (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/region property: + + $ gcloud config set compute/region REGION + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + To unset the property, run: + + $ gcloud config unset compute/region + + Alternatively, the region can be stored in the environment variable + CLOUDSDK_COMPUTE_REGION. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/routers/help b/gcloud/alpha/compute/routers/help index 1d201196f..719120c37 100644 --- a/gcloud/alpha/compute/routers/help +++ b/gcloud/alpha/compute/routers/help @@ -44,6 +44,9 @@ COMMANDS describe (ALPHA) Describe a Compute Engine router. + get-nat-ip-info + (ALPHA) Display NAT IP information in a router. + get-nat-mapping-info (ALPHA) Display NAT Mapping information in a router. diff --git a/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion index 1c2311d57..c104054d4 100644 --- a/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion +++ b/gcloud/alpha/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha compute security-policies rules add-preconfig-waf-exclusion - PRIORITY --target-rule-set=TARGET_RULE_SET + PRIORITY --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -60,6 +60,18 @@ REQUIRED FLAGS target for associating request field exclusions. See --target-rule-ids. OPTIONAL FLAGS + --region=REGION + Region of the security policy to add the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Adds a request cookie to the request field exclusions associated with the rule set and rule IDs (if given). This specifies a request cookie diff --git a/gcloud/alpha/compute/security-policies/rules/create b/gcloud/alpha/compute/security-policies/rules/create index 314e8a918..9e82a5eaa 100644 --- a/gcloud/alpha/compute/security-policies/rules/create +++ b/gcloud/alpha/compute/security-policies/rules/create @@ -31,6 +31,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] @@ -259,6 +260,17 @@ OPTIONAL FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to add. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/alpha/compute/security-policies/rules/delete b/gcloud/alpha/compute/security-policies/rules/delete index fce3a4885..f15794f93 100644 --- a/gcloud/alpha/compute/security-policies/rules/delete +++ b/gcloud/alpha/compute/security-policies/rules/delete @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha compute security-policies rules delete [PRIORITY ...] - [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] + [--region=REGION] [--security-policy=SECURITY_POLICY] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute security-policies rules delete is used to @@ -23,6 +24,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to delete. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/alpha/compute/security-policies/rules/describe b/gcloud/alpha/compute/security-policies/rules/describe index a66f9182f..2ecafc28d 100644 --- a/gcloud/alpha/compute/security-policies/rules/describe +++ b/gcloud/alpha/compute/security-policies/rules/describe @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha compute security-policies rules describe PRIORITY - [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] + [--region=REGION] [--security-policy=SECURITY_POLICY] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute security-policies rules describe displays all @@ -23,6 +24,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to describe. If not specified, you might + be prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion index 0cd908927..6a5fa37d3 100644 --- a/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion +++ b/gcloud/alpha/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha compute security-policies rules remove-preconfig-waf-exclusion - PRIORITY --target-rule-set=TARGET_RULE_SET + PRIORITY --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -87,6 +87,18 @@ REQUIRED FLAGS to remove request field exclusions regardless of the target. OPTIONAL FLAGS + --region=REGION + Region of the security policy to remove the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Removes a request cookie from the existing request field exclusions associated with the rule set and rule IDs (if given). diff --git a/gcloud/alpha/compute/security-policies/rules/update b/gcloud/alpha/compute/security-policies/rules/update index 06d6f9675..645f2a217 100644 --- a/gcloud/alpha/compute/security-policies/rules/update +++ b/gcloud/alpha/compute/security-policies/rules/update @@ -21,6 +21,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [--expression=EXPRESSION --network-dest-ip-ranges=[DEST_IP_RANGE,...] @@ -209,6 +210,17 @@ FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to update. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/alpha/compute/service-attachments/create b/gcloud/alpha/compute/service-attachments/create index 29193172b..aec55b282 100644 --- a/gcloud/alpha/compute/service-attachments/create +++ b/gcloud/alpha/compute/service-attachments/create @@ -13,7 +13,7 @@ SYNOPSIS [--domain-names=[DOMAIN_NAMES,...]] [--enable-proxy-protocol] [--nat-subnets-region=NAT_SUBNETS_REGION] [--producer-forwarding-rule-region=PRODUCER_FORWARDING_RULE_REGION] - [--region=REGION] [GCLOUD_WIDE_FLAG ...] + [--reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute service-attachments create is used to create @@ -127,6 +127,20 @@ OPTIONAL FLAGS Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION. + --reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + --region=REGION Region of the service attachment to create. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/alpha/compute/service-attachments/update b/gcloud/alpha/compute/service-attachments/update index b0a4684ce..0dcc54207 100644 --- a/gcloud/alpha/compute/service-attachments/update +++ b/gcloud/alpha/compute/service-attachments/update @@ -9,8 +9,8 @@ SYNOPSIS [--consumer-reject-list=[REJECT_LIST,...]] [--description=DESCRIPTION] [--[no-]enable-proxy-protocol] [--nat-subnets=NAT_SUBNETS,[NAT_SUBNETS,...]] - [--nat-subnets-region=NAT_SUBNETS_REGION] [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--nat-subnets-region=NAT_SUBNETS_REGION] + [--[no-]reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute service-attachments update is used to update @@ -93,6 +93,23 @@ FLAGS set to the region of the service attachment. Overrides the default compute/region property value for this command invocation. + --[no-]reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + + Use --reconcile-connections to enable and --no-reconcile-connections to + disable. + --region=REGION Region of the service attachment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/alpha/compute/tpus/tpu-vm/help b/gcloud/alpha/compute/tpus/tpu-vm/help index 4b5b47682..d47bb0cb6 100644 --- a/gcloud/alpha/compute/tpus/tpu-vm/help +++ b/gcloud/alpha/compute/tpus/tpu-vm/help @@ -64,6 +64,9 @@ COMMANDS stop (ALPHA) Stop a Cloud TPU VM node. + update + (ALPHA) Update a Cloud TPU VM node. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/compute/tpus/tpu-vm/update b/gcloud/alpha/compute/tpus/tpu-vm/update new file mode 100644 index 000000000..35f199f54 --- /dev/null +++ b/gcloud/alpha/compute/tpus/tpu-vm/update @@ -0,0 +1,115 @@ +NAME + gcloud alpha compute tpus tpu-vm update - update a Cloud TPU VM node + +SYNOPSIS + gcloud alpha compute tpus tpu-vm update (TPU : --zone=ZONE) [--async] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a Cloud TPU VM node. + +EXAMPLES + To modify a TPU VM node with ID my-tpu in the default user project, network + and compute/zone (with other defaults supplied by API) by adding labels k0, + with value value0 and label k1 with value value1 and removing labels with + key k2, run: + + $ gcloud alpha compute tpus tpu-vm update my-tpu \ + --update-labels=k0=value0,k1=value1 --remove-labels=k2 + + Labels can be used to identify the TPU VM node. To list TPU VM nodes with + the k1:value1 label, run: + + $ gcloud alpha compute tpus tpu-vm list --filter='labels.k1=value1' + + To list only the labels when describing a resource, use --format to filter + the result: + + $ gcloud alpha compute tpus tpu-vm describe my-tpu \ + --format="default(labels)" + +POSITIONAL ARGUMENTS + Tpu resource - Name of the Cloud TPU VM node to update. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument tpu on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + TPU + ID of the tpu or fully qualified identifier for the tpu. + + To set the tpu attribute: + ▸ provide the argument tpu on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the Cloud TPU. + + If not specified, will use default compute/zone. + + To set the zone attribute: + ▸ provide the argument tpu on the command line with a fully + specified name; + ▸ provide the argument --zone on the command line; + ▸ set the property compute/zone. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --update-labels=[KEY=VALUE,...] + Resource labels to update that represent user-provided metadata. If a + label exists, its value is modified. Otherwise, a new label is created. + See https://cloud.google.com/compute/docs/labeling-resources for + details. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud alpha compute tpus tpu-vm update --clear-labels + + To remove all existing labels and create two new labels, 'foo' and + 'baz': + + $ gcloud alpha compute tpus tpu-vm update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the tpu/v2alpha1 API. The full documentation for this API + can be found at: https://cloud.google.com/tpu/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/container/node-pools/create b/gcloud/alpha/container/node-pools/create index 3f2ac1892..da2068606 100644 --- a/gcloud/alpha/container/node-pools/create +++ b/gcloud/alpha/container/node-pools/create @@ -43,6 +43,8 @@ SYNOPSIS [--enable-autoscaling --location-policy=LOCATION_POLICY --max-nodes=MAX_NODES --min-nodes=MIN_NODES --total-max-nodes=TOTAL_MAX_NODES --total-min-nodes=TOTAL_MIN_NODES] + [--enable-best-effort-provision + --min-provision-nodes=MIN_PROVISION_NODES] [--ephemeral-storage=[local-ssd-count=LOCAL-SSD-COUNT] | --ephemeral-storage-local-ssd=[count=COUNT] | --local-nvme-ssd-block=[count=COUNT] @@ -719,6 +721,16 @@ FLAGS --node-pool (or default node pool if unspecified) can scale. Ignored unless --enable-autoscaling is also specified. + Specifies minimum number of nodes to be created when best effort + provisioning enabled. + + --enable-best-effort-provision + Enable best effort provision for nodes + + --min-provision-nodes=MIN_PROVISION_NODES + Specifies the minimum number of nodes to be provisioned during + creation + At most one of these can be specified: --ephemeral-storage=[local-ssd-count=LOCAL-SSD-COUNT] diff --git a/gcloud/alpha/dataplex/datascan/create b/gcloud/alpha/dataplex/datascan/create index 12f3be788..745fecc4d 100644 --- a/gcloud/alpha/dataplex/datascan/create +++ b/gcloud/alpha/dataplex/datascan/create @@ -9,8 +9,7 @@ SYNOPSIS [--data-quality-spec-file=DATA_QUALITY_SPEC_FILE] [--description=DESCRIPTION] [--display-name=DISPLAY_NAME] [--labels=[KEY=VALUE,...]] [--async | --validate-only] - [--field=FIELD - --disabled=DISABLED --on-demand=ON_DEMAND --schedule=SCHEDULE] + [--field=FIELD --on-demand=ON_DEMAND --schedule=SCHEDULE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -119,12 +118,6 @@ OPTIONAL FLAGS Datascan scheduling and trigger settings - --disabled=DISABLED - Prevent the scan from executing (including both scheduled scans and - scans triggered via RunDataScan API). This does not cancel - currently running scan jobs. If not specified, the default is - false. - --on-demand=ON_DEMAND If set, the scan runs one-time shortly after Datascan Creation. diff --git a/gcloud/alpha/functions/upgrade b/gcloud/alpha/functions/upgrade index 3be07c5b9..8ccdb7901 100644 --- a/gcloud/alpha/functions/upgrade +++ b/gcloud/alpha/functions/upgrade @@ -12,26 +12,24 @@ DESCRIPTION EXAMPLES To start the upgrade process for a 1st gen function foo and create a 2nd - gen function copy, run: + gen copy, run: $ gcloud alpha functions upgrade foo - Once you are ready to redirect production traffic to the 2nd gen function - copy, run: + Once you are ready to redirect traffic to the 2nd gen copy, run: $ gcloud alpha functions upgrade foo --redirect-traffic - If you find you need to do more local testing you can rollback production - traffic to the 1st gen function copy: + If you find you need to do more local testing you can rollback traffic to + the 1st gen copy: $ gcloud alpha functions upgrade foo --rollback-traffic - Once you're ready to finish upgrading and delete the 1st gen function copy, - run: + Once you're ready to finish upgrading and delete the 1st gen copy, run: $ gcloud alpha functions upgrade foo --commit - You can abort the generation upgrade process at any time by running: + You can abort the upgrade process at any time by running: $ gcloud alpha functions upgrade foo --abort diff --git a/gcloud/alpha/iam/workforce-pools/providers/create-oidc b/gcloud/alpha/iam/workforce-pools/providers/create-oidc index 0c599ef41..f02350ff2 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/create-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/create-oidc @@ -9,8 +9,9 @@ SYNOPSIS --issuer-uri=ISSUER_URI [--async] [--attribute-condition=ATTRIBUTE_CONDITION] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a new OIDC workforce pool provider. @@ -191,19 +192,18 @@ OPTIONAL FLAGS A display name for the workforce pool provider. Cannot exceed 32 characters in length. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/iam/workforce-pools/providers/update-oidc b/gcloud/alpha/iam/workforce-pools/providers/update-oidc index da21d0a3c..6ad4f0fe4 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/update-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/update-oidc @@ -9,8 +9,9 @@ SYNOPSIS [--attribute-mapping=[ATTRIBUTE_MAPPING,...]] [--client-id=CLIENT_ID] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] [--issuer-uri=ISSUER_URI] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update an OIDC workforce pool provider. @@ -190,19 +191,18 @@ FLAGS --issuer-uri=ISSUER_URI The OIDC issuer URI. Must be a valid URI using the 'https' scheme. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/netapp/volumes/update b/gcloud/alpha/netapp/volumes/update index 9a3b008e2..c1b8002a0 100644 --- a/gcloud/alpha/netapp/volumes/update +++ b/gcloud/alpha/netapp/volumes/update @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha netapp volumes update (VOLUME : --location=LOCATION) [--async] [--capacity=CAPACITY] [--description=DESCRIPTION] - [--enable-kerberos=ENABLE_KERBEROS] [--enable-ldap=ENABLE_LDAP] + [--enable-kerberos=ENABLE_KERBEROS] [--export-policy=[access-type=ACCESS-TYPE], [allowed-clients=ALLOWED-CLIENTS],[has-root-access=HAS-ROOT-ACCESS], [kerberos-5-read-only=KERBEROS-5-READ-ONLY], @@ -14,7 +14,6 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--from-snapshot=FROM_SNAPSHOT] - [--network=[name=NAME],[psa-range=PSA-RANGE]] [--protocols=PROTOCOL,[PROTOCOL,...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--share-name=SHARE_NAME] @@ -83,9 +82,6 @@ FLAGS --enable-kerberos=ENABLE_KERBEROS Boolean flag indicating whether Volume is a kerberos Volume or not - --enable-ldap=ENABLE_LDAP - Boolean flag indicating whether Volume is a NFS LDAP Volume or not - --export-policy=[access-type=ACCESS-TYPE],[allowed-clients=ALLOWED-CLIENTS],[has-root-access=HAS-ROOT-ACCESS],[kerberos-5-read-only=KERBEROS-5-READ-ONLY],[kerberos-5-read-write=KERBEROS-5-READ-WRITE],[kerberos-5i-read-only=KERBEROS-5I-READ-ONLY],[kerberos-5i-read-write=KERBEROS-5I-READ-WRITE],[kerberos-5p-read-only=KERBEROS-5P-READ-ONLY],[kerberos-5p-read-write=KERBEROS-5P-READ-WRITE],[nfsv3=NFSV3],[nfsv4=NFSV4] Export Policy of a Cloud NetApp Files Volume. This will be a field similar to network in which export policy fields can be specified as @@ -124,18 +120,6 @@ FLAGS To set the snapshot attribute: ▸ provide the argument --from-snapshot on the command line. - --network=[name=NAME],[psa-range=PSA-RANGE] - Network configuration for a Cloud NetApp Files Volume. Specifying - psa-range is optional. - name - The name of the Google Compute Engine VPC network to which the - volume is connected. - psa-range - The psa-range is the name of the allocated range of the Private - Service Access connection. The range you specify can't overlap with - either existing subnets or assigned IP address ranges for other - Cloud NetApp Files Volumes in the selected VPC network. - --protocols=PROTOCOL,[PROTOCOL,...] Type of File System protocols for the Cloud NetApp Files VolumeValid component values are: NFSV3, NFSV4, SMB diff --git a/gcloud/alpha/network-security/address-groups/add-items b/gcloud/alpha/network-security/address-groups/add-items new file mode 100644 index 000000000..705225a80 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/add-items @@ -0,0 +1,80 @@ +NAME + gcloud alpha network-security address-groups add-items - add items to an + address group + +SYNOPSIS + gcloud alpha network-security address-groups add-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Add items to an existing address group. + +EXAMPLES + Add an item to an address group named my-address-group. + + $ gcloud alpha network-security address-groups add-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups add-items + + $ gcloud beta network-security address-groups add-items + diff --git a/gcloud/alpha/network-security/address-groups/clone-items b/gcloud/alpha/network-security/address-groups/clone-items new file mode 100644 index 000000000..1fd50ef31 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/clone-items @@ -0,0 +1,81 @@ +NAME + gcloud alpha network-security address-groups clone-items - clone items from + source address group + +SYNOPSIS + gcloud alpha network-security address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--source=SOURCE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Clone items from source address group. + +EXAMPLES + Clone items from source address group named other-address-group. + + $ gcloud alpha network-security address-groups clone-items \ + my-address-group \ + --source=projects/other/locations/global/other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups clone-items + + $ gcloud beta network-security address-groups clone-items + diff --git a/gcloud/alpha/network-security/address-groups/create b/gcloud/alpha/network-security/address-groups/create new file mode 100644 index 000000000..cf8e0605c --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/create @@ -0,0 +1,96 @@ +NAME + gcloud alpha network-security address-groups create - create an address + group + +SYNOPSIS + gcloud alpha network-security address-groups create + (ADDRESS_GROUP : --location=LOCATION) --capacity=CAPACITY --type=TYPE + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud alpha network-security address-groups create \ + my-address-group --type=IPV4 --capacity=100 \ + --description="optional description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups create + + $ gcloud beta network-security address-groups create + diff --git a/gcloud/alpha/network-security/address-groups/delete b/gcloud/alpha/network-security/address-groups/delete new file mode 100644 index 000000000..74d6f9bf7 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/delete @@ -0,0 +1,75 @@ +NAME + gcloud alpha network-security address-groups delete - delete address group + +SYNOPSIS + gcloud alpha network-security address-groups delete + (ADDRESS_GROUP : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud alpha network-security address-groups delete \ + my-address-group --location=global + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups delete + + $ gcloud beta network-security address-groups delete + diff --git a/gcloud/alpha/network-security/address-groups/describe b/gcloud/alpha/network-security/address-groups/describe new file mode 100644 index 000000000..3d73dcd60 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/describe @@ -0,0 +1,71 @@ +NAME + gcloud alpha network-security address-groups describe - describe an address + group + +SYNOPSIS + gcloud alpha network-security address-groups describe + (ADDRESS_GROUP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud alpha network-security address-groups describe \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups describe + + $ gcloud beta network-security address-groups describe + diff --git a/gcloud/alpha/network-security/address-groups/help b/gcloud/alpha/network-security/address-groups/help new file mode 100644 index 000000000..cabaf61f3 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/help @@ -0,0 +1,55 @@ +NAME + gcloud alpha network-security address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud alpha network-security address-groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + (ALPHA) Add items to an address group. + + clone-items + (ALPHA) Clone items from source address group. + + create + (ALPHA) Create an address group. + + delete + (ALPHA) Delete address group. + + describe + (ALPHA) Describe an address group. + + list + (ALPHA) List address groups. + + list-references + (ALPHA) Lists References of an Address Group. + + remove-items + (ALPHA) Remove items from an address group. + + update + (ALPHA) Update an address group. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups + + $ gcloud beta network-security address-groups + diff --git a/gcloud/alpha/network-security/address-groups/list b/gcloud/alpha/network-security/address-groups/list new file mode 100644 index 000000000..89e68a4ad --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/list @@ -0,0 +1,90 @@ +NAME + gcloud alpha network-security address-groups list - list address groups + +SYNOPSIS + gcloud alpha network-security address-groups list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all address groups in the specified location of the current + project. + +EXAMPLES + To list address groups in the current project, run: + + $ gcloud alpha network-security address-groups list --location=global + +REQUIRED FLAGS + Location resource - The project of the address groups to display. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups list + + $ gcloud beta network-security address-groups list + diff --git a/gcloud/alpha/network-security/address-groups/list-references b/gcloud/alpha/network-security/address-groups/list-references new file mode 100644 index 000000000..2db155836 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/list-references @@ -0,0 +1,101 @@ +NAME + gcloud alpha network-security address-groups list-references - lists + References of an Address Group + +SYNOPSIS + gcloud alpha network-security address-groups list-references + (ADDRESS_GROUP : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Lists References of an Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud alpha network-security address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument ADDRESS_GROUP on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups list-references + + $ gcloud beta network-security address-groups list-references + diff --git a/gcloud/alpha/network-security/address-groups/remove-items b/gcloud/alpha/network-security/address-groups/remove-items new file mode 100644 index 000000000..31e1325c4 --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/remove-items @@ -0,0 +1,80 @@ +NAME + gcloud alpha network-security address-groups remove-items - remove items + from an address group + +SYNOPSIS + gcloud alpha network-security address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Remove items from an existing address group. + +EXAMPLES + Remove an item from an address group named my-address-group. + + $ gcloud alpha network-security address-groups remove-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups remove-items + + $ gcloud beta network-security address-groups remove-items + diff --git a/gcloud/alpha/network-security/address-groups/update b/gcloud/alpha/network-security/address-groups/update new file mode 100644 index 000000000..4230456df --- /dev/null +++ b/gcloud/alpha/network-security/address-groups/update @@ -0,0 +1,114 @@ +NAME + gcloud alpha network-security address-groups update - update an address + group + +SYNOPSIS + gcloud alpha network-security address-groups update + (ADDRESS_GROUP : --location=LOCATION) [--async] + [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud alpha network-security address-groups update \ + my-address-group --description="New description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud alpha network-security address-groups update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud alpha network-security address-groups update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security address-groups update + + $ gcloud beta network-security address-groups update + diff --git a/gcloud/alpha/network-security/firewall-endpoint-associations/create b/gcloud/alpha/network-security/firewall-endpoint-associations/create new file mode 100644 index 000000000..3aa6a7596 --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoint-associations/create @@ -0,0 +1,152 @@ +NAME + gcloud alpha network-security firewall-endpoint-associations create - + create a Firewall Plus endpoint association + +SYNOPSIS + gcloud alpha network-security firewall-endpoint-associations create + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) --network=NETWORK + (--endpoint=ENDPOINT + : --endpoint-zone=ENDPOINT_ZONE --organization=ORGANIZATION) + [--async] [--labels=[KEY=VALUE,...]] + [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Associate the specified network with the firewall endpoint. + Successful creation of a firewall endpoint association results in an + association in READY state. Check the progress of association creation by + using gcloud network-security firewall-endpoint-associations list. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To associate a network with a firewall endpoint, run: + + $ gcloud alpha network-security firewall-endpoint-associations \ + create my-assoc \ + --network=projects/my-project/networks/global/myNetwork \ + --endpoint=organizations/1234/locations/us-central1-a/\ + firewallEndpoints/my-endpoint --zone=us-central1-a \ + --project=my-project + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +REQUIRED FLAGS + Network resource - Firewall Plus. This represents a Cloud resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument --network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --network=NETWORK + ID of the network or fully qualified identifier for the network. + + To set the network-name attribute: + ▸ provide the argument --network on the command line. + + Firewall endpoint resource - Firewall Plus. The arguments in this group + can be used to specify the attributes of this resource. + + This must be specified. + + --endpoint=ENDPOINT + ID of the firewall endpoint or fully qualified identifier for the + firewall endpoint. + + To set the endpoint-name attribute: + ▸ provide the argument --endpoint on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --endpoint-zone=ENDPOINT_ZONE + Zone of the firewall endpoint. + + To set the endpoint-zone attribute: + ▸ provide the argument --endpoint on the command line with a fully + specified name; + ▸ provide the argument --endpoint-zone on the command line; + ▸ provide the argument --zone on the command line; + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name. + + --organization=ORGANIZATION + Organization ID to which the changes should apply. + + To set the organization attribute: + ▸ provide the argument --endpoint on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoint-associations create + diff --git a/gcloud/alpha/network-security/firewall-endpoint-associations/delete b/gcloud/alpha/network-security/firewall-endpoint-associations/delete new file mode 100644 index 000000000..a4884896c --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoint-associations/delete @@ -0,0 +1,87 @@ +NAME + gcloud alpha network-security firewall-endpoint-associations delete - + delete a Firewall Plus endpoint association + +SYNOPSIS + gcloud alpha network-security firewall-endpoint-associations delete + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) [--async] + [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Unassociate the specified network from a firewall endpoint. Check + the progress of association deletion by using gcloud network-security + firewall-endpoint-associations list. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To unassociate a network from a firewall, run: + + $ gcloud alpha network-security firewall-endpoint-associations \ + delete my-assoc --zone=us-central1-a --project=my-project OR + $ gcloud alpha network-security firewall-endpoint-associations \ + delete \ + projects/my-project/locations/us-central1-a/\ + firewallEndpointAssociations/my-association + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoint-associations delete + diff --git a/gcloud/alpha/network-security/firewall-endpoint-associations/describe b/gcloud/alpha/network-security/firewall-endpoint-associations/describe new file mode 100644 index 000000000..bd09ca1b4 --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoint-associations/describe @@ -0,0 +1,75 @@ +NAME + gcloud alpha network-security firewall-endpoint-associations describe - + describe a Firewall Plus endpoint association + +SYNOPSIS + gcloud alpha network-security firewall-endpoint-associations describe + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a firewall endpoint association. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To get a description of a firewall endpoint association called + my-association, run: + + $ gcloud alpha network-security firewall-endpoint-associations \ + describe my-association --zone=us-central1-a \ + --project=my-project OR + $ gcloud alpha network-security firewall-endpoint-associations \ + describe \ + projects/my-project/locations/us-central1-a/\ + firewallEndpointAssociations/my-association + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoint-associations \ + describe + diff --git a/gcloud/alpha/network-security/firewall-endpoint-associations/help b/gcloud/alpha/network-security/firewall-endpoint-associations/help new file mode 100644 index 000000000..29399d142 --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoint-associations/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha network-security firewall-endpoint-associations - create and + manage Firewall Plus endpoint associations + +SYNOPSIS + gcloud alpha network-security firewall-endpoint-associations COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create and manage Firewall Plus endpoint associations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create a Firewall Plus endpoint association. + + delete + (ALPHA) Delete a Firewall Plus endpoint association. + + describe + (ALPHA) Describe a Firewall Plus endpoint association. + + list + (ALPHA) List Firewall Plus endpoint associations. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoint-associations + diff --git a/gcloud/alpha/network-security/firewall-endpoint-associations/list b/gcloud/alpha/network-security/firewall-endpoint-associations/list new file mode 100644 index 000000000..375d5cf7e --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoint-associations/list @@ -0,0 +1,79 @@ +NAME + gcloud alpha network-security firewall-endpoint-associations list - list + Firewall Plus endpoint associations + +SYNOPSIS + gcloud alpha network-security firewall-endpoint-associations list + [--zone=ZONE; default="-"] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List firewall endpoint associations. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To list firewall endpoint associations, run: + + $ gcloud alpha network-security firewall-endpoint-associations \ list --zone=us-central1-a --project=my-project + + To list firewall endpoint associations in all zones, run: + + $ gcloud alpha network-security firewall-endpoint-associations \ list --project=my-project + + The project is automatically read from the core/project property if it is + defined. + +FLAGS + --zone=ZONE; default="-" + Zone for the list operation + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoint-associations list + diff --git a/gcloud/alpha/network-security/help b/gcloud/alpha/network-security/help index 319f0edc5..8ac8c8dad 100644 --- a/gcloud/alpha/network-security/help +++ b/gcloud/alpha/network-security/help @@ -15,18 +15,27 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + address-groups + (ALPHA) Manage Network Security AddressGroups. + authorization-policies (ALPHA) Manage Network Security AuthorizationPolicies. client-tls-policies (ALPHA) Manage Network Security ClientTlsPolicies. + firewall-endpoint-associations + (ALPHA) Create and manage Firewall Plus endpoint associations. + firewall-endpoints (ALPHA) Create and manage Firewall Plus endpoints. gateway-security-policies (ALPHA) Manage Network Security Gateway Security Policies. + org-address-groups + (ALPHA) Manage Network Security AddressGroups. + security-profile-groups (ALPHA) Manage Network Security - Security Profile Groups. diff --git a/gcloud/alpha/network-security/org-address-groups/add-items b/gcloud/alpha/network-security/org-address-groups/add-items new file mode 100644 index 000000000..89edd66b5 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/add-items @@ -0,0 +1,82 @@ +NAME + gcloud alpha network-security org-address-groups add-items - add items to + an address group of organization + +SYNOPSIS + gcloud alpha network-security org-address-groups add-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Add items to an existing address group of organization. + +EXAMPLES + Add an item to an address group named my-address-group of organization + 1234. + + $ gcloud alpha network-security org-address-groups add-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups add-items + + $ gcloud beta network-security org-address-groups add-items + diff --git a/gcloud/alpha/network-security/org-address-groups/clone-items b/gcloud/alpha/network-security/org-address-groups/clone-items new file mode 100644 index 000000000..495797cc4 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/clone-items @@ -0,0 +1,83 @@ +NAME + gcloud alpha network-security org-address-groups clone-items - clone items + from source address group of organization + +SYNOPSIS + gcloud alpha network-security org-address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Clone items from source address group of organization. + +EXAMPLES + Clone items from source address group named other-address-group of + organization 1234. + + $ gcloud alpha network-security org-address-groups clone-items \ + my-address-group --organization=1234 \ + --source=other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups clone-items + + $ gcloud beta network-security org-address-groups clone-items + diff --git a/gcloud/alpha/network-security/org-address-groups/create b/gcloud/alpha/network-security/org-address-groups/create new file mode 100644 index 000000000..5e61cd634 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/create @@ -0,0 +1,97 @@ +NAME + gcloud alpha network-security org-address-groups create - create an address + group + +SYNOPSIS + gcloud alpha network-security org-address-groups create + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + --capacity=CAPACITY --type=TYPE [--async] [--description=DESCRIPTION] + [--items=[ITEMS,...]] [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud alpha network-security org-address-groups create \ + my-address-group --type=IPV4 --capacity=100 \ + --description="optional description" --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups create + + $ gcloud beta network-security org-address-groups create + diff --git a/gcloud/alpha/network-security/org-address-groups/delete b/gcloud/alpha/network-security/org-address-groups/delete new file mode 100644 index 000000000..a254b67dd --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/delete @@ -0,0 +1,78 @@ +NAME + gcloud alpha network-security org-address-groups delete - delete address + group + +SYNOPSIS + gcloud alpha network-security org-address-groups delete + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud alpha network-security org-address-groups delete \ + my-address-group --location=global --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups delete + + $ gcloud beta network-security org-address-groups delete + diff --git a/gcloud/alpha/network-security/org-address-groups/describe b/gcloud/alpha/network-security/org-address-groups/describe new file mode 100644 index 000000000..69fb1ffa2 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/describe @@ -0,0 +1,73 @@ +NAME + gcloud alpha network-security org-address-groups describe - describe an + address group + +SYNOPSIS + gcloud alpha network-security org-address-groups describe + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud alpha network-security org-address-groups describe \ + my-address-group --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups describe + + $ gcloud beta network-security org-address-groups describe + diff --git a/gcloud/alpha/network-security/org-address-groups/help b/gcloud/alpha/network-security/org-address-groups/help new file mode 100644 index 000000000..4f5fa3984 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/help @@ -0,0 +1,56 @@ +NAME + gcloud alpha network-security org-address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud alpha network-security org-address-groups COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + (ALPHA) Add items to an address group of organization. + + clone-items + (ALPHA) Clone items from source address group of organization. + + create + (ALPHA) Create an address group. + + delete + (ALPHA) Delete address group. + + describe + (ALPHA) Describe an address group. + + list + (ALPHA) List address groups. + + list-references + (ALPHA) Lists References of an Organization Address Group. + + remove-items + (ALPHA) Remove items from an address group of organization. + + update + (ALPHA) Update an address group. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups + + $ gcloud beta network-security org-address-groups + diff --git a/gcloud/alpha/network-security/org-address-groups/list b/gcloud/alpha/network-security/org-address-groups/list new file mode 100644 index 000000000..0b64e3dff --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/list @@ -0,0 +1,97 @@ +NAME + gcloud alpha network-security org-address-groups list - list address groups + +SYNOPSIS + gcloud alpha network-security org-address-groups list + (--location=LOCATION : --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all address groups in the specified location of an + organization. + +EXAMPLES + To list address groups in an organization, run: + + $ gcloud alpha network-security org-address-groups list \ + --location=global --organization=1234 + +REQUIRED FLAGS + Location resource - The organization of the address groups to display. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups list + + $ gcloud beta network-security org-address-groups list + diff --git a/gcloud/alpha/network-security/org-address-groups/list-references b/gcloud/alpha/network-security/org-address-groups/list-references new file mode 100644 index 000000000..6de347a31 --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/list-references @@ -0,0 +1,101 @@ +NAME + gcloud alpha network-security org-address-groups list-references - lists + References of an Organization Address Group + +SYNOPSIS + gcloud alpha network-security org-address-groups list-references + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Lists References of an Organization Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud alpha network-security org-address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups list-references + + $ gcloud beta network-security org-address-groups list-references + diff --git a/gcloud/alpha/network-security/org-address-groups/remove-items b/gcloud/alpha/network-security/org-address-groups/remove-items new file mode 100644 index 000000000..3a6f6bfed --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/remove-items @@ -0,0 +1,82 @@ +NAME + gcloud alpha network-security org-address-groups remove-items - remove + items from an address group of organization + +SYNOPSIS + gcloud alpha network-security org-address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Remove items from an existing address group of organization. + +EXAMPLES + Remove an item from an address group named my-address-group of organization + 1234. + + $ gcloud alpha network-security org-address-groups remove-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups remove-items + + $ gcloud beta network-security org-address-groups remove-items + diff --git a/gcloud/alpha/network-security/org-address-groups/update b/gcloud/alpha/network-security/org-address-groups/update new file mode 100644 index 000000000..56154b1ec --- /dev/null +++ b/gcloud/alpha/network-security/org-address-groups/update @@ -0,0 +1,117 @@ +NAME + gcloud alpha network-security org-address-groups update - update an address + group + +SYNOPSIS + gcloud alpha network-security org-address-groups update + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud alpha network-security org-address-groups update \ + my-address-group --description="New description" \ + --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud alpha network-security org-address-groups update \ + --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud alpha network-security org-address-groups update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud network-security org-address-groups update + + $ gcloud beta network-security org-address-groups update + diff --git a/gcloud/alpha/run/jobs/delete b/gcloud/alpha/run/jobs/delete index 27b5e1aa6..2be01b605 100644 --- a/gcloud/alpha/run/jobs/delete +++ b/gcloud/alpha/run/jobs/delete @@ -2,7 +2,8 @@ NAME gcloud alpha run jobs delete - delete a job SYNOPSIS - gcloud alpha run jobs delete JOB [--region=REGION] [GCLOUD_WIDE_FLAG ...] + gcloud alpha run jobs delete JOB [--[no-]async] [--region=REGION] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a job. @@ -32,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument JOB on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/alpha/run/jobs/executions/delete b/gcloud/alpha/run/jobs/executions/delete index d8e7f777a..046988e6c 100644 --- a/gcloud/alpha/run/jobs/executions/delete +++ b/gcloud/alpha/run/jobs/executions/delete @@ -2,8 +2,8 @@ NAME gcloud alpha run jobs executions delete - delete an execution SYNOPSIS - gcloud alpha run jobs executions delete EXECUTION [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + gcloud alpha run jobs executions delete EXECUTION [--[no-]async] + [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete an execution. @@ -33,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument EXECUTION on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/alpha/scc/assets/group b/gcloud/alpha/scc/assets/group index f3b6e26ab..0e91777a7 100644 --- a/gcloud/alpha/scc/assets/group +++ b/gcloud/alpha/scc/assets/group @@ -68,10 +68,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - GroupAssetsResult's "state_change" attribute is updated to indicate - whether the asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --filter=FILTER Expression is a list of one or more restrictions combined via logical @@ -100,10 +100,9 @@ FLAGS should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Filter is limited - to assets existing at the supplied time and their values are those at - that specific time. For example: 2019-02-28T07:00:00Z. Absence of this - field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/scc/assets/list b/gcloud/alpha/scc/assets/list index a5e48be03..457fe7597 100644 --- a/gcloud/alpha/scc/assets/list +++ b/gcloud/alpha/scc/assets/list @@ -87,10 +87,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListAssetResult's "state" attribute is updated to indicate whether the - asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the Asset fields to be listed in the response. An @@ -107,8 +107,9 @@ FLAGS system should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Default: NOW - Example read time: "2019-02-28T07:00:06.861Z" + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/scc/assets/list-marks b/gcloud/alpha/scc/assets/list-marks index af1c87bc8..f19717dba 100644 --- a/gcloud/alpha/scc/assets/list-marks +++ b/gcloud/alpha/scc/assets/list-marks @@ -64,8 +64,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/scc/assets/update-marks b/gcloud/alpha/scc/assets/update-marks index c2ba5d6fe..d30512bce 100644 --- a/gcloud/alpha/scc/assets/update-marks +++ b/gcloud/alpha/scc/assets/update-marks @@ -79,8 +79,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/alpha/scc/findings/create b/gcloud/alpha/scc/findings/create index 259a092bd..b12b2809a 100644 --- a/gcloud/alpha/scc/findings/create +++ b/gcloud/alpha/scc/findings/create @@ -91,9 +91,11 @@ REQUIRED FLAGS XSS_SCRIPTING --event-time=EVENT_TIME - Time at which the issue is detected or the finding is created, in the - following format: YYYY-MM-DDThh:mm:ss.ffffffZ. Example: - 2023-01-11T07:00:06.861Z + Time at which the event took place. For example, if the finding + represents an open firewall it would capture the time the open firewall + was detected. If event-time is not provided, it will default to UTC + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --resource-name=RESOURCE_NAME Full resource name of the Google Cloud Platform resource this finding diff --git a/gcloud/alpha/scc/findings/group b/gcloud/alpha/scc/findings/group index 334155a18..bc3dd5857 100644 --- a/gcloud/alpha/scc/findings/group +++ b/gcloud/alpha/scc/findings/group @@ -70,27 +70,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - When compare_duration is set, the GroupResult's "state_change" - attribute is updated to indicate whether the finding had its state - changed, the finding's state remained unchanged, or if the finding was - added during the compare_duration period of time that precedes the - read_time. This is the time between (read_time - compare_duration) and - read_time. The state_change value is derived based on the presence and - state of the finding at the two points in time. Intermediate state - changes between the two times don't affect the result. For example, the - results aren't affected if the finding is made inactive and then active - again. Possible "state_change" values when compare_duration is - specified: + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The + state_change value is derived based on the presence and state of the + finding at the two points in time. Intermediate state changes between + the two times don't affect the result. For example, the results aren't + affected if the finding is made inactive and then active again. + Possible "state_change" values when compare_duration is specified: + ◆ 'CHANGED': indicates that the finding was present at the start of compare_duration, but changed its state at read_time. + ◆ 'UNCHANGED': indicates that the finding was present at the start of compare_duration and did not change state at read_time. + ◆ 'ADDED': indicates that the finding was not present at the start of - compare_duration, but was present at read_time. If compare_duration - is not specified, then the only possible state_change is "UNUSED", - which will be the state_change set for all findings present at - read_time. If this field is set then 'state_change' must be a - specified field in 'group_by'. + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --filter=FILTER Expression that defines the filter to apply across findings. The @@ -131,10 +138,9 @@ FLAGS explicitly or let gcloud fetch one-page-at-a-time. --read-time=READ_TIME - Time used as a reference point when filtering findings. The filter is - limited to findings existing at the supplied time and their values are - those at that specific time. For example. 2019-02-28T07:00:00Z. Absence - of this field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/alpha/scc/findings/list b/gcloud/alpha/scc/findings/list index 976dcb874..3c75ad7e0 100644 --- a/gcloud/alpha/scc/findings/list +++ b/gcloud/alpha/scc/findings/list @@ -80,24 +80,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListFindingsResult's "state_change" attribute is updated to indicate - whether the finding had its state changed, the finding's state remained - unchanged, or if the finding was added in any state during the - compare_duration period of time that precedes the read_time. This is - the time between (read_time - compare_duration) and read_time. The + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The state_change value is derived based on the presence and state of the finding at the two points in time. Intermediate state changes between the two times don't affect the result. For example, the results aren't affected if the finding is made inactive and then active again. Possible "state_change" values when compare_duration is specified: - "CHANGED" indicates that the finding was present at the start of - compare_duration, but changed its state at read_time. "UNCHANGED" - indicates that the finding was present at the start of compare_duration - and did not change state at read_time. "ADDED" indicates that the - finding was not present at the start of compare_duration, but was - present at read_time. If compare_duration is not specified, then the - only possible state_change is "UNUSED", which will be the state_change - set for all findings present at read_time. Example duration: "100000s" + + ◆ 'CHANGED': indicates that the finding was present at the start of + compare_duration, but changed its state at read_time. + + ◆ 'UNCHANGED': indicates that the finding was present at the start of + compare_duration and did not change state at read_time. + + ◆ 'ADDED': indicates that the finding was not present at the start of + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the finding fields listed in the response. An @@ -126,8 +136,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/alpha/scc/findings/list-marks b/gcloud/alpha/scc/findings/list-marks index 47d4c79a4..1109c2087 100644 --- a/gcloud/alpha/scc/findings/list-marks +++ b/gcloud/alpha/scc/findings/list-marks @@ -79,8 +79,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/scc/findings/update b/gcloud/alpha/scc/findings/update index 2b82cd139..cdfc1b16f 100644 --- a/gcloud/alpha/scc/findings/update +++ b/gcloud/alpha/scc/findings/update @@ -89,7 +89,8 @@ FLAGS Time at which the event took place. For example, if the finding represents an open firewall it would capture the time the open firewall was detected. If event-time is not provided, it will default to UTC - version of NOW. For example 2019-02-28T07:00:00Z + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --external-uri=EXTERNAL_URI URI that, if available, points to a web page outside of Cloud SCC diff --git a/gcloud/alpha/scc/findings/update-marks b/gcloud/alpha/scc/findings/update-marks index ae542b9a0..f55e8edad 100644 --- a/gcloud/alpha/scc/findings/update-marks +++ b/gcloud/alpha/scc/findings/update-marks @@ -92,8 +92,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example: - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/alpha/sql/export/bak b/gcloud/alpha/sql/export/bak index f8ffd4239..444ce65f9 100644 --- a/gcloud/alpha/sql/export/bak +++ b/gcloud/alpha/sql/export/bak @@ -5,8 +5,8 @@ NAME SYNOPSIS gcloud alpha sql export bak INSTANCE URI --database=DATABASE,[DATABASE,...], -d DATABASE,[DATABASE,...] - [--async] [--stripe_count=STRIPE_COUNT] [--[no-]striped] - [GCLOUD_WIDE_FLAG ...] + [--async] [--bak-type=BAK_TYPE; default="FULL"] [--differential-base] + [--stripe_count=STRIPE_COUNT] [--[no-]striped] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Export data from a Cloud SQL instance to a Google Cloud Storage @@ -39,6 +39,14 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be exported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --differential-base + Whether the bak file export can be used as differential base for future + differential backup. SQL Server only + --stripe_count=STRIPE_COUNT Specifies the number of stripes to use for SQL Server exports. diff --git a/gcloud/alpha/sql/import/bak b/gcloud/alpha/sql/import/bak index 95f150ec9..f6dc35c9c 100644 --- a/gcloud/alpha/sql/import/bak +++ b/gcloud/alpha/sql/import/bak @@ -3,8 +3,9 @@ NAME BAK file SYNOPSIS - gcloud alpha sql import bak INSTANCE URI --database=DATABASE, -d DATABASE - [--async] [--[no-]striped] + gcloud alpha sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE + [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] + [--recovery-only] [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -37,7 +38,7 @@ POSITIONAL ARGUMENTS INSTANCE Cloud SQL instance ID. - URI + [URI] Path to the BAK file file in Google Cloud Storage from which the import is made. The URI is in the form gs://bucketName/fileName. @@ -50,6 +51,18 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be imported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --no-recovery + Whether or not the SQL Server import is execueted with NORECOVERY + keyword. + + --recovery-only + Whether or not the SQL Server import skip download and bring database + online. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/alpha/transfer/agents/install b/gcloud/alpha/transfer/agents/install index e88a77c83..916c7706e 100644 --- a/gcloud/alpha/transfer/agents/install +++ b/gcloud/alpha/transfer/agents/install @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud alpha transfer agents install --pool=POOL [--count=COUNT] - [--creds-file=CREDS_FILE] [--[no-]enable-multipart] - [--id-prefix=ID_PREFIX] + [--creds-file=CREDS_FILE] [--docker-network=DOCKER_NETWORK] + [--[no-]enable-multipart] [--id-prefix=ID_PREFIX] [--logs-directory=LOGS_DIRECTORY; default="/tmp"] [--max-concurrent-small-file-uploads=MAX_CONCURRENT_SMALL_FILE_UPLOADS] [--memlock-limit=MEMLOCK_LIMIT; default=64000000] @@ -57,6 +57,14 @@ OPTIONAL FLAGS Note that the credentials location will be mounted to the agent container. + --docker-network=DOCKER_NETWORK + Specify the network to connect the Docker container to. This flag maps + directly to the --network flag in the underlying 'docker run' command. + + If binding directly to the Docker host's network is an option, then + setting this value to 'host' can dramatically improve transfer + performance. + --[no-]enable-multipart Split up files and transfer the resulting chunks in parallel before merging them at the destination. Can be used make transfers of large diff --git a/gcloud/alpha/workstations/configs/create b/gcloud/alpha/workstations/configs/create index 37117b4be..6979516ee 100644 --- a/gcloud/alpha/workstations/configs/create +++ b/gcloud/alpha/workstations/configs/create @@ -22,6 +22,8 @@ SYNOPSIS [--running-timeout=RUNNING_TIMEOUT; default=7200] [--service-account=SERVICE_ACCOUNT] [--shielded-integrity-monitoring] [--shielded-secure-boot] [--shielded-vtpm] + [--accelerator-count=ACCELERATOR_COUNT + --accelerator-type=ACCELERATOR_TYPE] [--container-custom-image=CONTAINER_CUSTOM_IMAGE | --container-predefined-image=CONTAINER_PREDEFINED_IMAGE; default="codeoss"] @@ -209,6 +211,21 @@ FLAGS --shielded-vtpm Default value is false. If set, instances will have vTPM enabled. + Accelerator settings + + --accelerator-count=ACCELERATOR_COUNT + The number of accelerator cards exposed to the instance. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --accelerator-type=ACCELERATOR_TYPE + The type of accelerator resource to attach to the instance, for + example, "nvidia-tesla-p100". + + This flag argument must be specified if any of the other arguments in + this group are specified. + At most one of these can be specified: --container-custom-image=CONTAINER_CUSTOM_IMAGE diff --git a/gcloud/artifacts/docker/images/list b/gcloud/artifacts/docker/images/list index e95b2cb79..f9c835d2f 100644 --- a/gcloud/artifacts/docker/images/list +++ b/gcloud/artifacts/docker/images/list @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud artifacts docker images list [IMAGE_PATH] [--include-tags] - [--occurrence-filter=OCCURRENCE_FILTER; - default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"'] + [--occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" + OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"'] [--show-occurrences] [--show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] @@ -59,14 +59,15 @@ FLAGS --include-tags If specified, all tags associated with each image digest are displayed. - --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"' - A filter for the Occurrences which will be summarized. + --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"' + A filter for the occurrences which will be summarized. --show-occurrences - Show summaries of the various Occurrence types. + Show summaries of the various occurrence types. --show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10 - The number of the most recent images for which to summarize Occurences. + The number of the most recent images for which to summarize + occurrences. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/alloydb/clusters/create-secondary b/gcloud/beta/alloydb/clusters/create-secondary index 614afbae4..fb87d7595 100644 --- a/gcloud/beta/alloydb/clusters/create-secondary +++ b/gcloud/beta/alloydb/clusters/create-secondary @@ -86,8 +86,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud alloydb clusters create-secondary $ gcloud alpha alloydb clusters create-secondary diff --git a/gcloud/beta/alloydb/clusters/promote b/gcloud/beta/alloydb/clusters/promote index 71ac27a52..c1d2b184f 100644 --- a/gcloud/beta/alloydb/clusters/promote +++ b/gcloud/beta/alloydb/clusters/promote @@ -38,8 +38,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud alloydb clusters promote $ gcloud alpha alloydb clusters promote diff --git a/gcloud/beta/alloydb/instances/create-secondary b/gcloud/beta/alloydb/instances/create-secondary index 853989f51..edb985fee 100644 --- a/gcloud/beta/alloydb/instances/create-secondary +++ b/gcloud/beta/alloydb/instances/create-secondary @@ -41,8 +41,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud alloydb instances create-secondary $ gcloud alpha alloydb instances create-secondary diff --git a/gcloud/beta/artifacts/docker/images/list b/gcloud/beta/artifacts/docker/images/list index bee1acbc8..fa506c51f 100644 --- a/gcloud/beta/artifacts/docker/images/list +++ b/gcloud/beta/artifacts/docker/images/list @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud beta artifacts docker images list [IMAGE_PATH] [--include-tags] - [--occurrence-filter=OCCURRENCE_FILTER; - default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"'] + [--occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" + OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"'] [--show-occurrences] [--show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] @@ -59,14 +59,15 @@ FLAGS --include-tags If specified, all tags associated with each image digest are displayed. - --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY"' - A filter for the Occurrences which will be summarized. + --occurrence-filter=OCCURRENCE_FILTER; default='kind="BUILD" OR kind="IMAGE" OR kind="DISCOVERY" OR kind="SBOM_REFERENCE"' + A filter for the occurrences which will be summarized. --show-occurrences - Show summaries of the various Occurrence types. + Show summaries of the various occurrence types. --show-occurrences-from=SHOW_OCCURRENCES_FROM; default=10 - The number of the most recent images for which to summarize Occurences. + The number of the most recent images for which to summarize + occurrences. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/builds/triggers/run b/gcloud/beta/builds/triggers/run index 9937a55e7..3e11086f1 100644 --- a/gcloud/beta/builds/triggers/run +++ b/gcloud/beta/builds/triggers/run @@ -3,7 +3,8 @@ NAME SYNOPSIS gcloud beta builds triggers run (TRIGGER : --region=REGION) - (--branch=BRANCH | --sha=SHA | --tag=TAG) [GCLOUD_WIDE_FLAG ...] + [--substitutions=[KEY=VALUE,...]] + [--branch=BRANCH | --sha=SHA | --tag=TAG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Run a build trigger. @@ -44,8 +45,28 @@ POSITIONAL ARGUMENTS ▸ provide the argument --region on the command line; ▸ set the property builds/region. -REQUIRED FLAGS - Exactly one of these must be specified: +FLAGS + --substitutions=[KEY=VALUE,...] + Parameters to be substituted in the build specification. + + For example (using some nonsensical substitution keys; all keys must + begin with an underscore): + + $ gcloud builds triggers create ... --config config.yaml + --substitutions _FAVORITE_COLOR=blue,_NUM_CANDIES=10 + + This will result in a build where every occurrence of + ${_FAVORITE_COLOR} in certain fields is replaced by "blue", and + similarly for ${_NUM_CANDIES} and "10". + + Only the following built-in variables can be specified with the + --substitutions flag: REPO_NAME, BRANCH_NAME, TAG_NAME, REVISION_ID, + COMMIT_SHA, SHORT_SHA. + + For more details, see: + https://cloud.google.com/cloud-build/docs/api/build-requests#substitutions + + At most one of these can be specified: --branch=BRANCH Branch to run. diff --git a/gcloud/beta/composer/environments/create b/gcloud/beta/composer/environments/create index c01576900..cb364a456 100644 --- a/gcloud/beta/composer/environments/create +++ b/gcloud/beta/composer/environments/create @@ -7,7 +7,7 @@ SYNOPSIS (ENVIRONMENT : --location=LOCATION) [--airflow-configs=[KEY=VALUE,...]] [--async] [--cloud-sql-machine-type=CLOUD_SQL_MACHINE_TYPE] [--disk-size=DISK_SIZE] [--enable-cloud-data-lineage-integration] - [--env-variables=[NAME=VALUE,...]] + [--enable-high-resilience] [--env-variables=[NAME=VALUE,...]] [--environment-size=ENVIRONMENT_SIZE] [--labels=[KEY=VALUE,...]] [--machine-type=MACHINE_TYPE] [--node-count=NODE_COUNT] [--oauth-scopes=[SCOPE,...]] [--python-version=PYTHON_VERSION] @@ -132,6 +132,9 @@ FLAGS --enable-cloud-data-lineage-integration Enable Cloud Data Lineage integration. + --enable-high-resilience + Enable use of a high resilience, supported for Composer 2 Environments. + --env-variables=[NAME=VALUE,...] A comma-delimited list of environment variable NAME=VALUE pairs to provide to the Airflow scheduler, worker, and webserver processes. NAME diff --git a/gcloud/beta/composer/environments/database-failover b/gcloud/beta/composer/environments/database-failover new file mode 100644 index 000000000..0627b15a2 --- /dev/null +++ b/gcloud/beta/composer/environments/database-failover @@ -0,0 +1,70 @@ +NAME + gcloud beta composer environments database-failover - run a database + failover operation + +SYNOPSIS + gcloud beta composer environments database-failover + (ENVIRONMENT : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Run a database failover operation. + +EXAMPLES + To run a manual database failover on the environment named environment-1, + run: $ gcloud beta composer environments database-failover environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to trigger a database + failover. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud composer environments database-failover + + $ gcloud alpha composer environments database-failover + diff --git a/gcloud/beta/composer/environments/fetch-database-properties b/gcloud/beta/composer/environments/fetch-database-properties new file mode 100644 index 000000000..49e7fd5e5 --- /dev/null +++ b/gcloud/beta/composer/environments/fetch-database-properties @@ -0,0 +1,65 @@ +NAME + gcloud beta composer environments fetch-database-properties - fetch + database properties + +SYNOPSIS + gcloud beta composer environments fetch-database-properties + (ENVIRONMENT : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Fetch database properties. + +EXAMPLES + To fetch database properties for the environment named environment-1, run: $ gcloud beta composer environments fetch-database-properties \ + environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to fetch database + properties. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud composer environments fetch-database-properties + + $ gcloud alpha composer environments fetch-database-properties + diff --git a/gcloud/beta/composer/environments/help b/gcloud/beta/composer/environments/help index 12e1a16a8..130865bd7 100644 --- a/gcloud/beta/composer/environments/help +++ b/gcloud/beta/composer/environments/help @@ -38,12 +38,18 @@ COMMANDS create (BETA) Create and initialize a Cloud Composer environment. + database-failover + (BETA) Run a database failover operation. + delete (BETA) Delete one or more Cloud Composer environments. describe (BETA) Get details about a Cloud Composer environment. + fetch-database-properties + (BETA) Fetch database properties. + list (BETA) List the Cloud Composer environments under a project and location. diff --git a/gcloud/beta/compute/backend-buckets/update b/gcloud/beta/compute/backend-buckets/update index b884cad19..74fbb392e 100644 --- a/gcloud/beta/compute/backend-buckets/update +++ b/gcloud/beta/compute/backend-buckets/update @@ -173,7 +173,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -245,7 +249,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -334,9 +342,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/compute/backend-services/update b/gcloud/beta/compute/backend-services/update index 9cfc85486..75d835e0f 100644 --- a/gcloud/beta/compute/backend-services/update +++ b/gcloud/beta/compute/backend-services/update @@ -533,7 +533,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -652,7 +656,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -741,9 +749,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. At most one of these can be specified: diff --git a/gcloud/beta/compute/instance-groups/managed/set-autoscaling b/gcloud/beta/compute/instance-groups/managed/set-autoscaling index 8130dde75..b16c83c27 100644 --- a/gcloud/beta/compute/instance-groups/managed/set-autoscaling +++ b/gcloud/beta/compute/instance-groups/managed/set-autoscaling @@ -46,12 +46,18 @@ FLAGS This flag allows you to atomically setup complex autoscalers. --cool-down-period=COOL_DOWN_PERIOD - The time period that the autoscaler should wait before it starts - collecting information from a new instance. This prevents the - autoscaler from collecting information when the instance is - initializing, during which the collected usage would not be reliable. - The default is 60s. See $ gcloud topic datetimes for information on - duration formats. + The number of seconds that your application takes to initialize on a VM + instance. This is referred to as the initialization period + (https://cloud.google.com/compute/docs/autoscaler#cool_down_period). + Specifying an accurate initialization period improves autoscaler + decisions. For example, when scaling out, the autoscaler ignores data + from VMs that are still initializing because those VMs might not yet + represent normal usage of your application. The default initialization + period is 60 seconds. See $ gcloud topic datetimes for information on + duration formats. Initialization periods might vary because of numerous + factors. We recommend that you test how long your application may take + to initialize. To do this, create a VM and time your application's + startup process. --cpu-utilization-predictive-method=CPU_UTILIZATION_PREDICTIVE_METHOD Indicates whether to use a predictive algorithm when scaling based on diff --git a/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion index dc51eccb5..3ca5479d6 100644 --- a/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion +++ b/gcloud/beta/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud beta compute security-policies rules add-preconfig-waf-exclusion - PRIORITY --target-rule-set=TARGET_RULE_SET + PRIORITY --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -60,6 +60,18 @@ REQUIRED FLAGS target for associating request field exclusions. See --target-rule-ids. OPTIONAL FLAGS + --region=REGION + Region of the security policy to add the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Adds a request cookie to the request field exclusions associated with the rule set and rule IDs (if given). This specifies a request cookie diff --git a/gcloud/beta/compute/security-policies/rules/create b/gcloud/beta/compute/security-policies/rules/create index 405547310..9e4e1b47d 100644 --- a/gcloud/beta/compute/security-policies/rules/create +++ b/gcloud/beta/compute/security-policies/rules/create @@ -20,6 +20,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] @@ -199,6 +200,17 @@ OPTIONAL FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to add. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/beta/compute/security-policies/rules/delete b/gcloud/beta/compute/security-policies/rules/delete index 12489d683..b522fbf69 100644 --- a/gcloud/beta/compute/security-policies/rules/delete +++ b/gcloud/beta/compute/security-policies/rules/delete @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud beta compute security-policies rules delete [PRIORITY ...] - [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] + [--region=REGION] [--security-policy=SECURITY_POLICY] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute security-policies rules delete is used to delete @@ -23,6 +24,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to delete. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/beta/compute/security-policies/rules/describe b/gcloud/beta/compute/security-policies/rules/describe index d52b519a9..72f70ce43 100644 --- a/gcloud/beta/compute/security-policies/rules/describe +++ b/gcloud/beta/compute/security-policies/rules/describe @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud beta compute security-policies rules describe PRIORITY - [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] + [--region=REGION] [--security-policy=SECURITY_POLICY] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute security-policies rules describe displays all @@ -23,6 +24,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to describe. If not specified, you might + be prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion index f960da85b..300d681b3 100644 --- a/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion +++ b/gcloud/beta/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud beta compute security-policies rules remove-preconfig-waf-exclusion - PRIORITY --target-rule-set=TARGET_RULE_SET + PRIORITY --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -87,6 +87,18 @@ REQUIRED FLAGS to remove request field exclusions regardless of the target. OPTIONAL FLAGS + --region=REGION + Region of the security policy to remove the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Removes a request cookie from the existing request field exclusions associated with the rule set and rule IDs (if given). diff --git a/gcloud/beta/compute/security-policies/rules/update b/gcloud/beta/compute/security-policies/rules/update index 773dc0d7b..0175eea9c 100644 --- a/gcloud/beta/compute/security-policies/rules/update +++ b/gcloud/beta/compute/security-policies/rules/update @@ -19,6 +19,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [--expression=EXPRESSION | --src-ip-ranges=[SRC_IP_RANGE,...]] @@ -188,6 +189,17 @@ FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to update. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/beta/compute/service-attachments/create b/gcloud/beta/compute/service-attachments/create index 117166d68..2776738c0 100644 --- a/gcloud/beta/compute/service-attachments/create +++ b/gcloud/beta/compute/service-attachments/create @@ -13,7 +13,7 @@ SYNOPSIS [--domain-names=[DOMAIN_NAMES,...]] [--enable-proxy-protocol] [--nat-subnets-region=NAT_SUBNETS_REGION] [--producer-forwarding-rule-region=PRODUCER_FORWARDING_RULE_REGION] - [--region=REGION] [GCLOUD_WIDE_FLAG ...] + [--reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute service-attachments create is used to create @@ -127,6 +127,20 @@ OPTIONAL FLAGS Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION. + --reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + --region=REGION Region of the service attachment to create. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/beta/compute/service-attachments/update b/gcloud/beta/compute/service-attachments/update index 78303296e..95ba0c46d 100644 --- a/gcloud/beta/compute/service-attachments/update +++ b/gcloud/beta/compute/service-attachments/update @@ -9,8 +9,8 @@ SYNOPSIS [--consumer-reject-list=[REJECT_LIST,...]] [--description=DESCRIPTION] [--[no-]enable-proxy-protocol] [--nat-subnets=NAT_SUBNETS,[NAT_SUBNETS,...]] - [--nat-subnets-region=NAT_SUBNETS_REGION] [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--nat-subnets-region=NAT_SUBNETS_REGION] + [--[no-]reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute service-attachments update is used to update @@ -93,6 +93,23 @@ FLAGS set to the region of the service attachment. Overrides the default compute/region property value for this command invocation. + --[no-]reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + + Use --reconcile-connections to enable and --no-reconcile-connections to + disable. + --region=REGION Region of the service attachment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/beta/container/node-pools/create b/gcloud/beta/container/node-pools/create index 30829bd7c..65bfe2add 100644 --- a/gcloud/beta/container/node-pools/create +++ b/gcloud/beta/container/node-pools/create @@ -42,6 +42,8 @@ SYNOPSIS [--enable-autoscaling --location-policy=LOCATION_POLICY --max-nodes=MAX_NODES --min-nodes=MIN_NODES --total-max-nodes=TOTAL_MAX_NODES --total-min-nodes=TOTAL_MIN_NODES] + [--enable-best-effort-provision + --min-provision-nodes=MIN_PROVISION_NODES] [--ephemeral-storage=[local-ssd-count=LOCAL-SSD-COUNT] | --ephemeral-storage-local-ssd=[count=COUNT] | --local-nvme-ssd-block=[count=COUNT] @@ -701,6 +703,16 @@ FLAGS --node-pool (or default node pool if unspecified) can scale. Ignored unless --enable-autoscaling is also specified. + Specifies minimum number of nodes to be created when best effort + provisioning enabled. + + --enable-best-effort-provision + Enable best effort provision for nodes + + --min-provision-nodes=MIN_PROVISION_NODES + Specifies the minimum number of nodes to be provisioned during + creation + At most one of these can be specified: --ephemeral-storage=[local-ssd-count=LOCAL-SSD-COUNT] diff --git a/gcloud/beta/iam/workforce-pools/providers/create-oidc b/gcloud/beta/iam/workforce-pools/providers/create-oidc index 2456d361a..a4650abe4 100644 --- a/gcloud/beta/iam/workforce-pools/providers/create-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/create-oidc @@ -9,8 +9,9 @@ SYNOPSIS --issuer-uri=ISSUER_URI [--async] [--attribute-condition=ATTRIBUTE_CONDITION] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a new OIDC workforce pool provider. @@ -191,19 +192,18 @@ OPTIONAL FLAGS A display name for the workforce pool provider. Cannot exceed 32 characters in length. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/iam/workforce-pools/providers/update-oidc b/gcloud/beta/iam/workforce-pools/providers/update-oidc index 3cee8708a..9dc397987 100644 --- a/gcloud/beta/iam/workforce-pools/providers/update-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/update-oidc @@ -9,8 +9,9 @@ SYNOPSIS [--attribute-mapping=[ATTRIBUTE_MAPPING,...]] [--client-id=CLIENT_ID] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] [--issuer-uri=ISSUER_URI] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Update an OIDC workforce pool provider. @@ -190,19 +191,18 @@ FLAGS --issuer-uri=ISSUER_URI The OIDC issuer URI. Must be a valid URI using the 'https' scheme. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/network-security/address-groups/add-items b/gcloud/beta/network-security/address-groups/add-items new file mode 100644 index 000000000..f5803803b --- /dev/null +++ b/gcloud/beta/network-security/address-groups/add-items @@ -0,0 +1,78 @@ +NAME + gcloud beta network-security address-groups add-items - add items to an + address group + +SYNOPSIS + gcloud beta network-security address-groups add-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Add items to an existing address group. + +EXAMPLES + Add an item to an address group named my-address-group. + + $ gcloud beta network-security address-groups add-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups add-items + + $ gcloud alpha network-security address-groups add-items + diff --git a/gcloud/beta/network-security/address-groups/clone-items b/gcloud/beta/network-security/address-groups/clone-items new file mode 100644 index 000000000..65b7a37db --- /dev/null +++ b/gcloud/beta/network-security/address-groups/clone-items @@ -0,0 +1,79 @@ +NAME + gcloud beta network-security address-groups clone-items - clone items from + source address group + +SYNOPSIS + gcloud beta network-security address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--source=SOURCE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Clone items from source address group. + +EXAMPLES + Clone items from source address group named other-address-group. + + $ gcloud beta network-security address-groups clone-items \ + my-address-group \ + --source=projects/other/locations/global/other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups clone-items + + $ gcloud alpha network-security address-groups clone-items + diff --git a/gcloud/beta/network-security/address-groups/create b/gcloud/beta/network-security/address-groups/create new file mode 100644 index 000000000..cf899e7ab --- /dev/null +++ b/gcloud/beta/network-security/address-groups/create @@ -0,0 +1,94 @@ +NAME + gcloud beta network-security address-groups create - create an address + group + +SYNOPSIS + gcloud beta network-security address-groups create + (ADDRESS_GROUP : --location=LOCATION) --capacity=CAPACITY --type=TYPE + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud beta network-security address-groups create \ + my-address-group --type=IPV4 --capacity=100 \ + --description="optional description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups create + + $ gcloud alpha network-security address-groups create + diff --git a/gcloud/beta/network-security/address-groups/delete b/gcloud/beta/network-security/address-groups/delete new file mode 100644 index 000000000..dcd47f8bb --- /dev/null +++ b/gcloud/beta/network-security/address-groups/delete @@ -0,0 +1,73 @@ +NAME + gcloud beta network-security address-groups delete - delete address group + +SYNOPSIS + gcloud beta network-security address-groups delete + (ADDRESS_GROUP : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud beta network-security address-groups delete \ + my-address-group --location=global + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups delete + + $ gcloud alpha network-security address-groups delete + diff --git a/gcloud/beta/network-security/address-groups/describe b/gcloud/beta/network-security/address-groups/describe new file mode 100644 index 000000000..820aca874 --- /dev/null +++ b/gcloud/beta/network-security/address-groups/describe @@ -0,0 +1,69 @@ +NAME + gcloud beta network-security address-groups describe - describe an address + group + +SYNOPSIS + gcloud beta network-security address-groups describe + (ADDRESS_GROUP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud beta network-security address-groups describe \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups describe + + $ gcloud alpha network-security address-groups describe + diff --git a/gcloud/beta/network-security/address-groups/help b/gcloud/beta/network-security/address-groups/help new file mode 100644 index 000000000..69149a48b --- /dev/null +++ b/gcloud/beta/network-security/address-groups/help @@ -0,0 +1,53 @@ +NAME + gcloud beta network-security address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud beta network-security address-groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + (BETA) Add items to an address group. + + clone-items + (BETA) Clone items from source address group. + + create + (BETA) Create an address group. + + delete + (BETA) Delete address group. + + describe + (BETA) Describe an address group. + + list + (BETA) List address groups. + + list-references + (BETA) Lists References of an Address Group. + + remove-items + (BETA) Remove items from an address group. + + update + (BETA) Update an address group. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups + + $ gcloud alpha network-security address-groups + diff --git a/gcloud/beta/network-security/address-groups/list b/gcloud/beta/network-security/address-groups/list new file mode 100644 index 000000000..03fbc8d89 --- /dev/null +++ b/gcloud/beta/network-security/address-groups/list @@ -0,0 +1,88 @@ +NAME + gcloud beta network-security address-groups list - list address groups + +SYNOPSIS + gcloud beta network-security address-groups list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all address groups in the specified location of the current + project. + +EXAMPLES + To list address groups in the current project, run: + + $ gcloud beta network-security address-groups list --location=global + +REQUIRED FLAGS + Location resource - The project of the address groups to display. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups list + + $ gcloud alpha network-security address-groups list + diff --git a/gcloud/beta/network-security/address-groups/list-references b/gcloud/beta/network-security/address-groups/list-references new file mode 100644 index 000000000..1500b8b15 --- /dev/null +++ b/gcloud/beta/network-security/address-groups/list-references @@ -0,0 +1,99 @@ +NAME + gcloud beta network-security address-groups list-references - lists + References of an Address Group + +SYNOPSIS + gcloud beta network-security address-groups list-references + (ADDRESS_GROUP : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Lists References of an Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud beta network-security address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument ADDRESS_GROUP on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups list-references + + $ gcloud alpha network-security address-groups list-references + diff --git a/gcloud/beta/network-security/address-groups/remove-items b/gcloud/beta/network-security/address-groups/remove-items new file mode 100644 index 000000000..5b481c32f --- /dev/null +++ b/gcloud/beta/network-security/address-groups/remove-items @@ -0,0 +1,78 @@ +NAME + gcloud beta network-security address-groups remove-items - remove items + from an address group + +SYNOPSIS + gcloud beta network-security address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Remove items from an existing address group. + +EXAMPLES + Remove an item from an address group named my-address-group. + + $ gcloud beta network-security address-groups remove-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups remove-items + + $ gcloud alpha network-security address-groups remove-items + diff --git a/gcloud/beta/network-security/address-groups/update b/gcloud/beta/network-security/address-groups/update new file mode 100644 index 000000000..e7ce6d1d0 --- /dev/null +++ b/gcloud/beta/network-security/address-groups/update @@ -0,0 +1,112 @@ +NAME + gcloud beta network-security address-groups update - update an address + group + +SYNOPSIS + gcloud beta network-security address-groups update + (ADDRESS_GROUP : --location=LOCATION) [--async] + [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud beta network-security address-groups update \ + my-address-group --description="New description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud beta network-security address-groups update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud beta network-security address-groups update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security address-groups update + + $ gcloud alpha network-security address-groups update + diff --git a/gcloud/beta/network-security/firewall-endpoint-associations/create b/gcloud/beta/network-security/firewall-endpoint-associations/create new file mode 100644 index 000000000..d285d6de4 --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoint-associations/create @@ -0,0 +1,150 @@ +NAME + gcloud beta network-security firewall-endpoint-associations create - create + a Firewall Plus endpoint association + +SYNOPSIS + gcloud beta network-security firewall-endpoint-associations create + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) --network=NETWORK + (--endpoint=ENDPOINT + : --endpoint-zone=ENDPOINT_ZONE --organization=ORGANIZATION) + [--async] [--labels=[KEY=VALUE,...]] + [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Associate the specified network with the firewall endpoint. + Successful creation of a firewall endpoint association results in an + association in READY state. Check the progress of association creation by + using gcloud network-security firewall-endpoint-associations list. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To associate a network with a firewall endpoint, run: + + $ gcloud beta network-security firewall-endpoint-associations \ + create my-assoc \ + --network=projects/my-project/networks/global/myNetwork \ + --endpoint=organizations/1234/locations/us-central1-a/\ + firewallEndpoints/my-endpoint --zone=us-central1-a \ + --project=my-project + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +REQUIRED FLAGS + Network resource - Firewall Plus. This represents a Cloud resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument --network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --network=NETWORK + ID of the network or fully qualified identifier for the network. + + To set the network-name attribute: + ▸ provide the argument --network on the command line. + + Firewall endpoint resource - Firewall Plus. The arguments in this group + can be used to specify the attributes of this resource. + + This must be specified. + + --endpoint=ENDPOINT + ID of the firewall endpoint or fully qualified identifier for the + firewall endpoint. + + To set the endpoint-name attribute: + ▸ provide the argument --endpoint on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --endpoint-zone=ENDPOINT_ZONE + Zone of the firewall endpoint. + + To set the endpoint-zone attribute: + ▸ provide the argument --endpoint on the command line with a fully + specified name; + ▸ provide the argument --endpoint-zone on the command line; + ▸ provide the argument --zone on the command line; + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name. + + --organization=ORGANIZATION + Organization ID to which the changes should apply. + + To set the organization attribute: + ▸ provide the argument --endpoint on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoint-associations create + diff --git a/gcloud/beta/network-security/firewall-endpoint-associations/delete b/gcloud/beta/network-security/firewall-endpoint-associations/delete new file mode 100644 index 000000000..07844a860 --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoint-associations/delete @@ -0,0 +1,85 @@ +NAME + gcloud beta network-security firewall-endpoint-associations delete - delete + a Firewall Plus endpoint association + +SYNOPSIS + gcloud beta network-security firewall-endpoint-associations delete + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) [--async] + [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Unassociate the specified network from a firewall endpoint. Check + the progress of association deletion by using gcloud network-security + firewall-endpoint-associations list. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To unassociate a network from a firewall, run: + + $ gcloud beta network-security firewall-endpoint-associations \ + delete my-assoc --zone=us-central1-a --project=my-project OR + $ gcloud beta network-security firewall-endpoint-associations \ + delete \ + projects/my-project/locations/us-central1-a/\ + firewallEndpointAssociations/my-association + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoint-associations delete + diff --git a/gcloud/beta/network-security/firewall-endpoint-associations/describe b/gcloud/beta/network-security/firewall-endpoint-associations/describe new file mode 100644 index 000000000..b775a186f --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoint-associations/describe @@ -0,0 +1,73 @@ +NAME + gcloud beta network-security firewall-endpoint-associations describe - + describe a Firewall Plus endpoint association + +SYNOPSIS + gcloud beta network-security firewall-endpoint-associations describe + (FIREWALL_ENDPOINT_ASSOCIATION : --zone=ZONE) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe a firewall endpoint association. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To get a description of a firewall endpoint association called + my-association, run: + + $ gcloud beta network-security firewall-endpoint-associations \ + describe my-association --zone=us-central1-a \ + --project=my-project OR + $ gcloud beta network-security firewall-endpoint-associations \ + describe \ + projects/my-project/locations/us-central1-a/\ + firewallEndpointAssociations/my-association + +POSITIONAL ARGUMENTS + Firewall endpoint association resource - Firewall Plus. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FIREWALL_ENDPOINT_ASSOCIATION + ID of the firewall endpoint association or fully qualified identifier + for the firewall endpoint association. + + To set the association-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --zone=ZONE + Zone of the firewall endpoint association. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command + line with a fully specified name; + ▸ provide the argument --zone on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoint-associations \ + describe + diff --git a/gcloud/beta/network-security/firewall-endpoint-associations/help b/gcloud/beta/network-security/firewall-endpoint-associations/help new file mode 100644 index 000000000..a5ef75805 --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoint-associations/help @@ -0,0 +1,37 @@ +NAME + gcloud beta network-security firewall-endpoint-associations - create and + manage Firewall Plus endpoint associations + +SYNOPSIS + gcloud beta network-security firewall-endpoint-associations COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create and manage Firewall Plus endpoint associations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create a Firewall Plus endpoint association. + + delete + (BETA) Delete a Firewall Plus endpoint association. + + describe + (BETA) Describe a Firewall Plus endpoint association. + + list + (BETA) List Firewall Plus endpoint associations. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoint-associations + diff --git a/gcloud/beta/network-security/firewall-endpoint-associations/list b/gcloud/beta/network-security/firewall-endpoint-associations/list new file mode 100644 index 000000000..b2ebec7df --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoint-associations/list @@ -0,0 +1,79 @@ +NAME + gcloud beta network-security firewall-endpoint-associations list - list + Firewall Plus endpoint associations + +SYNOPSIS + gcloud beta network-security firewall-endpoint-associations list + [--zone=ZONE; default="-"] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List firewall endpoint associations. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To list firewall endpoint associations, run: + + $ gcloud beta network-security firewall-endpoint-associations list \ + --zone=us-central1-a --project=my-project + + To list firewall endpoint associations in all zones, run: + + $ gcloud beta network-security firewall-endpoint-associations list \ + --project=my-project + + The project is automatically read from the core/project property if it is + defined. + +FLAGS + --zone=ZONE; default="-" + Zone for the list operation + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoint-associations list + diff --git a/gcloud/beta/network-security/help b/gcloud/beta/network-security/help index 73f4a1b3b..26585d454 100644 --- a/gcloud/beta/network-security/help +++ b/gcloud/beta/network-security/help @@ -15,18 +15,27 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + address-groups + (BETA) Manage Network Security AddressGroups. + authorization-policies (BETA) Manage Network Security AuthorizationPolicies. client-tls-policies (BETA) Manage Network Security ClientTlsPolicies. + firewall-endpoint-associations + (BETA) Create and manage Firewall Plus endpoint associations. + firewall-endpoints (BETA) Create and manage Firewall Plus endpoints. gateway-security-policies (BETA) Manage Network Security Gateway Security Policies. + org-address-groups + (BETA) Manage Network Security AddressGroups. + security-profile-groups (BETA) Manage Network Security - Security Profile Groups. diff --git a/gcloud/beta/network-security/org-address-groups/add-items b/gcloud/beta/network-security/org-address-groups/add-items new file mode 100644 index 000000000..38f362c53 --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/add-items @@ -0,0 +1,80 @@ +NAME + gcloud beta network-security org-address-groups add-items - add items to an + address group of organization + +SYNOPSIS + gcloud beta network-security org-address-groups add-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Add items to an existing address group of organization. + +EXAMPLES + Add an item to an address group named my-address-group of organization + 1234. + + $ gcloud beta network-security org-address-groups add-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups add-items + + $ gcloud alpha network-security org-address-groups add-items + diff --git a/gcloud/beta/network-security/org-address-groups/clone-items b/gcloud/beta/network-security/org-address-groups/clone-items new file mode 100644 index 000000000..f3b83de2f --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/clone-items @@ -0,0 +1,81 @@ +NAME + gcloud beta network-security org-address-groups clone-items - clone items + from source address group of organization + +SYNOPSIS + gcloud beta network-security org-address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Clone items from source address group of organization. + +EXAMPLES + Clone items from source address group named other-address-group of + organization 1234. + + $ gcloud beta network-security org-address-groups clone-items \ + my-address-group --organization=1234 \ + --source=other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups clone-items + + $ gcloud alpha network-security org-address-groups clone-items + diff --git a/gcloud/beta/network-security/org-address-groups/create b/gcloud/beta/network-security/org-address-groups/create new file mode 100644 index 000000000..42490a590 --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/create @@ -0,0 +1,95 @@ +NAME + gcloud beta network-security org-address-groups create - create an address + group + +SYNOPSIS + gcloud beta network-security org-address-groups create + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + --capacity=CAPACITY --type=TYPE [--async] [--description=DESCRIPTION] + [--items=[ITEMS,...]] [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud beta network-security org-address-groups create \ + my-address-group --type=IPV4 --capacity=100 \ + --description="optional description" --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups create + + $ gcloud alpha network-security org-address-groups create + diff --git a/gcloud/beta/network-security/org-address-groups/delete b/gcloud/beta/network-security/org-address-groups/delete new file mode 100644 index 000000000..692988132 --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/delete @@ -0,0 +1,76 @@ +NAME + gcloud beta network-security org-address-groups delete - delete address + group + +SYNOPSIS + gcloud beta network-security org-address-groups delete + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud beta network-security org-address-groups delete \ + my-address-group --location=global --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups delete + + $ gcloud alpha network-security org-address-groups delete + diff --git a/gcloud/beta/network-security/org-address-groups/describe b/gcloud/beta/network-security/org-address-groups/describe new file mode 100644 index 000000000..3c64f62fa --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/describe @@ -0,0 +1,71 @@ +NAME + gcloud beta network-security org-address-groups describe - describe an + address group + +SYNOPSIS + gcloud beta network-security org-address-groups describe + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud beta network-security org-address-groups describe \ + my-address-group --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups describe + + $ gcloud alpha network-security org-address-groups describe + diff --git a/gcloud/beta/network-security/org-address-groups/help b/gcloud/beta/network-security/org-address-groups/help new file mode 100644 index 000000000..3c7b2640a --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/help @@ -0,0 +1,54 @@ +NAME + gcloud beta network-security org-address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud beta network-security org-address-groups COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + (BETA) Add items to an address group of organization. + + clone-items + (BETA) Clone items from source address group of organization. + + create + (BETA) Create an address group. + + delete + (BETA) Delete address group. + + describe + (BETA) Describe an address group. + + list + (BETA) List address groups. + + list-references + (BETA) Lists References of an Organization Address Group. + + remove-items + (BETA) Remove items from an address group of organization. + + update + (BETA) Update an address group. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups + + $ gcloud alpha network-security org-address-groups + diff --git a/gcloud/beta/network-security/org-address-groups/list b/gcloud/beta/network-security/org-address-groups/list new file mode 100644 index 000000000..7db6532b0 --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/list @@ -0,0 +1,95 @@ +NAME + gcloud beta network-security org-address-groups list - list address groups + +SYNOPSIS + gcloud beta network-security org-address-groups list + (--location=LOCATION : --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all address groups in the specified location of an + organization. + +EXAMPLES + To list address groups in an organization, run: + + $ gcloud beta network-security org-address-groups list \ + --location=global --organization=1234 + +REQUIRED FLAGS + Location resource - The organization of the address groups to display. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups list + + $ gcloud alpha network-security org-address-groups list + diff --git a/gcloud/beta/network-security/org-address-groups/list-references b/gcloud/beta/network-security/org-address-groups/list-references new file mode 100644 index 000000000..87b4cc12f --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/list-references @@ -0,0 +1,99 @@ +NAME + gcloud beta network-security org-address-groups list-references - lists + References of an Organization Address Group + +SYNOPSIS + gcloud beta network-security org-address-groups list-references + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Lists References of an Organization Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud beta network-security org-address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups list-references + + $ gcloud alpha network-security org-address-groups list-references + diff --git a/gcloud/beta/network-security/org-address-groups/remove-items b/gcloud/beta/network-security/org-address-groups/remove-items new file mode 100644 index 000000000..97625780e --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/remove-items @@ -0,0 +1,80 @@ +NAME + gcloud beta network-security org-address-groups remove-items - remove items + from an address group of organization + +SYNOPSIS + gcloud beta network-security org-address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Remove items from an existing address group of organization. + +EXAMPLES + Remove an item from an address group named my-address-group of organization + 1234. + + $ gcloud beta network-security org-address-groups remove-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups remove-items + + $ gcloud alpha network-security org-address-groups remove-items + diff --git a/gcloud/beta/network-security/org-address-groups/update b/gcloud/beta/network-security/org-address-groups/update new file mode 100644 index 000000000..d6e0fbb3a --- /dev/null +++ b/gcloud/beta/network-security/org-address-groups/update @@ -0,0 +1,115 @@ +NAME + gcloud beta network-security org-address-groups update - update an address + group + +SYNOPSIS + gcloud beta network-security org-address-groups update + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud beta network-security org-address-groups update \ + my-address-group --description="New description" \ + --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud beta network-security org-address-groups update \ + --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud beta network-security org-address-groups update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud network-security org-address-groups update + + $ gcloud alpha network-security org-address-groups update + diff --git a/gcloud/beta/run/jobs/delete b/gcloud/beta/run/jobs/delete index a9b09f27b..7a2846f4b 100644 --- a/gcloud/beta/run/jobs/delete +++ b/gcloud/beta/run/jobs/delete @@ -2,7 +2,8 @@ NAME gcloud beta run jobs delete - delete a job SYNOPSIS - gcloud beta run jobs delete JOB [--region=REGION] [GCLOUD_WIDE_FLAG ...] + gcloud beta run jobs delete JOB [--[no-]async] [--region=REGION] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Delete a job. @@ -32,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument JOB on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/beta/run/jobs/executions/delete b/gcloud/beta/run/jobs/executions/delete index 79718a726..d7e372852 100644 --- a/gcloud/beta/run/jobs/executions/delete +++ b/gcloud/beta/run/jobs/executions/delete @@ -2,8 +2,8 @@ NAME gcloud beta run jobs executions delete - delete an execution SYNOPSIS - gcloud beta run jobs executions delete EXECUTION [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + gcloud beta run jobs executions delete EXECUTION [--[no-]async] + [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Delete an execution. @@ -33,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument EXECUTION on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/beta/scc/assets/group b/gcloud/beta/scc/assets/group index 1624338cc..9c4d67997 100644 --- a/gcloud/beta/scc/assets/group +++ b/gcloud/beta/scc/assets/group @@ -68,10 +68,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - GroupAssetsResult's "state_change" attribute is updated to indicate - whether the asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --filter=FILTER Expression is a list of one or more restrictions combined via logical @@ -100,10 +100,9 @@ FLAGS should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Filter is limited - to assets existing at the supplied time and their values are those at - that specific time. For example: 2019-02-28T07:00:00Z. Absence of this - field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/scc/assets/list b/gcloud/beta/scc/assets/list index cb351982e..b783eef28 100644 --- a/gcloud/beta/scc/assets/list +++ b/gcloud/beta/scc/assets/list @@ -87,10 +87,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListAssetResult's "state" attribute is updated to indicate whether the - asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the Asset fields to be listed in the response. An @@ -107,8 +107,9 @@ FLAGS system should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Default: NOW - Example read time: "2019-02-28T07:00:06.861Z" + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/scc/assets/list-marks b/gcloud/beta/scc/assets/list-marks index 2c2827f92..ed7a6ce81 100644 --- a/gcloud/beta/scc/assets/list-marks +++ b/gcloud/beta/scc/assets/list-marks @@ -64,8 +64,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/scc/assets/update-marks b/gcloud/beta/scc/assets/update-marks index 44b4d1253..7b8f3030d 100644 --- a/gcloud/beta/scc/assets/update-marks +++ b/gcloud/beta/scc/assets/update-marks @@ -79,8 +79,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/beta/scc/findings/create b/gcloud/beta/scc/findings/create index 5d6ec56b2..6c9cfbf6c 100644 --- a/gcloud/beta/scc/findings/create +++ b/gcloud/beta/scc/findings/create @@ -90,9 +90,11 @@ REQUIRED FLAGS XSS_SCRIPTING --event-time=EVENT_TIME - Time at which the issue is detected or the finding is created, in the - following format: YYYY-MM-DDThh:mm:ss.ffffffZ. Example: - 2023-01-11T07:00:06.861Z + Time at which the event took place. For example, if the finding + represents an open firewall it would capture the time the open firewall + was detected. If event-time is not provided, it will default to UTC + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --resource-name=RESOURCE_NAME Full resource name of the Google Cloud Platform resource this finding diff --git a/gcloud/beta/scc/findings/group b/gcloud/beta/scc/findings/group index e7710a4e3..036ad00ea 100644 --- a/gcloud/beta/scc/findings/group +++ b/gcloud/beta/scc/findings/group @@ -70,27 +70,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - When compare_duration is set, the GroupResult's "state_change" - attribute is updated to indicate whether the finding had its state - changed, the finding's state remained unchanged, or if the finding was - added during the compare_duration period of time that precedes the - read_time. This is the time between (read_time - compare_duration) and - read_time. The state_change value is derived based on the presence and - state of the finding at the two points in time. Intermediate state - changes between the two times don't affect the result. For example, the - results aren't affected if the finding is made inactive and then active - again. Possible "state_change" values when compare_duration is - specified: + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The + state_change value is derived based on the presence and state of the + finding at the two points in time. Intermediate state changes between + the two times don't affect the result. For example, the results aren't + affected if the finding is made inactive and then active again. + Possible "state_change" values when compare_duration is specified: + ◆ 'CHANGED': indicates that the finding was present at the start of compare_duration, but changed its state at read_time. + ◆ 'UNCHANGED': indicates that the finding was present at the start of compare_duration and did not change state at read_time. + ◆ 'ADDED': indicates that the finding was not present at the start of - compare_duration, but was present at read_time. If compare_duration - is not specified, then the only possible state_change is "UNUSED", - which will be the state_change set for all findings present at - read_time. If this field is set then 'state_change' must be a - specified field in 'group_by'. + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --filter=FILTER Expression that defines the filter to apply across findings. The @@ -131,10 +138,9 @@ FLAGS explicitly or let gcloud fetch one-page-at-a-time. --read-time=READ_TIME - Time used as a reference point when filtering findings. The filter is - limited to findings existing at the supplied time and their values are - those at that specific time. For example. 2019-02-28T07:00:00Z. Absence - of this field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/beta/scc/findings/list b/gcloud/beta/scc/findings/list index 9d4f8aabd..8717b96de 100644 --- a/gcloud/beta/scc/findings/list +++ b/gcloud/beta/scc/findings/list @@ -80,24 +80,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListFindingsResult's "state_change" attribute is updated to indicate - whether the finding had its state changed, the finding's state remained - unchanged, or if the finding was added in any state during the - compare_duration period of time that precedes the read_time. This is - the time between (read_time - compare_duration) and read_time. The + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The state_change value is derived based on the presence and state of the finding at the two points in time. Intermediate state changes between the two times don't affect the result. For example, the results aren't affected if the finding is made inactive and then active again. Possible "state_change" values when compare_duration is specified: - "CHANGED" indicates that the finding was present at the start of - compare_duration, but changed its state at read_time. "UNCHANGED" - indicates that the finding was present at the start of compare_duration - and did not change state at read_time. "ADDED" indicates that the - finding was not present at the start of compare_duration, but was - present at read_time. If compare_duration is not specified, then the - only possible state_change is "UNUSED", which will be the state_change - set for all findings present at read_time. Example duration: "100000s" + + ◆ 'CHANGED': indicates that the finding was present at the start of + compare_duration, but changed its state at read_time. + + ◆ 'UNCHANGED': indicates that the finding was present at the start of + compare_duration and did not change state at read_time. + + ◆ 'ADDED': indicates that the finding was not present at the start of + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the finding fields listed in the response. An @@ -126,8 +136,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/beta/scc/findings/list-marks b/gcloud/beta/scc/findings/list-marks index fc92a2624..ff8808465 100644 --- a/gcloud/beta/scc/findings/list-marks +++ b/gcloud/beta/scc/findings/list-marks @@ -79,8 +79,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/scc/findings/update b/gcloud/beta/scc/findings/update index c215895fe..75b996551 100644 --- a/gcloud/beta/scc/findings/update +++ b/gcloud/beta/scc/findings/update @@ -89,7 +89,8 @@ FLAGS Time at which the event took place. For example, if the finding represents an open firewall it would capture the time the open firewall was detected. If event-time is not provided, it will default to UTC - version of NOW. For example 2019-02-28T07:00:00Z + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --external-uri=EXTERNAL_URI URI that, if available, points to a web page outside of Cloud SCC diff --git a/gcloud/beta/scc/findings/update-marks b/gcloud/beta/scc/findings/update-marks index 2a3a77eee..ab53a6265 100644 --- a/gcloud/beta/scc/findings/update-marks +++ b/gcloud/beta/scc/findings/update-marks @@ -92,8 +92,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example: - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/beta/sql/export/bak b/gcloud/beta/sql/export/bak index 2a481224d..40c81f447 100644 --- a/gcloud/beta/sql/export/bak +++ b/gcloud/beta/sql/export/bak @@ -4,8 +4,9 @@ NAME SYNOPSIS gcloud beta sql export bak INSTANCE URI --database=DATABASE,[DATABASE,...], - -d DATABASE,[DATABASE,...] [--async] [--stripe_count=STRIPE_COUNT] - [--[no-]striped] [GCLOUD_WIDE_FLAG ...] + -d DATABASE,[DATABASE,...] [--async] + [--bak-type=BAK_TYPE; default="FULL"] [--differential-base] + [--stripe_count=STRIPE_COUNT] [--[no-]striped] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Export data from a Cloud SQL instance to a Google Cloud Storage @@ -38,6 +39,14 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be exported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --differential-base + Whether the bak file export can be used as differential base for future + differential backup. SQL Server only + --stripe_count=STRIPE_COUNT Specifies the number of stripes to use for SQL Server exports. diff --git a/gcloud/beta/sql/import/bak b/gcloud/beta/sql/import/bak index 3762ad6b0..c2bb344eb 100644 --- a/gcloud/beta/sql/import/bak +++ b/gcloud/beta/sql/import/bak @@ -3,8 +3,9 @@ NAME BAK file SYNOPSIS - gcloud beta sql import bak INSTANCE URI --database=DATABASE, -d DATABASE - [--async] [--[no-]striped] + gcloud beta sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE + [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] + [--recovery-only] [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -37,7 +38,7 @@ POSITIONAL ARGUMENTS INSTANCE Cloud SQL instance ID. - URI + [URI] Path to the BAK file file in Google Cloud Storage from which the import is made. The URI is in the form gs://bucketName/fileName. @@ -50,6 +51,18 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be imported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --no-recovery + Whether or not the SQL Server import is execueted with NORECOVERY + keyword. + + --recovery-only + Whether or not the SQL Server import skip download and bring database + online. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/beta/workstations/configs/create b/gcloud/beta/workstations/configs/create index 6d26b4011..be6ba18a9 100644 --- a/gcloud/beta/workstations/configs/create +++ b/gcloud/beta/workstations/configs/create @@ -22,6 +22,8 @@ SYNOPSIS [--running-timeout=RUNNING_TIMEOUT; default=7200] [--service-account=SERVICE_ACCOUNT] [--shielded-integrity-monitoring] [--shielded-secure-boot] [--shielded-vtpm] + [--accelerator-count=ACCELERATOR_COUNT + --accelerator-type=ACCELERATOR_TYPE] [--container-custom-image=CONTAINER_CUSTOM_IMAGE | --container-predefined-image=CONTAINER_PREDEFINED_IMAGE; default="codeoss"] @@ -209,6 +211,21 @@ FLAGS --shielded-vtpm Default value is false. If set, instances will have vTPM enabled. + Accelerator settings + + --accelerator-count=ACCELERATOR_COUNT + The number of accelerator cards exposed to the instance. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --accelerator-type=ACCELERATOR_TYPE + The type of accelerator resource to attach to the instance, for + example, "nvidia-tesla-p100". + + This flag argument must be specified if any of the other arguments in + this group are specified. + At most one of these can be specified: --container-custom-image=CONTAINER_CUSTOM_IMAGE diff --git a/gcloud/builds/triggers/run b/gcloud/builds/triggers/run index 23124192e..a3bf793ea 100644 --- a/gcloud/builds/triggers/run +++ b/gcloud/builds/triggers/run @@ -3,7 +3,8 @@ NAME SYNOPSIS gcloud builds triggers run (TRIGGER : --region=REGION) - (--branch=BRANCH | --sha=SHA | --tag=TAG) [GCLOUD_WIDE_FLAG ...] + [--substitutions=[KEY=VALUE,...]] + [--branch=BRANCH | --sha=SHA | --tag=TAG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Run a build trigger. @@ -44,8 +45,28 @@ POSITIONAL ARGUMENTS ▸ provide the argument --region on the command line; ▸ set the property builds/region. -REQUIRED FLAGS - Exactly one of these must be specified: +FLAGS + --substitutions=[KEY=VALUE,...] + Parameters to be substituted in the build specification. + + For example (using some nonsensical substitution keys; all keys must + begin with an underscore): + + $ gcloud builds triggers create ... --config config.yaml + --substitutions _FAVORITE_COLOR=blue,_NUM_CANDIES=10 + + This will result in a build where every occurrence of + ${_FAVORITE_COLOR} in certain fields is replaced by "blue", and + similarly for ${_NUM_CANDIES} and "10". + + Only the following built-in variables can be specified with the + --substitutions flag: REPO_NAME, BRANCH_NAME, TAG_NAME, REVISION_ID, + COMMIT_SHA, SHORT_SHA. + + For more details, see: + https://cloud.google.com/cloud-build/docs/api/build-requests#substitutions + + At most one of these can be specified: --branch=BRANCH Branch to run. diff --git a/gcloud/composer/environments/create b/gcloud/composer/environments/create index e10ae3ad1..941e5613b 100644 --- a/gcloud/composer/environments/create +++ b/gcloud/composer/environments/create @@ -6,7 +6,8 @@ SYNOPSIS gcloud composer environments create (ENVIRONMENT : --location=LOCATION) [--airflow-configs=[KEY=VALUE,...]] [--async] [--cloud-sql-machine-type=CLOUD_SQL_MACHINE_TYPE] - [--disk-size=DISK_SIZE] [--env-variables=[NAME=VALUE,...]] + [--disk-size=DISK_SIZE] [--enable-high-resilience] + [--env-variables=[NAME=VALUE,...]] [--environment-size=ENVIRONMENT_SIZE] [--labels=[KEY=VALUE,...]] [--machine-type=MACHINE_TYPE] [--node-count=NODE_COUNT] [--oauth-scopes=[SCOPE,...]] [--python-version=PYTHON_VERSION] @@ -121,6 +122,9 @@ FLAGS multiple of gigabytes. Cannot be updated after the environment has been created. If units are not provided, defaults to GB. + --enable-high-resilience + Enable use of a high resilience, supported for Composer 2 Environments. + --env-variables=[NAME=VALUE,...] A comma-delimited list of environment variable NAME=VALUE pairs to provide to the Airflow scheduler, worker, and webserver processes. NAME diff --git a/gcloud/composer/environments/database-failover b/gcloud/composer/environments/database-failover new file mode 100644 index 000000000..fb0933ac1 --- /dev/null +++ b/gcloud/composer/environments/database-failover @@ -0,0 +1,69 @@ +NAME + gcloud composer environments database-failover - run a database failover + operation + +SYNOPSIS + gcloud composer environments database-failover + (ENVIRONMENT : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Run a database failover operation. + +EXAMPLES + To run a manual database failover on the environment named environment-1, + run: $ gcloud composer environments database-failover environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to trigger a database + failover. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha composer environments database-failover + + $ gcloud beta composer environments database-failover + diff --git a/gcloud/composer/environments/fetch-database-properties b/gcloud/composer/environments/fetch-database-properties new file mode 100644 index 000000000..aa5e242bf --- /dev/null +++ b/gcloud/composer/environments/fetch-database-properties @@ -0,0 +1,64 @@ +NAME + gcloud composer environments fetch-database-properties - fetch database + properties + +SYNOPSIS + gcloud composer environments fetch-database-properties + (ENVIRONMENT : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Fetch database properties. + +EXAMPLES + To fetch database properties for the environment named environment-1, run: $ gcloud composer environments fetch-database-properties \ + environment-1 + +POSITIONAL ARGUMENTS + Environment resource - The environment for which to fetch database + properties. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha composer environments fetch-database-properties + + $ gcloud beta composer environments fetch-database-properties + diff --git a/gcloud/composer/environments/help b/gcloud/composer/environments/help index ef56af175..2ecdd48f9 100644 --- a/gcloud/composer/environments/help +++ b/gcloud/composer/environments/help @@ -34,12 +34,18 @@ COMMANDS create Create and initialize a Cloud Composer environment. + database-failover + Run a database failover operation. + delete Delete one or more Cloud Composer environments. describe Get details about a Cloud Composer environment. + fetch-database-properties + Fetch database properties. + list List the Cloud Composer environments under a project and location. diff --git a/gcloud/compute/backend-buckets/update b/gcloud/compute/backend-buckets/update index 7d3e3ecac..78f20082c 100644 --- a/gcloud/compute/backend-buckets/update +++ b/gcloud/compute/backend-buckets/update @@ -172,7 +172,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -244,7 +248,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -333,9 +341,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/compute/backend-services/update b/gcloud/compute/backend-services/update index b9d8e2df9..db9a96b53 100644 --- a/gcloud/compute/backend-services/update +++ b/gcloud/compute/backend-services/update @@ -525,7 +525,11 @@ FLAGS this field. --no-client-ttl - Clears client TTL value. + (DEPRECATED) Clears client TTL value. + + The --no-client-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -644,7 +648,11 @@ FLAGS omit this field. --no-max-ttl - Clears max TTL value. + (DEPRECATED) Clears max TTL value. + + The --no-max-ttl option is deprecated and will be removed in an + upcoming release. If you're currently using this argument, you should + remove it from your workflows. At most one of these can be specified: @@ -733,9 +741,8 @@ FLAGS (DEPRECATED) Clears serve while stale value. The --no-serve-while-stale option is deprecated and will be removed - in an upcoming release; use --serve-while-stale instead. If you're - currently using this argument, you should remove it from your - workflows. + in an upcoming release. If you're currently using this argument, you + should remove it from your workflows. At most one of these can be specified: diff --git a/gcloud/compute/instance-groups/managed/set-autoscaling b/gcloud/compute/instance-groups/managed/set-autoscaling index 0a8622db5..f8a6a15cd 100644 --- a/gcloud/compute/instance-groups/managed/set-autoscaling +++ b/gcloud/compute/instance-groups/managed/set-autoscaling @@ -46,12 +46,18 @@ REQUIRED FLAGS OPTIONAL FLAGS --cool-down-period=COOL_DOWN_PERIOD - The time period that the autoscaler should wait before it starts - collecting information from a new instance. This prevents the - autoscaler from collecting information when the instance is - initializing, during which the collected usage would not be reliable. - The default is 60s. See $ gcloud topic datetimes for information on - duration formats. + The number of seconds that your application takes to initialize on a VM + instance. This is referred to as the initialization period + (https://cloud.google.com/compute/docs/autoscaler#cool_down_period). + Specifying an accurate initialization period improves autoscaler + decisions. For example, when scaling out, the autoscaler ignores data + from VMs that are still initializing because those VMs might not yet + represent normal usage of your application. The default initialization + period is 60 seconds. See $ gcloud topic datetimes for information on + duration formats. Initialization periods might vary because of numerous + factors. We recommend that you test how long your application may take + to initialize. To do this, create a VM and time your application's + startup process. --cpu-utilization-predictive-method=CPU_UTILIZATION_PREDICTIVE_METHOD Indicates whether to use a predictive algorithm when scaling based on diff --git a/gcloud/compute/service-attachments/create b/gcloud/compute/service-attachments/create index 80e1fedf6..5e80e908d 100644 --- a/gcloud/compute/service-attachments/create +++ b/gcloud/compute/service-attachments/create @@ -13,7 +13,7 @@ SYNOPSIS [--domain-names=[DOMAIN_NAMES,...]] [--enable-proxy-protocol] [--nat-subnets-region=NAT_SUBNETS_REGION] [--producer-forwarding-rule-region=PRODUCER_FORWARDING_RULE_REGION] - [--region=REGION] [GCLOUD_WIDE_FLAG ...] + [--reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute service-attachments create is used to create service @@ -127,6 +127,20 @@ OPTIONAL FLAGS Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION. + --reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + --region=REGION Region of the service attachment to create. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/compute/service-attachments/update b/gcloud/compute/service-attachments/update index fd7e8635f..127cdedf1 100644 --- a/gcloud/compute/service-attachments/update +++ b/gcloud/compute/service-attachments/update @@ -9,8 +9,8 @@ SYNOPSIS [--consumer-reject-list=[REJECT_LIST,...]] [--description=DESCRIPTION] [--[no-]enable-proxy-protocol] [--nat-subnets=NAT_SUBNETS,[NAT_SUBNETS,...]] - [--nat-subnets-region=NAT_SUBNETS_REGION] [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--nat-subnets-region=NAT_SUBNETS_REGION] + [--[no-]reconcile-connections] [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute service-attachments update is used to update service @@ -93,6 +93,23 @@ FLAGS set to the region of the service attachment. Overrides the default compute/region property value for this command invocation. + --[no-]reconcile-connections + Determines whether to apply changes to consumer accept or reject lists + to existing connections or only to new connections. + + If false, existing endpoints with a connection status of ACCEPTED or + REJECTED are not updated. + + If true, existing endpoints with a connection status of ACCEPTED or + REJECTED are updated based on the connection policy update. For + example, if a project or network is removed from the + --consumer-accept-list and added to --consumer-reject-list, all the + endpoints in that project or network with the ACCEPTED state are set to + REJECTED. + + Use --reconcile-connections to enable and --no-reconcile-connections to + disable. + --region=REGION Region of the service attachment to update. If not specified, you might be prompted to select a region (interactive mode only). diff --git a/gcloud/container/node-pools/create b/gcloud/container/node-pools/create index ad20bb8d9..6c28ef812 100644 --- a/gcloud/container/node-pools/create +++ b/gcloud/container/node-pools/create @@ -42,6 +42,8 @@ SYNOPSIS [--enable-autoscaling --location-policy=LOCATION_POLICY --max-nodes=MAX_NODES --min-nodes=MIN_NODES --total-max-nodes=TOTAL_MAX_NODES --total-min-nodes=TOTAL_MIN_NODES] + [--enable-best-effort-provision + --min-provision-nodes=MIN_PROVISION_NODES] [--ephemeral-storage-local-ssd=[count=COUNT] | --local-nvme-ssd-block=[count=COUNT] | --local-ssd-count=LOCAL_SSD_COUNT] @@ -677,6 +679,16 @@ FLAGS --node-pool (or default node pool if unspecified) can scale. Ignored unless --enable-autoscaling is also specified. + Specifies minimum number of nodes to be created when best effort + provisioning enabled. + + --enable-best-effort-provision + Enable best effort provision for nodes + + --min-provision-nodes=MIN_PROVISION_NODES + Specifies the minimum number of nodes to be provisioned during + creation + At most one of these can be specified: --ephemeral-storage-local-ssd=[count=COUNT] diff --git a/gcloud/iam/workforce-pools/providers/create-oidc b/gcloud/iam/workforce-pools/providers/create-oidc index 6a5156691..e4bf33971 100644 --- a/gcloud/iam/workforce-pools/providers/create-oidc +++ b/gcloud/iam/workforce-pools/providers/create-oidc @@ -9,8 +9,9 @@ SYNOPSIS --issuer-uri=ISSUER_URI [--async] [--attribute-condition=ATTRIBUTE_CONDITION] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new OIDC workforce pool provider. @@ -191,19 +192,18 @@ OPTIONAL FLAGS A display name for the workforce pool provider. Cannot exceed 32 characters in length. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/iam/workforce-pools/providers/update-oidc b/gcloud/iam/workforce-pools/providers/update-oidc index b08ae3e31..fb763cdda 100644 --- a/gcloud/iam/workforce-pools/providers/update-oidc +++ b/gcloud/iam/workforce-pools/providers/update-oidc @@ -9,8 +9,9 @@ SYNOPSIS [--attribute-mapping=[ATTRIBUTE_MAPPING,...]] [--client-id=CLIENT_ID] [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] [--issuer-uri=ISSUER_URI] - [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] - [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR, + [...]] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update an OIDC workforce pool provider. @@ -190,19 +191,18 @@ FLAGS --issuer-uri=ISSUER_URI The OIDC issuer URI. Must be a valid URI using the 'https' scheme. - --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR + --web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR,[...] The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition. Use only-id-token-claims to include only ID token claims. - WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be one of: - assertion-claims-behavior-unspecified, only-id-token-claims. + WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR must be (only one value is + supported): only-id-token-claims. --web-sso-response-type=WEB_SSO_RESPONSE_TYPE Response Type to request for in the OIDC Authorization Request for web sign-in. Use id-token to select the implicit flow (https://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowAuth). - WEB_SSO_RESPONSE_TYPE must be one of: id-token, - response-type-unspecified. + WEB_SSO_RESPONSE_TYPE must be (only one value is supported): id-token. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/network-security/address-groups/add-items b/gcloud/network-security/address-groups/add-items new file mode 100644 index 000000000..86cb10a90 --- /dev/null +++ b/gcloud/network-security/address-groups/add-items @@ -0,0 +1,77 @@ +NAME + gcloud network-security address-groups add-items - add items to an address + group + +SYNOPSIS + gcloud network-security address-groups add-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Add items to an existing address group. + +EXAMPLES + Add an item to an address group named my-address-group. + + $ gcloud network-security address-groups add-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups add-items + + $ gcloud beta network-security address-groups add-items + diff --git a/gcloud/network-security/address-groups/clone-items b/gcloud/network-security/address-groups/clone-items new file mode 100644 index 000000000..78a88a558 --- /dev/null +++ b/gcloud/network-security/address-groups/clone-items @@ -0,0 +1,78 @@ +NAME + gcloud network-security address-groups clone-items - clone items from + source address group + +SYNOPSIS + gcloud network-security address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--source=SOURCE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Clone items from source address group. + +EXAMPLES + Clone items from source address group named other-address-group. + + $ gcloud network-security address-groups clone-items \ + my-address-group \ + --source=projects/other/locations/global/other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups clone-items + + $ gcloud beta network-security address-groups clone-items + diff --git a/gcloud/network-security/address-groups/create b/gcloud/network-security/address-groups/create new file mode 100644 index 000000000..2d213a6e2 --- /dev/null +++ b/gcloud/network-security/address-groups/create @@ -0,0 +1,91 @@ +NAME + gcloud network-security address-groups create - create an address group + +SYNOPSIS + gcloud network-security address-groups create + (ADDRESS_GROUP : --location=LOCATION) --capacity=CAPACITY --type=TYPE + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud network-security address-groups create my-address-group \ + --type=IPV4 --capacity=100 --description="optional description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups create + + $ gcloud beta network-security address-groups create + diff --git a/gcloud/network-security/address-groups/delete b/gcloud/network-security/address-groups/delete new file mode 100644 index 000000000..391630d4e --- /dev/null +++ b/gcloud/network-security/address-groups/delete @@ -0,0 +1,72 @@ +NAME + gcloud network-security address-groups delete - delete address group + +SYNOPSIS + gcloud network-security address-groups delete + (ADDRESS_GROUP : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud network-security address-groups delete my-address-group \ + --location=global + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups delete + + $ gcloud beta network-security address-groups delete + diff --git a/gcloud/network-security/address-groups/describe b/gcloud/network-security/address-groups/describe new file mode 100644 index 000000000..7a61126c4 --- /dev/null +++ b/gcloud/network-security/address-groups/describe @@ -0,0 +1,66 @@ +NAME + gcloud network-security address-groups describe - describe an address group + +SYNOPSIS + gcloud network-security address-groups describe + (ADDRESS_GROUP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud network-security address-groups describe my-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups describe + + $ gcloud beta network-security address-groups describe + diff --git a/gcloud/network-security/address-groups/help b/gcloud/network-security/address-groups/help new file mode 100644 index 000000000..b32f6a311 --- /dev/null +++ b/gcloud/network-security/address-groups/help @@ -0,0 +1,52 @@ +NAME + gcloud network-security address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud network-security address-groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + Add items to an address group. + + clone-items + Clone items from source address group. + + create + Create an address group. + + delete + Delete address group. + + describe + Describe an address group. + + list + List address groups. + + list-references + Lists References of an Address Group. + + remove-items + Remove items from an address group. + + update + Update an address group. + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups + + $ gcloud beta network-security address-groups + diff --git a/gcloud/network-security/address-groups/list b/gcloud/network-security/address-groups/list new file mode 100644 index 000000000..412f9367a --- /dev/null +++ b/gcloud/network-security/address-groups/list @@ -0,0 +1,86 @@ +NAME + gcloud network-security address-groups list - list address groups + +SYNOPSIS + gcloud network-security address-groups list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all address groups in the specified location of the current project. + +EXAMPLES + To list address groups in the current project, run: + + $ gcloud network-security address-groups list --location=global + +REQUIRED FLAGS + Location resource - The project of the address groups to display. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups list + + $ gcloud beta network-security address-groups list + diff --git a/gcloud/network-security/address-groups/list-references b/gcloud/network-security/address-groups/list-references new file mode 100644 index 000000000..5dd55244e --- /dev/null +++ b/gcloud/network-security/address-groups/list-references @@ -0,0 +1,98 @@ +NAME + gcloud network-security address-groups list-references - lists References + of an Address Group + +SYNOPSIS + gcloud network-security address-groups list-references + (ADDRESS_GROUP : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Lists References of an Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud network-security address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument ADDRESS_GROUP on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups list-references + + $ gcloud beta network-security address-groups list-references + diff --git a/gcloud/network-security/address-groups/remove-items b/gcloud/network-security/address-groups/remove-items new file mode 100644 index 000000000..7c26b8c86 --- /dev/null +++ b/gcloud/network-security/address-groups/remove-items @@ -0,0 +1,77 @@ +NAME + gcloud network-security address-groups remove-items - remove items from an + address group + +SYNOPSIS + gcloud network-security address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION) [--async] [--items=[ITEMS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Remove items from an existing address group. + +EXAMPLES + Remove an item from an address group named my-address-group. + + $ gcloud network-security address-groups remove-items \ + my-address-group --items=192.168.1.1 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups remove-items + + $ gcloud beta network-security address-groups remove-items + diff --git a/gcloud/network-security/address-groups/update b/gcloud/network-security/address-groups/update new file mode 100644 index 000000000..e007ef748 --- /dev/null +++ b/gcloud/network-security/address-groups/update @@ -0,0 +1,110 @@ +NAME + gcloud network-security address-groups update - update an address group + +SYNOPSIS + gcloud network-security address-groups update + (ADDRESS_GROUP : --location=LOCATION) [--async] + [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud network-security address-groups update my-address-group \ + --description="New description" + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument address_group on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud network-security address-groups update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud network-security address-groups update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security address-groups update + + $ gcloud beta network-security address-groups update + diff --git a/gcloud/network-security/help b/gcloud/network-security/help index 0ab1d1830..aab3f04d8 100644 --- a/gcloud/network-security/help +++ b/gcloud/network-security/help @@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + address-groups + Manage Network Security AddressGroups. + authorization-policies Manage Network Security AuthorizationPolicies. @@ -24,6 +27,9 @@ GROUPS gateway-security-policies Manage Network Security Gateway Security Policies. + org-address-groups + Manage Network Security AddressGroups. + server-tls-policies Manage Network Security ServerTlsPolicies. diff --git a/gcloud/network-security/org-address-groups/add-items b/gcloud/network-security/org-address-groups/add-items new file mode 100644 index 000000000..e10d4c113 --- /dev/null +++ b/gcloud/network-security/org-address-groups/add-items @@ -0,0 +1,79 @@ +NAME + gcloud network-security org-address-groups add-items - add items to an + address group of organization + +SYNOPSIS + gcloud network-security org-address-groups add-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Add items to an existing address group of organization. + +EXAMPLES + Add an item to an address group named my-address-group of organization + 1234. + + $ gcloud network-security org-address-groups add-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be added to the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups add-items + + $ gcloud beta network-security org-address-groups add-items + diff --git a/gcloud/network-security/org-address-groups/clone-items b/gcloud/network-security/org-address-groups/clone-items new file mode 100644 index 000000000..27e1ea173 --- /dev/null +++ b/gcloud/network-security/org-address-groups/clone-items @@ -0,0 +1,80 @@ +NAME + gcloud network-security org-address-groups clone-items - clone items from + source address group of organization + +SYNOPSIS + gcloud network-security org-address-groups clone-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Clone items from source address group of organization. + +EXAMPLES + Clone items from source address group named other-address-group of + organization 1234. + + $ gcloud network-security org-address-groups clone-items \ + my-address-group --organization=1234 \ + --source=other-address-group + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Source address group to be cloned from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups clone-items + + $ gcloud beta network-security org-address-groups clone-items + diff --git a/gcloud/network-security/org-address-groups/create b/gcloud/network-security/org-address-groups/create new file mode 100644 index 000000000..c54dbdf55 --- /dev/null +++ b/gcloud/network-security/org-address-groups/create @@ -0,0 +1,93 @@ +NAME + gcloud network-security org-address-groups create - create an address group + +SYNOPSIS + gcloud network-security org-address-groups create + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + --capacity=CAPACITY --type=TYPE [--async] [--description=DESCRIPTION] + [--items=[ITEMS,...]] [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new address group with the given name. + +EXAMPLES + Create an address group with the name my-address-group, type IPV4, capacity + 100 and the description optional description. + + $ gcloud network-security org-address-groups create \ + my-address-group --type=IPV4 --capacity=100 \ + --description="optional description" --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be created. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --capacity=CAPACITY + Capacity of the address group. + + --type=TYPE + Type of the address group. TYPE must be one of: ipv4, ipv6. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --labels=KEY=VALUE + List of label KEY=VALUE pairs to add. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups create + + $ gcloud beta network-security org-address-groups create + diff --git a/gcloud/network-security/org-address-groups/delete b/gcloud/network-security/org-address-groups/delete new file mode 100644 index 000000000..2433febde --- /dev/null +++ b/gcloud/network-security/org-address-groups/delete @@ -0,0 +1,74 @@ +NAME + gcloud network-security org-address-groups delete - delete address group + +SYNOPSIS + gcloud network-security org-address-groups delete + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete the specified address group. + +EXAMPLES + To delete an address group called 'my-address-group', run: + + $ gcloud network-security org-address-groups delete \ + my-address-group --location=global --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups delete + + $ gcloud beta network-security org-address-groups delete + diff --git a/gcloud/network-security/org-address-groups/describe b/gcloud/network-security/org-address-groups/describe new file mode 100644 index 000000000..780be19cf --- /dev/null +++ b/gcloud/network-security/org-address-groups/describe @@ -0,0 +1,70 @@ +NAME + gcloud network-security org-address-groups describe - describe an address + group + +SYNOPSIS + gcloud network-security org-address-groups describe + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Show details of an address group. + +EXAMPLES + Show details about an address group named my-address-group. + + $ gcloud network-security org-address-groups describe \ + my-address-group --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be described. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups describe + + $ gcloud beta network-security org-address-groups describe + diff --git a/gcloud/network-security/org-address-groups/help b/gcloud/network-security/org-address-groups/help new file mode 100644 index 000000000..d6a78b96f --- /dev/null +++ b/gcloud/network-security/org-address-groups/help @@ -0,0 +1,52 @@ +NAME + gcloud network-security org-address-groups - manage Network Security + AddressGroups + +SYNOPSIS + gcloud network-security org-address-groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Network Security AddressGroups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-items + Add items to an address group of organization. + + clone-items + Clone items from source address group of organization. + + create + Create an address group. + + delete + Delete address group. + + describe + Describe an address group. + + list + List address groups. + + list-references + Lists References of an Organization Address Group. + + remove-items + Remove items from an address group of organization. + + update + Update an address group. + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups + + $ gcloud beta network-security org-address-groups + diff --git a/gcloud/network-security/org-address-groups/list b/gcloud/network-security/org-address-groups/list new file mode 100644 index 000000000..de1e853d0 --- /dev/null +++ b/gcloud/network-security/org-address-groups/list @@ -0,0 +1,93 @@ +NAME + gcloud network-security org-address-groups list - list address groups + +SYNOPSIS + gcloud network-security org-address-groups list + (--location=LOCATION : --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all address groups in the specified location of an organization. + +EXAMPLES + To list address groups in an organization, run: + + $ gcloud network-security org-address-groups list \ + --location=global --organization=1234 + +REQUIRED FLAGS + Location resource - The organization of the address groups to display. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups list + + $ gcloud beta network-security org-address-groups list + diff --git a/gcloud/network-security/org-address-groups/list-references b/gcloud/network-security/org-address-groups/list-references new file mode 100644 index 000000000..1adf84937 --- /dev/null +++ b/gcloud/network-security/org-address-groups/list-references @@ -0,0 +1,98 @@ +NAME + gcloud network-security org-address-groups list-references - lists + References of an Organization Address Group + +SYNOPSIS + gcloud network-security org-address-groups list-references + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Lists References of an Organization Address Group. + +EXAMPLES + To list References of address group named my-address-group. + + $ gcloud network-security org-address-groups list-references \ + my-address-group + +POSITIONAL ARGUMENTS + Address group resource - address group group help. The arguments in this + group can be used to specify the attributes of this resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument ADDRESS_GROUP on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument ADDRESS_GROUP on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups list-references + + $ gcloud beta network-security org-address-groups list-references + diff --git a/gcloud/network-security/org-address-groups/remove-items b/gcloud/network-security/org-address-groups/remove-items new file mode 100644 index 000000000..7df3b1a89 --- /dev/null +++ b/gcloud/network-security/org-address-groups/remove-items @@ -0,0 +1,79 @@ +NAME + gcloud network-security org-address-groups remove-items - remove items from + an address group of organization + +SYNOPSIS + gcloud network-security org-address-groups remove-items + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--items=[ITEMS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Remove items from an existing address group of organization. + +EXAMPLES + Remove an item from an address group named my-address-group of organization + 1234. + + $ gcloud network-security org-address-groups remove-items \ + my-address-group --items=192.168.1.1 --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --items=[ITEMS,...] + Items to be removed from the address group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups remove-items + + $ gcloud beta network-security org-address-groups remove-items + diff --git a/gcloud/network-security/org-address-groups/update b/gcloud/network-security/org-address-groups/update new file mode 100644 index 000000000..38586c3b4 --- /dev/null +++ b/gcloud/network-security/org-address-groups/update @@ -0,0 +1,112 @@ +NAME + gcloud network-security org-address-groups update - update an address group + +SYNOPSIS + gcloud network-security org-address-groups update + (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) + [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update the details of an address group. + +EXAMPLES + Update description of an address group named my-address-group. + + $ gcloud network-security org-address-groups update \ + my-address-group --description="New description" \ + --organization=1234 + +POSITIONAL ARGUMENTS + Address group resource - Name of the address group to be updated. The + arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + ADDRESS_GROUP + ID of the address group or fully qualified identifier for the address + group. + + To set the address_group attribute: + ▸ provide the argument address_group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location Id. + + To set the location attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + Organization number. + + To set the organization attribute: + ▸ provide the argument address_group on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + New description of the address group. + + --items=[ITEMS,...] + Items of the address group. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud network-security org-address-groups update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud network-security org-address-groups update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/networking + +NOTES + These variants are also available: + + $ gcloud alpha network-security org-address-groups update + + $ gcloud beta network-security org-address-groups update + diff --git a/gcloud/privateca/pools/create b/gcloud/privateca/pools/create index f39755b32..6dfffe5ba 100644 --- a/gcloud/privateca/pools/create +++ b/gcloud/privateca/pools/create @@ -5,7 +5,9 @@ SYNOPSIS gcloud privateca pools create (CA_POOL : --location=LOCATION) [--issuance-policy=ISSUANCE_POLICY] [--labels=[KEY=VALUE,...]] [--no-publish-ca-cert] [--no-publish-crl] - [--tier=TIER; default="enterprise"] [GCLOUD_WIDE_FLAG ...] + [--publishing-encoding-format=PUBLISHING_ENCODING_FORMAT; + default="pem"] [--tier=TIER; default="enterprise"] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To create a CA pool in the dev ops tier: @@ -91,6 +93,10 @@ FLAGS Enabled by default, use --no-publish-crl to disable. + --publishing-encoding-format=PUBLISHING_ENCODING_FORMAT; default="pem" + The encoding format of the content published to storage buckets. + PUBLISHING_ENCODING_FORMAT must be one of: der, pem. + --tier=TIER; default="enterprise" The tier for the Certificate Authority. TIER must be one of: devops, enterprise. diff --git a/gcloud/privateca/pools/update b/gcloud/privateca/pools/update index 28eed9317..c1e78466a 100644 --- a/gcloud/privateca/pools/update +++ b/gcloud/privateca/pools/update @@ -4,7 +4,9 @@ NAME SYNOPSIS gcloud privateca pools update (CA_POOL : --location=LOCATION) [--issuance-policy=ISSUANCE_POLICY] [--no-publish-ca-cert] - [--no-publish-crl] [--update-labels=[KEY=VALUE,...]] + [--no-publish-crl] + [--publishing-encoding-format=PUBLISHING_ENCODING_FORMAT; + default="pem"] [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] EXAMPLES @@ -88,6 +90,10 @@ FLAGS Enabled by default, use --no-publish-crl to disable. + --publishing-encoding-format=PUBLISHING_ENCODING_FORMAT; default="pem" + The encoding format of the content published to storage buckets. + PUBLISHING_ENCODING_FORMAT must be one of: der, pem. + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/run/jobs/delete b/gcloud/run/jobs/delete index 60372d87f..66332fedf 100644 --- a/gcloud/run/jobs/delete +++ b/gcloud/run/jobs/delete @@ -2,7 +2,8 @@ NAME gcloud run jobs delete - delete a job SYNOPSIS - gcloud run jobs delete JOB [--region=REGION] [GCLOUD_WIDE_FLAG ...] + gcloud run jobs delete JOB [--[no-]async] [--region=REGION] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Delete a job. @@ -32,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument JOB on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/run/jobs/executions/delete b/gcloud/run/jobs/executions/delete index 1a36c43c8..379f84006 100644 --- a/gcloud/run/jobs/executions/delete +++ b/gcloud/run/jobs/executions/delete @@ -2,8 +2,8 @@ NAME gcloud run jobs executions delete - delete an execution SYNOPSIS - gcloud run jobs executions delete EXECUTION [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + gcloud run jobs executions delete EXECUTION [--[no-]async] + [--region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Delete an execution. @@ -33,6 +33,11 @@ POSITIONAL ARGUMENTS ▸ provide the argument EXECUTION on the command line. FLAGS + --[no-]async + Return immediately, without waiting for the operation in progress to + complete. Defaults to --no-async. Use --async to enable and --no-async + to disable. + --region=REGION Region in which the resource can be found. Alternatively, set the property [run/region]. diff --git a/gcloud/scc/assets/group b/gcloud/scc/assets/group index cd09d39a4..8c0bcb24f 100644 --- a/gcloud/scc/assets/group +++ b/gcloud/scc/assets/group @@ -68,10 +68,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - GroupAssetsResult's "state_change" attribute is updated to indicate - whether the asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --filter=FILTER Expression is a list of one or more restrictions combined via logical @@ -100,10 +100,9 @@ FLAGS should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Filter is limited - to assets existing at the supplied time and their values are those at - that specific time. For example: 2019-02-28T07:00:00Z. Absence of this - field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/scc/assets/list b/gcloud/scc/assets/list index 67b0cd051..b72770471 100644 --- a/gcloud/scc/assets/list +++ b/gcloud/scc/assets/list @@ -85,10 +85,10 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListAssetResult's "state" attribute is updated to indicate whether the - asset was added, removed, or remained present during the - compare_duration period of time that precedes the read_time. Example - duration: "100000s" + The result's "state_change" attribute is updated to indicate whether + the asset was added, removed, or remained present during the + compare_duration period of time that precedes the read_time. See $ + gcloud topic datetimes for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the Asset fields to be listed in the response. An @@ -105,8 +105,9 @@ FLAGS system should return the next page of data. --read-time=READ_TIME - Time used as a reference point when filtering assets. Default: NOW - Example read time: "2019-02-28T07:00:06.861Z" + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/scc/assets/list-marks b/gcloud/scc/assets/list-marks index d00f4734a..c0c4e48b7 100644 --- a/gcloud/scc/assets/list-marks +++ b/gcloud/scc/assets/list-marks @@ -64,8 +64,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/scc/assets/update-marks b/gcloud/scc/assets/update-marks index 14ed8c5f2..d956b8f6b 100644 --- a/gcloud/scc/assets/update-marks +++ b/gcloud/scc/assets/update-marks @@ -79,8 +79,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/scc/findings/create b/gcloud/scc/findings/create index 944694f11..2dc17fdb5 100644 --- a/gcloud/scc/findings/create +++ b/gcloud/scc/findings/create @@ -89,9 +89,11 @@ REQUIRED FLAGS XSS_SCRIPTING --event-time=EVENT_TIME - Time at which the issue is detected or the finding is created, in the - following format: YYYY-MM-DDThh:mm:ss.ffffffZ. Example: - 2023-01-11T07:00:06.861Z + Time at which the event took place. For example, if the finding + represents an open firewall it would capture the time the open firewall + was detected. If event-time is not provided, it will default to UTC + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --resource-name=RESOURCE_NAME Full resource name of the Google Cloud Platform resource this finding diff --git a/gcloud/scc/findings/group b/gcloud/scc/findings/group index de25baba3..2b1efe234 100644 --- a/gcloud/scc/findings/group +++ b/gcloud/scc/findings/group @@ -69,27 +69,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - When compare_duration is set, the GroupResult's "state_change" - attribute is updated to indicate whether the finding had its state - changed, the finding's state remained unchanged, or if the finding was - added during the compare_duration period of time that precedes the - read_time. This is the time between (read_time - compare_duration) and - read_time. The state_change value is derived based on the presence and - state of the finding at the two points in time. Intermediate state - changes between the two times don't affect the result. For example, the - results aren't affected if the finding is made inactive and then active - again. Possible "state_change" values when compare_duration is - specified: + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The + state_change value is derived based on the presence and state of the + finding at the two points in time. Intermediate state changes between + the two times don't affect the result. For example, the results aren't + affected if the finding is made inactive and then active again. + Possible "state_change" values when compare_duration is specified: + ◆ 'CHANGED': indicates that the finding was present at the start of compare_duration, but changed its state at read_time. + ◆ 'UNCHANGED': indicates that the finding was present at the start of compare_duration and did not change state at read_time. + ◆ 'ADDED': indicates that the finding was not present at the start of - compare_duration, but was present at read_time. If compare_duration - is not specified, then the only possible state_change is "UNUSED", - which will be the state_change set for all findings present at - read_time. If this field is set then 'state_change' must be a - specified field in 'group_by'. + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --filter=FILTER Expression that defines the filter to apply across findings. The @@ -130,10 +137,9 @@ FLAGS explicitly or let gcloud fetch one-page-at-a-time. --read-time=READ_TIME - Time used as a reference point when filtering findings. The filter is - limited to findings existing at the supplied time and their values are - those at that specific time. For example. 2019-02-28T07:00:00Z. Absence - of this field will default to the API's version of NOW. + Time used as a reference point when filtering. Absence of this field + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/scc/findings/list b/gcloud/scc/findings/list index f72ae63b4..241f3b4cf 100644 --- a/gcloud/scc/findings/list +++ b/gcloud/scc/findings/list @@ -78,24 +78,34 @@ POSITIONAL ARGUMENTS FLAGS --compare-duration=COMPARE_DURATION - ListFindingsResult's "state_change" attribute is updated to indicate - whether the finding had its state changed, the finding's state remained - unchanged, or if the finding was added in any state during the - compare_duration period of time that precedes the read_time. This is - the time between (read_time - compare_duration) and read_time. The + When compare_duration is set, the result's "state_change" attribute is + updated to indicate whether the finding had its state changed, the + finding's state remained unchanged, or if the finding was added during + the compare_duration period of time that precedes the read_time. This + is the time between (read_time - compare_duration) and read_time. The state_change value is derived based on the presence and state of the finding at the two points in time. Intermediate state changes between the two times don't affect the result. For example, the results aren't affected if the finding is made inactive and then active again. Possible "state_change" values when compare_duration is specified: - "CHANGED" indicates that the finding was present at the start of - compare_duration, but changed its state at read_time. "UNCHANGED" - indicates that the finding was present at the start of compare_duration - and did not change state at read_time. "ADDED" indicates that the - finding was not present at the start of compare_duration, but was - present at read_time. If compare_duration is not specified, then the - only possible state_change is "UNUSED", which will be the state_change - set for all findings present at read_time. Example duration: "100000s" + + ◆ 'CHANGED': indicates that the finding was present at the start of + compare_duration, but changed its state at read_time. + + ◆ 'UNCHANGED': indicates that the finding was present at the start of + compare_duration and did not change state at read_time. + + ◆ 'ADDED': indicates that the finding was not present at the start of + compare_duration, but was present at read_time. + + ◆ 'REMOVED': indicates that the finding was present at the start of + compare_duration, but was not present at read_time. + + If compare_duration is not specified, then the only possible + state_change is 'UNUSED', which will be the state_change set for all + findings present at read_time. If this field is set then 'state_change' + must be a specified field in 'group_by'. See $ gcloud topic datetimes + for information on supported duration formats. --field-mask=FIELD_MASK Field mask to specify the finding fields listed in the response. An @@ -124,8 +134,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. --source=SOURCE; default="-" Source id. Defaults to all sources. diff --git a/gcloud/scc/findings/list-marks b/gcloud/scc/findings/list-marks index 4ecbb3c88..91aaaa75c 100644 --- a/gcloud/scc/findings/list-marks +++ b/gcloud/scc/findings/list-marks @@ -79,8 +79,8 @@ FLAGS --read-time=READ_TIME Time used as a reference point when filtering. Absence of this field - will default to the API's version of NOW. For example --read-time - "2019-02-28T07:00:00Z" + will default to the API's version of NOW. See $ gcloud topic datetimes + for information on supported time formats. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/scc/findings/update b/gcloud/scc/findings/update index 95fef0ef1..ee9a30df7 100644 --- a/gcloud/scc/findings/update +++ b/gcloud/scc/findings/update @@ -88,7 +88,8 @@ FLAGS Time at which the event took place. For example, if the finding represents an open firewall it would capture the time the open firewall was detected. If event-time is not provided, it will default to UTC - version of NOW. For example 2019-02-28T07:00:00Z + version of NOW. See $ gcloud topic datetimes for information on + supported time formats. --external-uri=EXTERNAL_URI URI that, if available, points to a web page outside of Cloud SCC diff --git a/gcloud/scc/findings/update-marks b/gcloud/scc/findings/update-marks index 2f412a5cf..6e74c3433 100644 --- a/gcloud/scc/findings/update-marks +++ b/gcloud/scc/findings/update-marks @@ -92,8 +92,8 @@ FLAGS --security-marks="key1=val1,key2=val2". --start-time=START_TIME - Time at which the updated SecurityMarks take effect. For example: - 2019-02-28T07:00:00Z + Time at which the updated SecurityMarks take effect. See $ gcloud topic + datetimes for information on supported time formats. --update-mask=UPDATE_MASK Use update-mask if you want to selectively update marks represented by diff --git a/gcloud/sql/export/bak b/gcloud/sql/export/bak index 38589eee7..c015a9f1a 100644 --- a/gcloud/sql/export/bak +++ b/gcloud/sql/export/bak @@ -3,8 +3,9 @@ NAME SYNOPSIS gcloud sql export bak INSTANCE URI --database=DATABASE,[DATABASE,...], -d - DATABASE,[DATABASE,...] [--async] [--stripe_count=STRIPE_COUNT] - [--[no-]striped] [GCLOUD_WIDE_FLAG ...] + DATABASE,[DATABASE,...] [--async] [--bak-type=BAK_TYPE; default="FULL"] + [--differential-base] [--stripe_count=STRIPE_COUNT] [--[no-]striped] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Export data from a Cloud SQL instance to a Google Cloud Storage bucket as a @@ -37,6 +38,14 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be exported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --differential-base + Whether the bak file export can be used as differential base for future + differential backup. SQL Server only + --stripe_count=STRIPE_COUNT Specifies the number of stripes to use for SQL Server exports. diff --git a/gcloud/sql/import/bak b/gcloud/sql/import/bak index 195007c0c..8d620121b 100644 --- a/gcloud/sql/import/bak +++ b/gcloud/sql/import/bak @@ -3,8 +3,9 @@ NAME file SYNOPSIS - gcloud sql import bak INSTANCE URI --database=DATABASE, -d DATABASE - [--async] [--[no-]striped] + gcloud sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE + [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] + [--recovery-only] [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -36,7 +37,7 @@ POSITIONAL ARGUMENTS INSTANCE Cloud SQL instance ID. - URI + [URI] Path to the BAK file file in Google Cloud Storage from which the import is made. The URI is in the form gs://bucketName/fileName. @@ -49,6 +50,18 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --bak-type=BAK_TYPE; default="FULL" + Type of bak file that will be imported, FULL or DIFF. SQL Server only. + BAK_TYPE must be one of: FULL, DIFF. + + --no-recovery + Whether or not the SQL Server import is execueted with NORECOVERY + keyword. + + --recovery-only + Whether or not the SQL Server import skip download and bring database + online. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/transfer/agents/install b/gcloud/transfer/agents/install index 5f3b20a21..4fe31e094 100644 --- a/gcloud/transfer/agents/install +++ b/gcloud/transfer/agents/install @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud transfer agents install --pool=POOL [--count=COUNT] - [--creds-file=CREDS_FILE] [--[no-]enable-multipart] - [--id-prefix=ID_PREFIX] + [--creds-file=CREDS_FILE] [--docker-network=DOCKER_NETWORK] + [--[no-]enable-multipart] [--id-prefix=ID_PREFIX] [--logs-directory=LOGS_DIRECTORY; default="/tmp"] [--memlock-limit=MEMLOCK_LIMIT; default=64000000] [--mount-directories=[MOUNT-DIRECTORIES,...]] [--proxy=PROXY] @@ -56,6 +56,14 @@ OPTIONAL FLAGS Note that the credentials location will be mounted to the agent container. + --docker-network=DOCKER_NETWORK + Specify the network to connect the Docker container to. This flag maps + directly to the --network flag in the underlying 'docker run' command. + + If binding directly to the Docker host's network is an option, then + setting this value to 'host' can dramatically improve transfer + performance. + --[no-]enable-multipart Split up files and transfer the resulting chunks in parallel before merging them at the destination. Can be used make transfers of large