From fa6c1dc7ec098b8b2b032f13f0868f0d46b3f12e Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 31 Jan 2024 10:36:17 +0000 Subject: [PATCH] gcloud: Wed Jan 31 10:36:17 UTC 2024 --- gcloud/_version | 10 +- .../discovered-services/find-discovered | 85 ++++++++++++++ gcloud/alpha/apphub/discovered-services/help | 4 + .../discovered-workloads/find-discovered | 86 ++++++++++++++ gcloud/alpha/apphub/discovered-workloads/help | 4 + gcloud/alpha/asset/analyze-org-policies | 4 +- .../analyze-org-policy-governed-containers | 4 +- gcloud/alpha/auth/login | 6 +- .../alpha/compute/instance-templates/create | 52 +++++---- .../instance-templates/create-with-container | 55 ++++----- gcloud/alpha/compute/instances/bulk/create | 12 +- gcloud/alpha/compute/instances/create | 47 ++++---- .../compute/instances/create-with-container | 55 ++++----- gcloud/alpha/compute/networks/subnets/create | 26 ++--- gcloud/alpha/compute/networks/subnets/update | 4 +- gcloud/alpha/compute/queued-resources/create | 12 +- gcloud/alpha/compute/routes/create | 3 +- gcloud/alpha/config/get | 8 ++ gcloud/alpha/config/help | 8 ++ gcloud/alpha/config/list | 8 ++ gcloud/alpha/config/set | 8 ++ gcloud/alpha/config/unset | 8 ++ .../container/binauthz/attestations/create | 4 +- .../binauthz/attestations/sign-and-create | 108 ++++++++++++------ gcloud/alpha/container/fleet/mesh/debug/help | 20 ---- gcloud/alpha/container/fleet/mesh/help | 6 - gcloud/alpha/container/hub/mesh/debug/help | 20 ---- gcloud/alpha/container/hub/mesh/help | 6 - gcloud/alpha/dataproc/clusters/create | 43 ++++--- .../workflow-templates/set-managed-cluster | 44 ++++--- .../edge-cloud/container/clusters/update | 9 ++ gcloud/alpha/functions/deploy | 2 +- .../alpha/migration/vms/target-projects/list | 30 +---- gcloud/alpha/ml/speech/recognize | 8 ++ gcloud/alpha/ml/speech/recognize-long-running | 8 ++ gcloud/alpha/pubsub/topics/create | 7 +- gcloud/alpha/pubsub/topics/update | 8 +- gcloud/alpha/run/integrations/create | 6 +- gcloud/alpha/run/integrations/delete | 5 +- gcloud/alpha/run/integrations/update | 4 + gcloud/alpha/scc/help | 6 +- gcloud/alpha/scc/posture-deployments/create | 19 +-- gcloud/alpha/scc/posture-deployments/list | 2 +- gcloud/alpha/scc/posture-deployments/update | 14 ++- .../describe | 21 ++-- gcloud/alpha/scc/posture-operations/help | 30 +++++ gcloud/alpha/scc/posture-templates/describe | 4 +- gcloud/alpha/scc/postures/create | 10 +- gcloud/alpha/scc/postures/delete | 4 +- gcloud/alpha/scc/postures/describe | 4 +- gcloud/alpha/scc/postures/extract | 9 +- gcloud/alpha/scc/postures/update | 2 +- .../alpha/scc/securityposture-operations/help | 27 ----- gcloud/alpha/sql/export/sql | 12 +- gcloud/alpha/sql/import/sql | 12 +- gcloud/alpha/stacks/deploy | 6 +- gcloud/alpha/stacks/resources/delete | 5 +- gcloud/asset/analyze-org-policies | 80 +++++++++++++ .../asset/analyze-org-policy-governed-assets | 81 +++++++++++++ .../analyze-org-policy-governed-containers | 81 +++++++++++++ gcloud/asset/help | 9 ++ gcloud/auth/login | 6 +- gcloud/beta/asset/analyze-org-policies | 6 +- .../asset/analyze-org-policy-governed-assets | 5 +- .../analyze-org-policy-governed-containers | 6 +- gcloud/beta/auth/login | 6 +- gcloud/beta/compute/instance-templates/create | 47 ++++---- .../instance-templates/create-with-container | 55 ++++----- gcloud/beta/compute/instances/bulk/create | 12 +- gcloud/beta/compute/instances/create | 47 ++++---- .../compute/instances/create-with-container | 55 ++++----- gcloud/beta/compute/networks/subnets/create | 26 ++--- gcloud/beta/compute/networks/subnets/update | 4 +- gcloud/beta/compute/routes/create | 3 +- gcloud/beta/config/get | 8 ++ gcloud/beta/config/help | 8 ++ gcloud/beta/config/list | 8 ++ gcloud/beta/config/set | 8 ++ gcloud/beta/config/unset | 8 ++ .../container/binauthz/attestations/create | 4 +- .../binauthz/attestations/sign-and-create | 108 ++++++++++++------ gcloud/beta/dataflow/help | 3 + gcloud/beta/dataflow/yaml/help | 24 ++++ gcloud/beta/dataflow/yaml/run | 51 +++++++++ gcloud/beta/dataproc/clusters/create | 43 ++++--- .../workflow-templates/set-managed-cluster | 44 ++++--- gcloud/beta/functions/deploy | 2 +- gcloud/beta/ml/speech/recognize | 8 ++ gcloud/beta/ml/speech/recognize-long-running | 8 ++ gcloud/beta/pubsub/topics/create | 25 ++-- gcloud/beta/pubsub/topics/update | 33 ++++-- gcloud/beta/redis/instances/create | 2 + gcloud/beta/redis/instances/upgrade | 2 + gcloud/beta/run/integrations/create | 6 +- gcloud/beta/run/integrations/delete | 5 +- gcloud/beta/run/integrations/update | 4 + gcloud/beta/sql/export/sql | 12 +- gcloud/beta/sql/import/sql | 12 +- gcloud/compute/instance-templates/create | 47 ++++---- .../instance-templates/create-with-container | 55 ++++----- gcloud/compute/instances/bulk/create | 12 +- gcloud/compute/instances/create | 47 ++++---- .../compute/instances/create-with-container | 55 ++++----- gcloud/compute/networks/subnets/create | 36 ++++-- gcloud/compute/networks/subnets/update | 14 ++- gcloud/compute/routes/create | 3 +- gcloud/compute/tpus/tpu-vm/create | 15 ++- gcloud/config/get | 8 ++ gcloud/config/help | 8 ++ gcloud/config/list | 8 ++ gcloud/config/set | 8 ++ gcloud/config/unset | 8 ++ gcloud/container/clusters/create | 8 +- gcloud/container/clusters/update | 9 +- .../connection-profiles/create/postgresql | 7 +- .../connection-profiles/update | 6 +- .../migration-jobs/demote-destination | 61 ++++++++++ gcloud/database-migration/migration-jobs/help | 3 + gcloud/dataproc/clusters/create | 42 ++++--- .../workflow-templates/set-managed-cluster | 45 +++++--- .../container/clusters/get-credentials | 6 +- gcloud/edge-cloud/container/clusters/update | 10 +- gcloud/functions/deploy | 2 +- gcloud/ml/speech/recognize | 8 ++ gcloud/ml/speech/recognize-long-running | 8 ++ gcloud/pubsub/topics/create | 25 ++-- gcloud/pubsub/topics/update | 33 ++++-- gcloud/scc/help | 3 + gcloud/scc/posture-deployments/create | 19 +-- gcloud/scc/posture-deployments/list | 2 +- gcloud/scc/posture-deployments/update | 14 ++- gcloud/scc/posture-operations/describe | 43 +++++++ gcloud/scc/posture-operations/help | 27 +++++ gcloud/scc/posture-templates/describe | 4 +- gcloud/scc/postures/create | 15 +-- gcloud/scc/postures/delete | 4 +- gcloud/scc/postures/describe | 4 +- gcloud/scc/postures/extract | 11 +- gcloud/scc/postures/update | 2 +- gcloud/sql/export/sql | 12 +- gcloud/sql/import/sql | 12 +- gcloud/workflows/execute | 6 + 142 files changed, 1981 insertions(+), 793 deletions(-) create mode 100644 gcloud/alpha/apphub/discovered-services/find-discovered create mode 100644 gcloud/alpha/apphub/discovered-workloads/find-discovered delete mode 100644 gcloud/alpha/container/fleet/mesh/debug/help delete mode 100644 gcloud/alpha/container/hub/mesh/debug/help rename gcloud/alpha/scc/{securityposture-operations => posture-operations}/describe (64%) create mode 100644 gcloud/alpha/scc/posture-operations/help delete mode 100644 gcloud/alpha/scc/securityposture-operations/help create mode 100644 gcloud/asset/analyze-org-policies create mode 100644 gcloud/asset/analyze-org-policy-governed-assets create mode 100644 gcloud/asset/analyze-org-policy-governed-containers create mode 100644 gcloud/beta/dataflow/yaml/help create mode 100644 gcloud/beta/dataflow/yaml/run create mode 100644 gcloud/database-migration/migration-jobs/demote-destination create mode 100644 gcloud/scc/posture-operations/describe create mode 100644 gcloud/scc/posture-operations/help diff --git a/gcloud/_version b/gcloud/_version index 880383042..cd4241b6f 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 461.0.0 -alpha 2024.01.22 -beta 2024.01.22 +Google Cloud SDK 462.0.0 +alpha 2024.01.29 +beta 2024.01.29 bq 2.0.101 -bundled-python3-unix 3.11.6 -core 2024.01.22 +bundled-python3-unix 3.11.7 +core 2024.01.29 gcloud-crc32c 1.0.0 gsutil 5.27 diff --git a/gcloud/alpha/apphub/discovered-services/find-discovered b/gcloud/alpha/apphub/discovered-services/find-discovered new file mode 100644 index 000000000..ac91f4de5 --- /dev/null +++ b/gcloud/alpha/apphub/discovered-services/find-discovered @@ -0,0 +1,85 @@ +NAME + gcloud alpha apphub discovered-services find-discovered - find Apphub + discovered services that could be added to an application + +SYNOPSIS + gcloud alpha apphub discovered-services find-discovered --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Find Apphub discovered services that could be added to an + application. + +EXAMPLES + To find DiscoveredServices that could be added to an application in + location us-east1, run: + + $ gcloud alpha apphub discovered-services find-discovered \ + --location=us-east1 + +REQUIRED FLAGS + Location resource - Location. This represents a Cloud resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/apphub/discovered-services/help b/gcloud/alpha/apphub/discovered-services/help index a1315a5ff..75d38fe2e 100644 --- a/gcloud/alpha/apphub/discovered-services/help +++ b/gcloud/alpha/apphub/discovered-services/help @@ -19,6 +19,10 @@ COMMANDS describe (ALPHA) Describe an Apphub discovered service. + find-discovered + (ALPHA) Find Apphub discovered services that could be added to an + application. + find-unregistered (ALPHA) List unregistered Apphub discovered services. diff --git a/gcloud/alpha/apphub/discovered-workloads/find-discovered b/gcloud/alpha/apphub/discovered-workloads/find-discovered new file mode 100644 index 000000000..eb477dcdd --- /dev/null +++ b/gcloud/alpha/apphub/discovered-workloads/find-discovered @@ -0,0 +1,86 @@ +NAME + gcloud alpha apphub discovered-workloads find-discovered - find discovered + Apphub workloads that could be added to an application + +SYNOPSIS + gcloud alpha apphub discovered-workloads find-discovered + --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Find discovered Apphub workloads that could be added to an + application. + +EXAMPLES + To find DiscoveredWorkloads that could be added to an application location + us-east1, run: + + $ gcloud alpha apphub discovered-workloads find-discovered \ + --location=us-east1 + +REQUIRED FLAGS + Location resource - Location. This represents a Cloud resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/apphub/discovered-workloads/help b/gcloud/alpha/apphub/discovered-workloads/help index 48370a266..5835ea9a6 100644 --- a/gcloud/alpha/apphub/discovered-workloads/help +++ b/gcloud/alpha/apphub/discovered-workloads/help @@ -19,6 +19,10 @@ COMMANDS describe (ALPHA) Describe an Apphub discovered workload. + find-discovered + (ALPHA) Find discovered Apphub workloads that could be added to an + application. + find-unregistered (ALPHA) List unregistered Apphub discovered workloads. diff --git a/gcloud/alpha/asset/analyze-org-policies b/gcloud/alpha/asset/analyze-org-policies index 2ff23c684..5b2407c96 100644 --- a/gcloud/alpha/asset/analyze-org-policies +++ b/gcloud/alpha/asset/analyze-org-policies @@ -75,7 +75,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud asset analyze-org-policies $ gcloud beta asset analyze-org-policies diff --git a/gcloud/alpha/asset/analyze-org-policy-governed-containers b/gcloud/alpha/asset/analyze-org-policy-governed-containers index f282282eb..1eec848cd 100644 --- a/gcloud/alpha/asset/analyze-org-policy-governed-containers +++ b/gcloud/alpha/asset/analyze-org-policy-governed-containers @@ -77,7 +77,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud asset analyze-org-policy-governed-containers $ gcloud beta asset analyze-org-policy-governed-containers diff --git a/gcloud/alpha/auth/login b/gcloud/alpha/auth/login index 14784c160..862f15c5c 100644 --- a/gcloud/alpha/auth/login +++ b/gcloud/alpha/auth/login @@ -63,7 +63,11 @@ EXAMPLES POSITIONAL ARGUMENTS [ACCOUNT] - User account used for authorization. + User account used for authorization. When the account specified has + valid credentials in the local credential store these credentials will + be re-used, otherwise a new credential will be fetched. If you need to + fetch a new credential for an account with valid credentials stored, + run the command with the --force flag. FLAGS --activate diff --git a/gcloud/alpha/compute/instance-templates/create b/gcloud/alpha/compute/instance-templates/create index dddccbd17..000b55f11 100644 --- a/gcloud/alpha/compute/instance-templates/create +++ b/gcloud/alpha/compute/instance-templates/create @@ -234,9 +234,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -345,36 +345,37 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --[no-]enable-nested-virtualization If set to true, enables nested virtualization for the instance. Use @@ -670,7 +671,8 @@ FLAGS stack-type Specifies whether IPv6 is enabled on the interface. STACK_TYPE must - be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY. + be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is + IPV4_ONLY. ipv6-network-tier Specifies the IPv6 network tier that will be used to configure the @@ -863,6 +865,8 @@ FLAGS The network interface can have both IPv4 and IPv6 addresses IPV4_ONLY The network interface will be assigned IPv4 addresses + IPV6_ONLY + The network interface will be assigned IPv6 addresses --subnet=SUBNET Specifies the subnet that the VM instances are a part of. If --network diff --git a/gcloud/alpha/compute/instance-templates/create-with-container b/gcloud/alpha/compute/instance-templates/create-with-container index 4a709bab4..d4af94dc7 100644 --- a/gcloud/alpha/compute/instance-templates/create-with-container +++ b/gcloud/alpha/compute/instance-templates/create-with-container @@ -319,13 +319,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -374,40 +374,41 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is diff --git a/gcloud/alpha/compute/instances/bulk/create b/gcloud/alpha/compute/instances/bulk/create index 0dc181ef0..040ad056b 100644 --- a/gcloud/alpha/compute/instances/bulk/create +++ b/gcloud/alpha/compute/instances/bulk/create @@ -256,9 +256,9 @@ OPTIONAL FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -393,9 +393,9 @@ OPTIONAL FLAGS systems. The default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index 15f90f600..83a1e67c5 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -275,9 +275,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -445,36 +445,37 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/alpha/compute/instances/create-with-container b/gcloud/alpha/compute/instances/create-with-container index d1b146e61..64ec47a3f 100644 --- a/gcloud/alpha/compute/instances/create-with-container +++ b/gcloud/alpha/compute/instances/create-with-container @@ -326,13 +326,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -381,40 +381,41 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/alpha/compute/networks/subnets/create b/gcloud/alpha/compute/networks/subnets/create index 5694622da..89ed7b302 100644 --- a/gcloud/alpha/compute/networks/subnets/create +++ b/gcloud/alpha/compute/networks/subnets/create @@ -173,19 +173,14 @@ OPTIONAL FLAGS --reserved-internal-range=RESERVED_INTERNAL_RANGE If set, the primary IP range of the subnetwork will be associated with - the given InternalRange resource. - - If --range is set, the subnetwork will only use the given IP range. It - has to be contained by the IP range defined by the InternalRange - resource. - - For example, --range=10.0.0.0/24 --reserved-internal-range + the given internal range resource. If --range is set, the subnetwork + will only use the given IP range, which must be contained by the IP + range defined by the internal range resource. For example, + --range=10.0.0.0/24 --reserved-internal-range //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE - If --range is not set, the subnetwork will use the entire IP range - defined by the InternalRange resource. - - For example, --reserved-internal-range + defined by the internal range resource. For example, + --reserved-internal-range //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE --role=ROLE @@ -208,15 +203,12 @@ OPTIONAL FLAGS ◆ RANGE - IP range in CIDR format. --secondary-range-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] - Adds secondary IP ranges that are associated with InternalRange - resources. - - For example, --secondary-range-with-reserved-internal-range + Adds secondary IP ranges that are associated with internal range + resources. For example, --secondary-range-with-reserved-internal-range range1=//networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE adds a secondary range with the reserved internal range resource. - ◆ RANGE_NAME - Name of the secondary range. - ◆ INTERNAL_RANGE_URL - URL of an InternalRange resource. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. --stack-type=STACK_TYPE The stack type for this subnet. Determines if IPv6 is enabled on the diff --git a/gcloud/alpha/compute/networks/subnets/update b/gcloud/alpha/compute/networks/subnets/update index 12d94979d..ba960a13c 100644 --- a/gcloud/alpha/compute/networks/subnets/update +++ b/gcloud/alpha/compute/networks/subnets/update @@ -40,7 +40,7 @@ POSITIONAL ARGUMENTS FLAGS --add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] - Adds secondary IP ranges that are associated with InternalRange + Adds secondary IP ranges that are associated with internal range resources. For example, --add-secondary-ranges-with-reserved-internal-range @@ -48,7 +48,7 @@ FLAGS adds a secondary range with the reserved internal range resource. ◆ RANGE_NAME - Name of the secondary range. - ◆ INTERNAL_RANGE_URL - URL of an InternalRange resource. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. --aggregation-interval=AGGREGATION_INTERVAL Can only be specified if VPC Flow Logs for this subnetwork is enabled. diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create index c97d22e2c..807184006 100644 --- a/gcloud/alpha/compute/queued-resources/create +++ b/gcloud/alpha/compute/queued-resources/create @@ -240,9 +240,9 @@ OPTIONAL FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -373,9 +373,9 @@ OPTIONAL FLAGS systems. The default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/alpha/compute/routes/create b/gcloud/alpha/compute/routes/create index a0b9a04cc..7bd137a27 100644 --- a/gcloud/alpha/compute/routes/create +++ b/gcloud/alpha/compute/routes/create @@ -73,8 +73,7 @@ REQUIRED FLAGS must be INTERNAL. You can use any --destination-range that doesn't exactly match the destination of a subnet route and isn't more specific (has a longer subnet mask) than the destination of a subnet - route. Also, the forwarding rule's IP address can't be in the - --destination-range. For more information, see + route. For more information, see https://cloud.google.com/load-balancing/docs/internal/ilb-next-hop-overview#destination_range. --next-hop-instance=NEXT_HOP_INSTANCE diff --git a/gcloud/alpha/config/get b/gcloud/alpha/config/get index 6de008783..265fe9215 100644 --- a/gcloud/alpha/config/get +++ b/gcloud/alpha/config/get @@ -216,6 +216,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1120,6 +1124,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/alpha/config/help b/gcloud/alpha/config/help index 629853b45..b707e33ef 100644 --- a/gcloud/alpha/config/help +++ b/gcloud/alpha/config/help @@ -248,6 +248,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1152,6 +1156,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/alpha/config/list b/gcloud/alpha/config/list index 806142d80..bfd71bf59 100644 --- a/gcloud/alpha/config/list +++ b/gcloud/alpha/config/list @@ -260,6 +260,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1164,6 +1168,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/alpha/config/set b/gcloud/alpha/config/set index eef7450cf..4a41243a1 100644 --- a/gcloud/alpha/config/set +++ b/gcloud/alpha/config/set @@ -263,6 +263,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1167,6 +1171,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/alpha/config/unset b/gcloud/alpha/config/unset index d740a2e35..6e2a78a37 100644 --- a/gcloud/alpha/config/unset +++ b/gcloud/alpha/config/unset @@ -224,6 +224,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1128,6 +1132,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/alpha/container/binauthz/attestations/create b/gcloud/alpha/container/binauthz/attestations/create index d422b0a36..a9d8c0052 100644 --- a/gcloud/alpha/container/binauthz/attestations/create +++ b/gcloud/alpha/container/binauthz/attestations/create @@ -22,8 +22,8 @@ EXAMPLES $ gcloud alpha container binauthz attestations create \ --project=my_proj \ - --artifact-url='gcr.io/example-project/example-image@sha256:abcd\ - ' --attestor=projects/foo/attestors/bar \ + --artifact-url=gcr.io/example-project/\ + example-image@sha256:abcd --attestor=projects/foo/attestors/bar \ --signature-file=signed_artifact_attestation.pgp.sig \ --public-key-id=AAAA0000000000000000FFFFFFFFFFFFFFFFFFFF diff --git a/gcloud/alpha/container/binauthz/attestations/sign-and-create b/gcloud/alpha/container/binauthz/attestations/sign-and-create index b1bb00f96..4c410831e 100644 --- a/gcloud/alpha/container/binauthz/attestations/sign-and-create +++ b/gcloud/alpha/container/binauthz/attestations/sign-and-create @@ -5,7 +5,6 @@ NAME SYNOPSIS gcloud alpha container binauthz attestations sign-and-create --artifact-url=ARTIFACT_URL - (--attestor=ATTESTOR : --attestor-project=ATTESTOR_PROJECT) (--keyversion=KEYVERSION : --keyversion-key=KEYVERSION_KEY --keyversion-keyring=KEYVERSION_KEYRING --keyversion-location=KEYVERSION_LOCATION @@ -13,8 +12,10 @@ SYNOPSIS [--dsse-type=DSSE_TYPE; default="application/vnd.dev.cosign.simplesigning.v1+json"] [--pae-encode-payload] - [--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE] [--validate] - [GCLOUD_WIDE_FLAG ...] + [--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE] + [[--note=NOTE : --note-project=NOTE_PROJECT] + | --validate [--attestor=ATTESTOR + : --attestor-project=ATTESTOR_PROJECT]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command signs and creates a Binary Authorization attestation @@ -35,40 +36,23 @@ EXAMPLES --keyversion-location=us-west1 --keyversion-keyring=aring \ --keyversion-key=akey --keyversion=1 + To sign and create an attestation in the project "my_proj" in note "bar" + with the key + "projects/foo/locations/us-west1/keyRings/aring/cryptoKeys/akey/cryptoKeyVersions/1", + run: + + $ gcloud alpha container binauthz attestations sign-and-create \ + --project=my_proj \ + --artifact-url='gcr.io/example-project/example-image@sha256:abcd\ + ' --note=projects/my_proj/notes/bar --keyversion-project=foo \ + --keyversion-location=us-west1 --keyversion-keyring=aring \ + --keyversion-key=akey --keyversion=1 + REQUIRED FLAGS --artifact-url=ARTIFACT_URL Container URL. May be in the gcr.io/repository/image format, or may optionally contain the http or https scheme - Attestor resource - The Attestor whose Container Analysis Note will be - used to host the created attestation. In order to successfully attach the - attestation, the active gcloud account (core/account) must be able to read - this attestor and must have the containeranalysis.notes.attachOccurrence - permission for the Attestor's underlying Note resource (usually via the - containeranalysis.notes.attacher role). The arguments in this group can be - used to specify the attributes of this resource. - - This must be specified. - - --attestor=ATTESTOR - ID of the attestor or fully qualified identifier for the attestor. - - To set the name attribute: - ▸ provide the argument --attestor on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --attestor-project=ATTESTOR_PROJECT - Project ID of the Google Cloud project for the attestor. - - To set the project attribute: - ▸ provide the argument --attestor on the command line with a fully - specified name; - ▸ provide the argument --attestor-project on the command line; - ▸ provide the argument --project on the command line; - ▸ set the property core/project. - CryptoKeyVersion resource - The Cloud KMS (Key Management Service) CryptoKeyVersion to use to sign the attestation payload. The arguments in this group can be used to specify the attributes of this resource. @@ -135,9 +119,63 @@ OPTIONAL FLAGS This parameter is only necessary if the --public-key-id-override flag was provided when this KMS key was added to the Attestor. - --validate - Whether to validate that the Attestation can be verified by the - provided Attestor. + At most one of these can be specified: + + Note resource - The Container Analysis Note which will be used to host + the created attestation. In order to successfully attach the + attestation, the active gcloud account (core/account) must have the + containeranalysis.notes.attachOccurrence permission for the Note + (usually via the containeranalysis.notes.attacher role). The arguments + in this group can be used to specify the attributes of this resource. + + --note=NOTE + ID of the note or fully qualified identifier for the note. + + To set the note attribute: + ▫ provide the argument --note on the command line. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --note-project=NOTE_PROJECT + The Container Analysis project for the note. + + To set the project attribute: + ▫ provide the argument --note on the command line with a fully + specified name; + ▫ provide the argument --note-project on the command line. + + --validate + Whether to validate that the Attestation can be verified by the + provided Attestor. + + Attestor resource - The Attestor whose Container Analysis Note will be + used to host the created attestation. In order to successfully attach + the attestation, the active gcloud account (core/account) must be able + to read this attestor and must have the + containeranalysis.notes.attachOccurrence permission for the Attestor's + underlying Note resource (usually via the + containeranalysis.notes.attacher role). The arguments in this group can + be used to specify the attributes of this resource. + + --attestor=ATTESTOR + ID of the attestor or fully qualified identifier for the attestor. + + To set the name attribute: + ▫ provide the argument --attestor on the command line. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --attestor-project=ATTESTOR_PROJECT + Project ID of the Google Cloud project for the attestor. + + To set the project attribute: + ▫ provide the argument --attestor on the command line with a + fully specified name; + ▫ provide the argument --attestor-project on the command line; + ▫ provide the argument --project on the command line; + ▫ set the property core/project. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/mesh/debug/help b/gcloud/alpha/container/fleet/mesh/debug/help deleted file mode 100644 index abe33acc2..000000000 --- a/gcloud/alpha/container/fleet/mesh/debug/help +++ /dev/null @@ -1,20 +0,0 @@ -NAME - gcloud alpha container fleet mesh debug - debug Service Mesh memberships - -SYNOPSIS - gcloud alpha container fleet mesh debug COMMAND [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Debug Service Mesh memberships. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --help. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/container/fleet/mesh/help b/gcloud/alpha/container/fleet/mesh/help index 7860400be..7476d8a0f 100644 --- a/gcloud/alpha/container/fleet/mesh/help +++ b/gcloud/alpha/container/fleet/mesh/help @@ -12,12 +12,6 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. -GROUPS - GROUP is one of the following: - - debug - (ALPHA) Debug Service Mesh memberships. - COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/container/hub/mesh/debug/help b/gcloud/alpha/container/hub/mesh/debug/help deleted file mode 100644 index 6335c68d7..000000000 --- a/gcloud/alpha/container/hub/mesh/debug/help +++ /dev/null @@ -1,20 +0,0 @@ -NAME - gcloud alpha container hub mesh debug - debug Service Mesh memberships - -SYNOPSIS - gcloud alpha container hub mesh debug COMMAND [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Debug Service Mesh memberships. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --help. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/container/hub/mesh/help b/gcloud/alpha/container/hub/mesh/help index 02cd7face..4d762284c 100644 --- a/gcloud/alpha/container/hub/mesh/help +++ b/gcloud/alpha/container/hub/mesh/help @@ -12,12 +12,6 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. -GROUPS - GROUP is one of the following: - - debug - (ALPHA) Debug Service Mesh memberships. - COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/dataproc/clusters/create b/gcloud/alpha/dataproc/clusters/create index 637a6868e..df49b3dc8 100644 --- a/gcloud/alpha/dataproc/clusters/create +++ b/gcloud/alpha/dataproc/clusters/create @@ -2,9 +2,9 @@ NAME gcloud alpha dataproc clusters create - create a cluster SYNOPSIS - gcloud alpha dataproc clusters create (CLUSTER : --region=REGION) - [--no-address] [--async] [--autoscaling-policy=AUTOSCALING_POLICY] - [--bucket=BUCKET] [--dataproc-metastore=DATAPROC_METASTORE] + gcloud alpha dataproc clusters create (CLUSTER : --region=REGION) [--async] + [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] + [--dataproc-metastore=DATAPROC_METASTORE] [--driver-pool-accelerator=[type=TYPE,[count=COUNT],...]] [--driver-pool-boot-disk-size=DRIVER_POOL_BOOT_DISK_SIZE] [--driver-pool-boot-disk-type=DRIVER_POOL_BOOT_DISK_TYPE] @@ -62,6 +62,7 @@ SYNOPSIS --kerberos-root-principal-password-uri=KERBEROS_ROOT_PRINCIPAL_PASSWORD_URI [--kerberos-kms-key=KERBEROS_KMS_KEY : --kerberos-kms-key-keyring=KERBEROS_KMS_KEY_KEYRING --kerberos-kms-key-location=KERBEROS_KMS_KEY_LOCATION --kerberos-kms-key-project=KERBEROS_KMS_KEY_PROJECT]] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -113,17 +114,6 @@ POSITIONAL ARGUMENTS ▸ set the property dataproc/region. FLAGS - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --async Return immediately, without waiting for the operation in progress to complete. @@ -806,6 +796,31 @@ FLAGS ▸ provide the argument --kms-project on the command line; ▸ set the property core/project. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster b/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster index 3fc6479d5..116b8b337 100644 --- a/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster @@ -4,10 +4,9 @@ NAME SYNOPSIS gcloud alpha dataproc workflow-templates set-managed-cluster - (TEMPLATE : --region=REGION) [--no-address] - [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] - [--cluster-name=CLUSTER_NAME] [--dataproc-metastore=DATAPROC_METASTORE] - [--enable-component-gateway] + (TEMPLATE : --region=REGION) [--autoscaling-policy=AUTOSCALING_POLICY] + [--bucket=BUCKET] [--cluster-name=CLUSTER_NAME] + [--dataproc-metastore=DATAPROC_METASTORE] [--enable-component-gateway] [--initialization-action-timeout=TIMEOUT; default="10m"] [--initialization-actions=CLOUD_STORAGE_URI,[...]] [--labels=[KEY=VALUE,...]] @@ -51,6 +50,7 @@ SYNOPSIS --tags=TAG,[TAG,...] --network=NETWORK | --subnet=SUBNET --reservation=RESERVATION --reservation-affinity=RESERVATION_AFFINITY; default="any"] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -103,17 +103,6 @@ POSITIONAL ARGUMENTS ▸ set the property dataproc/region. FLAGS - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --autoscaling-policy=AUTOSCALING_POLICY ID of the autoscaling policy or fully qualified identifier for the autoscaling policy. @@ -683,6 +672,31 @@ FLAGS The type of reservation for the instance. RESERVATION_AFFINITY must be one of: any, none, specific. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/alpha/edge-cloud/container/clusters/update b/gcloud/alpha/edge-cloud/container/clusters/update index e02626c89..49286f0b3 100644 --- a/gcloud/alpha/edge-cloud/container/clusters/update +++ b/gcloud/alpha/edge-cloud/container/clusters/update @@ -5,6 +5,7 @@ NAME SYNOPSIS gcloud alpha edge-cloud container clusters update (CLUSTER : --location=LOCATION) [--async] + [--release-channel=RELEASE_CHANNEL] [--clear-maintenance-window | --maintenance-window-end=MAINTENANCE_WINDOW_END --maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE @@ -59,6 +60,14 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --release-channel=RELEASE_CHANNEL + Release channel a cluster is subscribed to. It supports two values, + NONE and REGULAR. NONE is used to opt out of any release channel. + Clusters subscribed to the REGULAR channel will be automatically + upgraded to versions that are considered GA quality, and cannot be + manually upgraded. RELEASE_CHANNEL must be one of: none, regular, + release-channel-unspecified. + At most one of these can be specified: --clear-maintenance-window diff --git a/gcloud/alpha/functions/deploy b/gcloud/alpha/functions/deploy index b11e42a43..e6f19399b 100644 --- a/gcloud/alpha/functions/deploy +++ b/gcloud/alpha/functions/deploy @@ -124,7 +124,7 @@ FLAGS --docker-registry=DOCKER_REGISTRY Docker Registry to use for storing the function's Docker images. The - option container-registry is used by default. + option artifact-registry is used by default. Warning: Artifact Registry and Container Registry have different image storage costs. For more details, please see diff --git a/gcloud/alpha/migration/vms/target-projects/list b/gcloud/alpha/migration/vms/target-projects/list index 1c9578ba2..f3ff51e6b 100644 --- a/gcloud/alpha/migration/vms/target-projects/list +++ b/gcloud/alpha/migration/vms/target-projects/list @@ -2,9 +2,9 @@ NAME gcloud alpha migration vms target-projects list - list Target Projects SYNOPSIS - gcloud alpha migration vms target-projects list [--location=LOCATION] - [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] - [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + gcloud alpha migration vms target-projects list [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha migration vms target-projects list lists Target @@ -17,30 +17,6 @@ EXAMPLES To list the Target Project resources in the global location in the default project, run: $ gcloud alpha migration vms target-projects list -FLAGS - Location resource - The compute/region of the Image Import. To get a list - of the available regions, run gcloud compute regions list command. If not - specified, the value of the [compute/zone] property in the current gcloud - configuration is used. This represents a Cloud resource. (NOTE) Some - attributes are not given arguments in this group but can be set in other - ways. - - To set the project attribute: - ◆ provide the argument --location on the command line with a fully - specified name; - ◆ set the property compute/region with a fully specified name; - ◆ use default global location with a fully specified name; - ◆ set the property core/project; - ◆ provide the argument --project on the command line. - - --location=LOCATION - ID of the location or fully qualified identifier for the location. - - To set the location attribute: - ▸ provide the argument --location on the command line; - ▸ set the property compute/region; - ▸ use default global location . - LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. diff --git a/gcloud/alpha/ml/speech/recognize b/gcloud/alpha/ml/speech/recognize index 0388248de..e1e30a146 100644 --- a/gcloud/alpha/ml/speech/recognize +++ b/gcloud/alpha/ml/speech/recognize @@ -141,6 +141,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/alpha/ml/speech/recognize-long-running b/gcloud/alpha/ml/speech/recognize-long-running index 658eebe62..41fb534fa 100644 --- a/gcloud/alpha/ml/speech/recognize-long-running +++ b/gcloud/alpha/ml/speech/recognize-long-running @@ -150,6 +150,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/alpha/pubsub/topics/create b/gcloud/alpha/pubsub/topics/create index 780d7b255..5ea95d8b5 100644 --- a/gcloud/alpha/pubsub/topics/create +++ b/gcloud/alpha/pubsub/topics/create @@ -107,7 +107,9 @@ FLAGS ▫ provide the argument --project on the command line; ▫ set the property core/project. - Options for explicitly specifying the message storage policy for a topic. + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for a + topic. --message-storage-policy-allowed-regions=[REGION,...] A list of one or more Cloud regions where messages are allowed to be @@ -118,7 +120,8 @@ FLAGS --message-storage-policy-enforce-in-transit Whether or not to enforce in-transit guarantees for this topic using - the allowed regions. + the allowed regions. This ensures that publishing, pulling, and push + delivery are only handled in allowed Cloud regions. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have diff --git a/gcloud/alpha/pubsub/topics/update b/gcloud/alpha/pubsub/topics/update index e3fa98f12..4ffef78b0 100644 --- a/gcloud/alpha/pubsub/topics/update +++ b/gcloud/alpha/pubsub/topics/update @@ -197,8 +197,9 @@ FLAGS at rest, based on your organization's "Resource Location Restriction" policy. - Options for explicitly specifying the message storage policy for a - topic. These fields can be set only if the + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for + a topic. These fields can be set only if the --recompute-message-storage-policy flag is not set. --message-storage-policy-allowed-regions=[REGION,...] @@ -210,7 +211,8 @@ FLAGS --message-storage-policy-enforce-in-transit Whether or not to enforce in-transit guarantees for this topic - using the allowed regions. + using the allowed regions. This ensures that publishing, pulling, + and push delivery are only handled in allowed Cloud regions. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have diff --git a/gcloud/alpha/run/integrations/create b/gcloud/alpha/run/integrations/create index 3c9195d81..d38cf9fac 100644 --- a/gcloud/alpha/run/integrations/create +++ b/gcloud/alpha/run/integrations/create @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha run integrations create --type=TYPE [--name=NAME] [--parameters=[PARAMETER=VALUE,...]] [--region=REGION] - [--service=SERVICE] [GCLOUD_WIDE_FLAG ...] + [--service=SERVICE] [--service-account=SERVICE_ACCOUNT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a Cloud Run Integration. @@ -42,6 +43,9 @@ OPTIONAL FLAGS Name of the Cloud Run service to attach to the integration. It is required for some integrations. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/run/integrations/delete b/gcloud/alpha/run/integrations/delete index 7fc1808d6..517d3a6e6 100644 --- a/gcloud/alpha/run/integrations/delete +++ b/gcloud/alpha/run/integrations/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha run integrations delete NAME [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--service-account=SERVICE_ACCOUNT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a Cloud Run Integration and its associated resources. @@ -23,6 +23,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/run/integrations/update b/gcloud/alpha/run/integrations/update index dee4aebeb..354506f2a 100644 --- a/gcloud/alpha/run/integrations/update +++ b/gcloud/alpha/run/integrations/update @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud alpha run integrations update NAME [--parameters=[PARAMETER=VALUE,...]] [--region=REGION] + [--service-account=SERVICE_ACCOUNT] [--add-service=ADD_SERVICE | --remove-service=REMOVE_SERVICE] [GCLOUD_WIDE_FLAG ...] @@ -30,6 +31,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + At most one of these can be specified: --add-service=ADD_SERVICE diff --git a/gcloud/alpha/scc/help b/gcloud/alpha/scc/help index 49cea150f..d16e846f3 100644 --- a/gcloud/alpha/scc/help +++ b/gcloud/alpha/scc/help @@ -37,15 +37,15 @@ GROUPS posture-deployments (ALPHA) Manage Cloud Security Command Center (SCC) posture deployments. + posture-operations + (ALPHA) Manage Cloud Security Command Center (SCC) posture operations. + posture-templates (ALPHA) Manage Cloud Security Command Center (SCC) posture templates. postures (ALPHA) Manage Cloud Security Command Center (SCC) postures. - securityposture-operations - (ALPHA) Manage Cloud Security Command Center (SCC) operations. - settings (ALPHA) Manage Cloud SCC (Security Command Center) settings. diff --git a/gcloud/alpha/scc/posture-deployments/create b/gcloud/alpha/scc/posture-deployments/create index 5b3fe9a77..1be3fdbda 100644 --- a/gcloud/alpha/scc/posture-deployments/create +++ b/gcloud/alpha/scc/posture-deployments/create @@ -20,15 +20,18 @@ DESCRIPTION EXAMPLES Create a posture deployment named posture-deployment-foo-1 within parent - organizations/123/locations/global(i.e. a posture-deployment in - organization 123, location global, with id posture-deployment-foo-1, which - deploys posture organizations/123/locations/foo-posture with revision-id - foo-posture-revision-id): + organizations/123/locations/global on resource folders/456 (i.e. a + posture-deployment in organization 123, location global, with id + posture-deployment-foo-1, which deploys posture + organizations/123/locations/foo-posture with revision-id + foo-posture-revision-id on folders/456): $ gcloud alpha scc posture-deployments create \ - organizations/123/locations/global posture-deployment-foo-1 \ - --posture-name=organizations/123/locations/global/foo-posture \ - --posture-revision-id=foo-posture-revision-id + organizations/123/locations/global/postureDeployments/\ + posture-deployment-foo-1 \ + --posture-name=organizations/123/locations/global/foo-posture \ + --posture-revision-id=foo-posture-revision-id \ + --target-resource=projects/456 POSITIONAL ARGUMENTS Posture deployment resource - The name of the posture deployment to be @@ -68,7 +71,7 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --posture-name=POSTURE_NAME Posture that needs to be deployed. Format: - organizations//locations/global/postures/ + organizations//locations//postures/ --posture-revision-id=POSTURE_REVISION_ID Posture revision that needs to be deployed. diff --git a/gcloud/alpha/scc/posture-deployments/list b/gcloud/alpha/scc/posture-deployments/list index 8ffd11ce7..29f4b81e9 100644 --- a/gcloud/alpha/scc/posture-deployments/list +++ b/gcloud/alpha/scc/posture-deployments/list @@ -13,7 +13,7 @@ DESCRIPTION EXAMPLES To list Cloud Security Command Center posture deployments for organization - 123, run: + 123 in the global location, run: $ gcloud alpha scc posture-deployments list \ organizations/123/locations/global diff --git a/gcloud/alpha/scc/posture-deployments/update b/gcloud/alpha/scc/posture-deployments/update index a00866121..2b87d2b19 100644 --- a/gcloud/alpha/scc/posture-deployments/update +++ b/gcloud/alpha/scc/posture-deployments/update @@ -16,9 +16,11 @@ DESCRIPTION Fields specified in update-mask flag are updated. Updatable fields are description and posture_name with posture_revision-id. The target_resource for a posture deployment cannot be updated. The posture deployment to be - updated should be in ACTIVE State. If posture details of posture deployment - need to be updated, then the desired posture needs to be in ACTIVE state. - LRO operation ID is returned as the response of the command. + updated should be in ACTIVE State. An empty or "" update-mask implies that + posture-id and posture-revision-id are to be updated. If posture details of + posture deployment need to be updated, then the desired posture needs to be + in ACTIVE state. LRO operation ID is returned as the response of the + command. EXAMPLES Update the description of the posture deployment named @@ -36,6 +38,12 @@ EXAMPLES --update-mask=posture_id,posture_revision-id \ --posture-id=foo-posture --posture-revision-id=abcdefgh + Update posture deployment named `foo-posture-deployment` with the posture named `foo-posture` and revision_id `abcdefgh` in the organization `organizations/123/locations/global`: + $ gcloud alpha scc posture-deployments update \ + organizations/123/locations/global/postureDeployments/\ + foo-posture-deployment --posture-id=foo-posture \ + --posture-revision-id=abcdefgh + POSITIONAL ARGUMENTS Posture deployment resource - The posture deployment to update. For example diff --git a/gcloud/alpha/scc/securityposture-operations/describe b/gcloud/alpha/scc/posture-operations/describe similarity index 64% rename from gcloud/alpha/scc/securityposture-operations/describe rename to gcloud/alpha/scc/posture-operations/describe index 9d9d3c55f..6f9a519a7 100644 --- a/gcloud/alpha/scc/securityposture-operations/describe +++ b/gcloud/alpha/scc/posture-operations/describe @@ -1,20 +1,21 @@ NAME - gcloud alpha scc securityposture-operations describe - describe a SCC - Security Posture's long running scan operation + gcloud alpha scc posture-operations describe - describe a Cloud Security + Command Center posture long running operation SYNOPSIS - gcloud alpha scc securityposture-operations describe OPERATION_NAME + gcloud alpha scc posture-operations describe OPERATION_NAME [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Describe a SCC Security Posture's long running scan operation. + (ALPHA) Describe a Cloud Security Command Center (SCC) posture long running + operation. EXAMPLES - Return long running scan operation status for operation id - (operation-1694515698847-605272e4bcd7c-f93dade6-067467ae) for parent - organizations/123/locations/global + To return long running operation status for operation + (operation-1694515698847-605272e4bcd7c-f93dade6-067467ae) of parent + organizations/123/locations/global, run: - $ gcloud alpha scc securityposture-operations describe \ + $ gcloud alpha scc posture-operations describe \ organizations/123/locations/global/operations/\ operation-1694515698847-605272e4bcd7c-f93dade6-067467ae @@ -40,5 +41,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-operations describe diff --git a/gcloud/alpha/scc/posture-operations/help b/gcloud/alpha/scc/posture-operations/help new file mode 100644 index 000000000..3145b1b2f --- /dev/null +++ b/gcloud/alpha/scc/posture-operations/help @@ -0,0 +1,30 @@ +NAME + gcloud alpha scc posture-operations - manage Cloud Security Command Center + posture operations + +SYNOPSIS + gcloud alpha scc posture-operations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Cloud Security Command Center (SCC) posture operations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Describe a Cloud Security Command Center (SCC) posture long + running operation. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud scc posture-operations + diff --git a/gcloud/alpha/scc/posture-templates/describe b/gcloud/alpha/scc/posture-templates/describe index ba707b9a7..d38363758 100644 --- a/gcloud/alpha/scc/posture-templates/describe +++ b/gcloud/alpha/scc/posture-templates/describe @@ -30,7 +30,7 @@ EXAMPLES secure_by_default --revision-id=v1.0.0 POSITIONAL ARGUMENTS - Posture template resource - The posture template to describe. For example + Posture template resource - Posture template to be described. For example organizations//locations//postureTemplates/. The arguments in this group can be used to specify the attributes of this resource. @@ -65,7 +65,7 @@ POSITIONAL ARGUMENTS FLAGS --revision-id=REVISION_ID - ID of the specific posture template revision to describe. If not + ID of the specific posture template revision to be described. If not specified, latest revision is described. GCLOUD WIDE FLAGS diff --git a/gcloud/alpha/scc/postures/create b/gcloud/alpha/scc/postures/create index 6580489ce..8fae1af1d 100644 --- a/gcloud/alpha/scc/postures/create +++ b/gcloud/alpha/scc/postures/create @@ -9,9 +9,9 @@ SYNOPSIS DESCRIPTION (ALPHA) Create a Cloud Security Command Center (SCC) posture. First - argument is the parent of the posture to be created. Second argument is the - name of the posture to be created. The posture details are provided in YAML - file. The file path is mentioned in posture-from-file flag. + argument consists of the parent and name of the posture to be created. The + posture details are provided in YAML file. The file path is mentioned in + --posture-from-file flag. Created posture is returned as the response of the command. LRO operation ID is printed as the standard output. @@ -19,10 +19,10 @@ DESCRIPTION EXAMPLES Create a posture named posture-foo-1 within parent organizations/123/locations/global(i.e. a posture in organization 123, - location global, with id posture-foo-1): + location global, with ID posture-foo-1): $ gcloud alpha scc postures create \ - organizations/123/locations/global posture-foo-1 \ + organizations/123/locations/global/postures/posture-foo-1 \ --posture-from-file=posture.yaml POSITIONAL ARGUMENTS diff --git a/gcloud/alpha/scc/postures/delete b/gcloud/alpha/scc/postures/delete index 00f2a47fb..fbe03a134 100644 --- a/gcloud/alpha/scc/postures/delete +++ b/gcloud/alpha/scc/postures/delete @@ -10,7 +10,7 @@ SYNOPSIS DESCRIPTION (ALPHA) Delete a Cloud Security Command Center (SCC) posture. - Posture with all it's revisions is deleted. Deletion won't be allowed in + Posture with all its revisions is deleted. Deletion won't be allowed in case any of the versions of the posture is deployed on a workload. ETAG can be provided as an optional flag. @@ -32,7 +32,7 @@ EXAMPLES --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU POSITIONAL ARGUMENTS - Posture resource - The posture to delete. For example + Posture resource - The name of the posture to be deleted. For example organizations//locations//postures/. The arguments in this group can be used to specify the attributes of this resource. diff --git a/gcloud/alpha/scc/postures/describe b/gcloud/alpha/scc/postures/describe index b96f03d28..049e0a529 100644 --- a/gcloud/alpha/scc/postures/describe +++ b/gcloud/alpha/scc/postures/describe @@ -29,7 +29,7 @@ EXAMPLES --revision-id=abcdefg POSITIONAL ARGUMENTS - Posture resource - The posture to describe. For example + Posture resource - The posture to be described. For example organizations//locations//postures/. The arguments in this group can be used to specify the attributes of this resource. @@ -63,7 +63,7 @@ POSITIONAL ARGUMENTS FLAGS --revision-id=REVISION_ID - ID of the specific posture revision to describe. If not specified, + ID of the specific posture revision to described. If not specified, latest revision is described. GCLOUD WIDE FLAGS diff --git a/gcloud/alpha/scc/postures/extract b/gcloud/alpha/scc/postures/extract index cadf9b2df..5fd96ef9e 100644 --- a/gcloud/alpha/scc/postures/extract +++ b/gcloud/alpha/scc/postures/extract @@ -9,10 +9,9 @@ SYNOPSIS DESCRIPTION (ALPHA) Extract a Cloud Security Command Center (SCC) posture from a - workload. First argument is the parent of the posture to be created. Second - argument is the name of the posture to be created. The workload from where - the organization policies need to be extracted is provided via 'workload' - flag. + workload. First argument is the parent and name of the posture to be + created. The workload from where the organization policies need to be + extracted is provided via '--workload' flag. Extracted posture is returned as the response of the command. LRO operation ID is printed as the standard output. @@ -23,7 +22,7 @@ EXAMPLES location global, with id posture-foo-1) from workload projects/456: $ gcloud alpha scc postures extract \ - organizations/123/locations/global posture-foo-1 \ + organizations/123/locations/global/postures/posture-foo-1 \ --workload=projects/456 POSITIONAL ARGUMENTS diff --git a/gcloud/alpha/scc/postures/update b/gcloud/alpha/scc/postures/update index 1d3c915fa..bb08a4c3a 100644 --- a/gcloud/alpha/scc/postures/update +++ b/gcloud/alpha/scc/postures/update @@ -72,7 +72,7 @@ EXAMPLES POSITIONAL ARGUMENTS Posture resource - Arguments and flags that specify the Posture instance - to update. The arguments in this group can be used to specify the + to be updated. The arguments in this group can be used to specify the attributes of this resource. This must be specified. diff --git a/gcloud/alpha/scc/securityposture-operations/help b/gcloud/alpha/scc/securityposture-operations/help deleted file mode 100644 index efcdc1156..000000000 --- a/gcloud/alpha/scc/securityposture-operations/help +++ /dev/null @@ -1,27 +0,0 @@ -NAME - gcloud alpha scc securityposture-operations - manage Cloud Security Command - Center operations - -SYNOPSIS - gcloud alpha scc securityposture-operations COMMAND [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Manage Cloud Security Command Center (SCC) operations. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --help. - - Run $ gcloud help for details. - -COMMANDS - COMMAND is one of the following: - - describe - (ALPHA) Describe a SCC Security Posture's long running scan operation. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/sql/export/sql b/gcloud/alpha/sql/export/sql index cea73dc84..39b691977 100644 --- a/gcloud/alpha/sql/export/sql +++ b/gcloud/alpha/sql/export/sql @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud alpha sql export sql INSTANCE URI [--async] [--database=DATABASE,[DATABASE,...], -d DATABASE,[DATABASE,...]] - [--offload] [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] + [--offload] [--parallel] + [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] [--threads=THREADS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -42,11 +43,20 @@ FLAGS source instances and allows other operations to be performed while the export is in progress. + --parallel + Perform a parallel export. This flag is only applicable to MySQL and + Postgres. + --table=TABLE,[TABLE,...], -t TABLE,[TABLE,...] Tables to export from the specified database. If you specify tables, specify one and only one database. For PostgreSQL instances, only one table can be exported at a time. + --threads=THREADS + Specifies the number of threads to use for the parallel export. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/sql/import/sql b/gcloud/alpha/sql/import/sql index b82c82dfb..057b4f715 100644 --- a/gcloud/alpha/sql/import/sql +++ b/gcloud/alpha/sql/import/sql @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha sql import sql INSTANCE URI [--async] - [--database=DATABASE, -d DATABASE] [--user=USER] [GCLOUD_WIDE_FLAG ...] + [--database=DATABASE, -d DATABASE] [--parallel] [--threads=THREADS] + [--user=USER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha sql import sql imports data into a Cloud SQL instance @@ -45,6 +46,15 @@ FLAGS specified in the file to be imported. If your SQL dump file includes a database statement, it will override the database set in this flag. + --parallel + Perform a parallel import. This flag is only applicable to MySQL and + Postgres. + + --threads=THREADS + Specifies the number of threads to use for the parallel import. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + --user=USER PostgreSQL user for this import operation. diff --git a/gcloud/alpha/stacks/deploy b/gcloud/alpha/stacks/deploy index 57724206b..493cc8d1f 100644 --- a/gcloud/alpha/stacks/deploy +++ b/gcloud/alpha/stacks/deploy @@ -3,7 +3,8 @@ NAME specification SYNOPSIS - gcloud alpha stacks deploy FILE [--region=REGION] [GCLOUD_WIDE_FLAG ...] + gcloud alpha stacks deploy FILE [--region=REGION] + [--service-account=SERVICE_ACCOUNT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create or replace an application from a YAML specification. @@ -23,6 +24,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/stacks/resources/delete b/gcloud/alpha/stacks/resources/delete index ef261b2c8..f61e56c30 100644 --- a/gcloud/alpha/stacks/resources/delete +++ b/gcloud/alpha/stacks/resources/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha stacks resources delete NAME [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--service-account=SERVICE_ACCOUNT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a Stacks resource and its associated bindings. @@ -23,6 +23,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/asset/analyze-org-policies b/gcloud/asset/analyze-org-policies new file mode 100644 index 000000000..6b1274e6c --- /dev/null +++ b/gcloud/asset/analyze-org-policies @@ -0,0 +1,80 @@ +NAME + gcloud asset analyze-org-policies - analyze organization policies under a + scope + +SYNOPSIS + gcloud asset analyze-org-policies --constraint=CONSTRAINT --scope=SCOPE + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Analyze organization policies under a scope. + +EXAMPLES + To list 10 organization policies of a constraint in an organization, run: + + $ gcloud asset analyze-org-policies \ + --scope=organizations/YOUR_ORG_ID \ + --constraint=YOUR_CONSTRAINT_NAME --limit=10 + +REQUIRED FLAGS + --constraint=CONSTRAINT + The name of the constraint to analyze organization policies for. The + response only contains analyzed organization policies for the provided + constraint. + + Example: + + ◆ organizations/{ORGANIZATION_NUMBER}/customConstraints/{CUSTOM_CONSTRAINT_NAME} + for a user-defined custom constraint. + + --scope=SCOPE + Scope can only be an organization. The analysis is limited to the Cloud + organization policies within this scope. The caller must be granted the + cloudasset.assets.searchAllResources permission on the desired scope. + + The allowed values are: + + ◆ organizations/{ORGANIZATION_NUMBER} (e.g. organizations/123456) + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha asset analyze-org-policies + + $ gcloud beta asset analyze-org-policies + diff --git a/gcloud/asset/analyze-org-policy-governed-assets b/gcloud/asset/analyze-org-policy-governed-assets new file mode 100644 index 000000000..fa5cafb97 --- /dev/null +++ b/gcloud/asset/analyze-org-policy-governed-assets @@ -0,0 +1,81 @@ +NAME + gcloud asset analyze-org-policy-governed-assets - analyze organization + policies governed assets under a scope + +SYNOPSIS + gcloud asset analyze-org-policy-governed-assets --constraint=CONSTRAINT + --scope=SCOPE [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Analyze organization policies governed assets under a scope. + +EXAMPLES + To list 10 assets governed by a constraint in an organization, run: + + $ gcloud asset analyze-org-policy-governed-assets \ + --scope=organizations/YOUR_ORG_ID \ + --constraint=YOUR_CONSTRAINT_NAME --limit=10 + +REQUIRED FLAGS + --constraint=CONSTRAINT + The name of the constraint to analyze organization policies for. The + response only contains analyzed organization policies for the provided + constraint. + + Examples: + + ◆ organizations/{ORGANIZATION_NUMBER}/customConstraints/{CUSTOM_CONSTRAINT_NAME} + for a user-defined custom constraint. + ◆ organizations/{ORGANIZATION_NUMBER}/constraints/{CANNED_CONSTRAINT_NAME} + for a gcp-service-defined canned constraint. + + --scope=SCOPE + Scope can only be an organization. The analysis is limited to the Cloud + organization policies and assets within this scope. The caller must be + granted the cloudasset.assets.searchAllResources and + cloudasset.assets.searchAllIamPolicies permission on the desired scope. + + The allowed values are: + + ◆ organizations/{ORGANIZATION_NUMBER} (e.g. organizations/123456) + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta asset analyze-org-policy-governed-assets + diff --git a/gcloud/asset/analyze-org-policy-governed-containers b/gcloud/asset/analyze-org-policy-governed-containers new file mode 100644 index 000000000..2d1526da5 --- /dev/null +++ b/gcloud/asset/analyze-org-policy-governed-containers @@ -0,0 +1,81 @@ +NAME + gcloud asset analyze-org-policy-governed-containers - analyze organization + policies governed containers under a scope + +SYNOPSIS + gcloud asset analyze-org-policy-governed-containers --constraint=CONSTRAINT + --scope=SCOPE [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Analyze organization policies governed containers under a scope. + +EXAMPLES + To list 10 containers governed by a constraint in an organization, run: + + $ gcloud asset analyze-org-policy-governed-containers \ + --scope=organizations/YOUR_ORG_ID \ + --constraint=YOUR_CONSTRAINT_NAME --limit=10 + +REQUIRED FLAGS + --constraint=CONSTRAINT + The name of the constraint to analyze organization policies for. The + response only contains analyzed organization policies for the provided + constraint. + + Example: + + ◆ organizations/{ORGANIZATION_NUMBER}/customConstraints/{CUSTOM_CONSTRAINT_NAME} + for a user-defined custom constraint. + + --scope=SCOPE + Scope can only be an organization. The analysis is limited to the Cloud + organization policies and containers within this scope. The caller must + be granted the cloudasset.assets.searchAllResources permission on the + desired scope. + + The allowed values are: + + ◆ organizations/{ORGANIZATION_NUMBER} (e.g. organizations/123456) + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha asset analyze-org-policy-governed-containers + + $ gcloud beta asset analyze-org-policy-governed-containers + diff --git a/gcloud/asset/help b/gcloud/asset/help index 151437d0d..44d6f822e 100644 --- a/gcloud/asset/help +++ b/gcloud/asset/help @@ -37,6 +37,15 @@ COMMANDS analyze-move Analyzes resource move. + analyze-org-policies + Analyze organization policies under a scope. + + analyze-org-policy-governed-assets + Analyze organization policies governed assets under a scope. + + analyze-org-policy-governed-containers + Analyze organization policies governed containers under a scope. + export Export the cloud assets to Google Cloud Storage/BigQuery. diff --git a/gcloud/auth/login b/gcloud/auth/login index 812d745ad..69fac3bcb 100644 --- a/gcloud/auth/login +++ b/gcloud/auth/login @@ -63,7 +63,11 @@ EXAMPLES POSITIONAL ARGUMENTS [ACCOUNT] - User account used for authorization. + User account used for authorization. When the account specified has + valid credentials in the local credential store these credentials will + be re-used, otherwise a new credential will be fetched. If you need to + fetch a new credential for an account with valid credentials stored, + run the command with the --force flag. FLAGS --activate diff --git a/gcloud/beta/asset/analyze-org-policies b/gcloud/beta/asset/analyze-org-policies index c4615ad1a..140e3d716 100644 --- a/gcloud/beta/asset/analyze-org-policies +++ b/gcloud/beta/asset/analyze-org-policies @@ -72,8 +72,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud asset analyze-org-policies $ gcloud alpha asset analyze-org-policies diff --git a/gcloud/beta/asset/analyze-org-policy-governed-assets b/gcloud/beta/asset/analyze-org-policy-governed-assets index f66778be0..03569334f 100644 --- a/gcloud/beta/asset/analyze-org-policy-governed-assets +++ b/gcloud/beta/asset/analyze-org-policy-governed-assets @@ -76,5 +76,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud asset analyze-org-policy-governed-assets diff --git a/gcloud/beta/asset/analyze-org-policy-governed-containers b/gcloud/beta/asset/analyze-org-policy-governed-containers index 7059eb813..d3d806c63 100644 --- a/gcloud/beta/asset/analyze-org-policy-governed-containers +++ b/gcloud/beta/asset/analyze-org-policy-governed-containers @@ -74,8 +74,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud asset analyze-org-policy-governed-containers $ gcloud alpha asset analyze-org-policy-governed-containers diff --git a/gcloud/beta/auth/login b/gcloud/beta/auth/login index 0fb3ad2c0..faca12aae 100644 --- a/gcloud/beta/auth/login +++ b/gcloud/beta/auth/login @@ -63,7 +63,11 @@ EXAMPLES POSITIONAL ARGUMENTS [ACCOUNT] - User account used for authorization. + User account used for authorization. When the account specified has + valid credentials in the local credential store these credentials will + be re-used, otherwise a new credential will be fetched. If you need to + fetch a new credential for an account with valid credentials stored, + run the command with the --force flag. FLAGS --activate diff --git a/gcloud/beta/compute/instance-templates/create b/gcloud/beta/compute/instance-templates/create index e475534b8..ef6d33986 100644 --- a/gcloud/beta/compute/instance-templates/create +++ b/gcloud/beta/compute/instance-templates/create @@ -226,9 +226,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -333,36 +333,37 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --[no-]enable-nested-virtualization If set to true, enables nested virtualization for the instance. Use diff --git a/gcloud/beta/compute/instance-templates/create-with-container b/gcloud/beta/compute/instance-templates/create-with-container index 4295daed1..7347bb255 100644 --- a/gcloud/beta/compute/instance-templates/create-with-container +++ b/gcloud/beta/compute/instance-templates/create-with-container @@ -311,13 +311,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -366,40 +366,41 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is diff --git a/gcloud/beta/compute/instances/bulk/create b/gcloud/beta/compute/instances/bulk/create index d4f0def92..bbc96660f 100644 --- a/gcloud/beta/compute/instances/bulk/create +++ b/gcloud/beta/compute/instances/bulk/create @@ -253,9 +253,9 @@ OPTIONAL FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -386,9 +386,9 @@ OPTIONAL FLAGS systems. The default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/beta/compute/instances/create b/gcloud/beta/compute/instances/create index b46868841..734652482 100644 --- a/gcloud/beta/compute/instances/create +++ b/gcloud/beta/compute/instances/create @@ -247,9 +247,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -379,36 +379,37 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/beta/compute/instances/create-with-container b/gcloud/beta/compute/instances/create-with-container index 0f8dd2cea..400074ad3 100644 --- a/gcloud/beta/compute/instances/create-with-container +++ b/gcloud/beta/compute/instances/create-with-container @@ -318,13 +318,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -373,40 +373,41 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/beta/compute/networks/subnets/create b/gcloud/beta/compute/networks/subnets/create index 3eb94557b..4a835ff27 100644 --- a/gcloud/beta/compute/networks/subnets/create +++ b/gcloud/beta/compute/networks/subnets/create @@ -139,19 +139,14 @@ OPTIONAL FLAGS --reserved-internal-range=RESERVED_INTERNAL_RANGE If set, the primary IP range of the subnetwork will be associated with - the given InternalRange resource. - - If --range is set, the subnetwork will only use the given IP range. It - has to be contained by the IP range defined by the InternalRange - resource. - - For example, --range=10.0.0.0/24 --reserved-internal-range + the given internal range resource. If --range is set, the subnetwork + will only use the given IP range, which must be contained by the IP + range defined by the internal range resource. For example, + --range=10.0.0.0/24 --reserved-internal-range //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE - If --range is not set, the subnetwork will use the entire IP range - defined by the InternalRange resource. - - For example, --reserved-internal-range + defined by the internal range resource. For example, + --reserved-internal-range //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE --role=ROLE @@ -174,15 +169,12 @@ OPTIONAL FLAGS ◆ RANGE - IP range in CIDR format. --secondary-range-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] - Adds secondary IP ranges that are associated with InternalRange - resources. - - For example, --secondary-range-with-reserved-internal-range + Adds secondary IP ranges that are associated with internal range + resources. For example, --secondary-range-with-reserved-internal-range range1=//networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE adds a secondary range with the reserved internal range resource. - ◆ RANGE_NAME - Name of the secondary range. - ◆ INTERNAL_RANGE_URL - URL of an InternalRange resource. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. --stack-type=STACK_TYPE The stack type for this subnet. Determines if IPv6 is enabled on the diff --git a/gcloud/beta/compute/networks/subnets/update b/gcloud/beta/compute/networks/subnets/update index 5f5e0c645..e66223932 100644 --- a/gcloud/beta/compute/networks/subnets/update +++ b/gcloud/beta/compute/networks/subnets/update @@ -38,7 +38,7 @@ POSITIONAL ARGUMENTS FLAGS --add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] - Adds secondary IP ranges that are associated with InternalRange + Adds secondary IP ranges that are associated with internal range resources. For example, --add-secondary-ranges-with-reserved-internal-range @@ -46,7 +46,7 @@ FLAGS adds a secondary range with the reserved internal range resource. ◆ RANGE_NAME - Name of the secondary range. - ◆ INTERNAL_RANGE_URL - URL of an InternalRange resource. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. --drain-timeout=DRAIN_TIMEOUT; default="0s" The time period for draining traffic from Internal HTTP(S) Load diff --git a/gcloud/beta/compute/routes/create b/gcloud/beta/compute/routes/create index fea6c4755..bb6ca89b2 100644 --- a/gcloud/beta/compute/routes/create +++ b/gcloud/beta/compute/routes/create @@ -73,8 +73,7 @@ REQUIRED FLAGS must be INTERNAL. You can use any --destination-range that doesn't exactly match the destination of a subnet route and isn't more specific (has a longer subnet mask) than the destination of a subnet - route. Also, the forwarding rule's IP address can't be in the - --destination-range. For more information, see + route. For more information, see https://cloud.google.com/load-balancing/docs/internal/ilb-next-hop-overview#destination_range. --next-hop-instance=NEXT_HOP_INSTANCE diff --git a/gcloud/beta/config/get b/gcloud/beta/config/get index 9e27df0a4..4e4025097 100644 --- a/gcloud/beta/config/get +++ b/gcloud/beta/config/get @@ -216,6 +216,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1120,6 +1124,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/beta/config/help b/gcloud/beta/config/help index 1a1af10d6..d7542d10b 100644 --- a/gcloud/beta/config/help +++ b/gcloud/beta/config/help @@ -248,6 +248,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1152,6 +1156,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/beta/config/list b/gcloud/beta/config/list index 593651376..f8d6bfd5f 100644 --- a/gcloud/beta/config/list +++ b/gcloud/beta/config/list @@ -260,6 +260,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1164,6 +1168,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/beta/config/set b/gcloud/beta/config/set index 1778362e5..f07bc0b99 100644 --- a/gcloud/beta/config/set +++ b/gcloud/beta/config/set @@ -263,6 +263,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1167,6 +1171,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/beta/config/unset b/gcloud/beta/config/unset index 8eb65e9d1..3afd3b689 100644 --- a/gcloud/beta/config/unset +++ b/gcloud/beta/config/unset @@ -224,6 +224,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1128,6 +1132,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/beta/container/binauthz/attestations/create b/gcloud/beta/container/binauthz/attestations/create index e16e88c57..7b463b342 100644 --- a/gcloud/beta/container/binauthz/attestations/create +++ b/gcloud/beta/container/binauthz/attestations/create @@ -22,8 +22,8 @@ EXAMPLES $ gcloud beta container binauthz attestations create \ --project=my_proj \ - --artifact-url='gcr.io/example-project/example-image@sha256:abcd\ - ' --attestor=projects/foo/attestors/bar \ + --artifact-url=gcr.io/example-project/\ + example-image@sha256:abcd --attestor=projects/foo/attestors/bar \ --signature-file=signed_artifact_attestation.pgp.sig \ --public-key-id=AAAA0000000000000000FFFFFFFFFFFFFFFFFFFF diff --git a/gcloud/beta/container/binauthz/attestations/sign-and-create b/gcloud/beta/container/binauthz/attestations/sign-and-create index d71afa708..d95e05914 100644 --- a/gcloud/beta/container/binauthz/attestations/sign-and-create +++ b/gcloud/beta/container/binauthz/attestations/sign-and-create @@ -5,7 +5,6 @@ NAME SYNOPSIS gcloud beta container binauthz attestations sign-and-create --artifact-url=ARTIFACT_URL - (--attestor=ATTESTOR : --attestor-project=ATTESTOR_PROJECT) (--keyversion=KEYVERSION : --keyversion-key=KEYVERSION_KEY --keyversion-keyring=KEYVERSION_KEYRING --keyversion-location=KEYVERSION_LOCATION @@ -13,8 +12,10 @@ SYNOPSIS [--dsse-type=DSSE_TYPE; default="application/vnd.dev.cosign.simplesigning.v1+json"] [--pae-encode-payload] - [--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE] [--validate] - [GCLOUD_WIDE_FLAG ...] + [--public-key-id-override=PUBLIC_KEY_ID_OVERRIDE] + [[--note=NOTE : --note-project=NOTE_PROJECT] + | --validate [--attestor=ATTESTOR + : --attestor-project=ATTESTOR_PROJECT]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command signs and creates a Binary Authorization attestation @@ -35,40 +36,23 @@ EXAMPLES --keyversion-location=us-west1 --keyversion-keyring=aring \ --keyversion-key=akey --keyversion=1 + To sign and create an attestation in the project "my_proj" in note "bar" + with the key + "projects/foo/locations/us-west1/keyRings/aring/cryptoKeys/akey/cryptoKeyVersions/1", + run: + + $ gcloud beta container binauthz attestations sign-and-create \ + --project=my_proj \ + --artifact-url='gcr.io/example-project/example-image@sha256:abcd\ + ' --note=projects/my_proj/notes/bar --keyversion-project=foo \ + --keyversion-location=us-west1 --keyversion-keyring=aring \ + --keyversion-key=akey --keyversion=1 + REQUIRED FLAGS --artifact-url=ARTIFACT_URL Container URL. May be in the gcr.io/repository/image format, or may optionally contain the http or https scheme - Attestor resource - The Attestor whose Container Analysis Note will be - used to host the created attestation. In order to successfully attach the - attestation, the active gcloud account (core/account) must be able to read - this attestor and must have the containeranalysis.notes.attachOccurrence - permission for the Attestor's underlying Note resource (usually via the - containeranalysis.notes.attacher role). The arguments in this group can be - used to specify the attributes of this resource. - - This must be specified. - - --attestor=ATTESTOR - ID of the attestor or fully qualified identifier for the attestor. - - To set the name attribute: - ▸ provide the argument --attestor on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --attestor-project=ATTESTOR_PROJECT - Project ID of the Google Cloud project for the attestor. - - To set the project attribute: - ▸ provide the argument --attestor on the command line with a fully - specified name; - ▸ provide the argument --attestor-project on the command line; - ▸ provide the argument --project on the command line; - ▸ set the property core/project. - CryptoKeyVersion resource - The Cloud KMS (Key Management Service) CryptoKeyVersion to use to sign the attestation payload. The arguments in this group can be used to specify the attributes of this resource. @@ -135,9 +119,63 @@ OPTIONAL FLAGS This parameter is only necessary if the --public-key-id-override flag was provided when this KMS key was added to the Attestor. - --validate - Whether to validate that the Attestation can be verified by the - provided Attestor. + At most one of these can be specified: + + Note resource - The Container Analysis Note which will be used to host + the created attestation. In order to successfully attach the + attestation, the active gcloud account (core/account) must have the + containeranalysis.notes.attachOccurrence permission for the Note + (usually via the containeranalysis.notes.attacher role). The arguments + in this group can be used to specify the attributes of this resource. + + --note=NOTE + ID of the note or fully qualified identifier for the note. + + To set the note attribute: + ▫ provide the argument --note on the command line. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --note-project=NOTE_PROJECT + The Container Analysis project for the note. + + To set the project attribute: + ▫ provide the argument --note on the command line with a fully + specified name; + ▫ provide the argument --note-project on the command line. + + --validate + Whether to validate that the Attestation can be verified by the + provided Attestor. + + Attestor resource - The Attestor whose Container Analysis Note will be + used to host the created attestation. In order to successfully attach + the attestation, the active gcloud account (core/account) must be able + to read this attestor and must have the + containeranalysis.notes.attachOccurrence permission for the Attestor's + underlying Note resource (usually via the + containeranalysis.notes.attacher role). The arguments in this group can + be used to specify the attributes of this resource. + + --attestor=ATTESTOR + ID of the attestor or fully qualified identifier for the attestor. + + To set the name attribute: + ▫ provide the argument --attestor on the command line. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --attestor-project=ATTESTOR_PROJECT + Project ID of the Google Cloud project for the attestor. + + To set the project attribute: + ▫ provide the argument --attestor on the command line with a + fully specified name; + ▫ provide the argument --attestor-project on the command line; + ▫ provide the argument --project on the command line; + ▫ set the property core/project. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/dataflow/help b/gcloud/beta/dataflow/help index 51f78bd59..3ece81abc 100644 --- a/gcloud/beta/dataflow/help +++ b/gcloud/beta/dataflow/help @@ -43,6 +43,9 @@ GROUPS sql (BETA) A group of subcommands for working with Dataflow SQL. + yaml + (BETA) A group of subcommands for launching beam yaml jobs on Dataflow. + NOTES This command is currently in beta and might change without notice. These variants are also available: diff --git a/gcloud/beta/dataflow/yaml/help b/gcloud/beta/dataflow/yaml/help new file mode 100644 index 000000000..51e087e15 --- /dev/null +++ b/gcloud/beta/dataflow/yaml/help @@ -0,0 +1,24 @@ +NAME + gcloud beta dataflow yaml - a group of subcommands for launching beam yaml + jobs on Dataflow + +SYNOPSIS + gcloud beta dataflow yaml COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) A group of subcommands for launching beam yaml jobs on Dataflow. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + run + (BETA) Runs a job from the specified path. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/dataflow/yaml/run b/gcloud/beta/dataflow/yaml/run new file mode 100644 index 000000000..c30e5e9f9 --- /dev/null +++ b/gcloud/beta/dataflow/yaml/run @@ -0,0 +1,51 @@ +NAME + gcloud beta dataflow yaml run - runs a job from the specified path + +SYNOPSIS + gcloud beta dataflow yaml run JOB_NAME + (--yaml-pipeline=YAML_PIPELINE + | --yaml-pipeline-file=YAML_PIPELINE_FILE) + [--pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...]] + [--region=REGION_ID] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Runs a job from the specified yaml description or gcs path. + +EXAMPLES + To run a job from yaml, run: + + $ gcloud beta dataflow yaml run my-job \ + --yaml-pipeline-file=gs://yaml-path --region=europe-west1 + +POSITIONAL ARGUMENTS + JOB_NAME + Unique name to assign to the job. + +REQUIRED FLAGS + Exactly one of these must be specified: + + --yaml-pipeline=YAML_PIPELINE + Inline definition of the yaml pipeline to run. + + --yaml-pipeline-file=YAML_PIPELINE_FILE + Path of a file defining the yaml pipeline to run. (Must be a local + file or a URL beginning with 'gs://'.) + +OPTIONAL FLAGS + --pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...] + Pipeline options to pass to the job. + + --region=REGION_ID + Region ID of the job's regional endpoint. Defaults to 'us-central1'. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/dataproc/clusters/create b/gcloud/beta/dataproc/clusters/create index 84d8cd20c..f1908d543 100644 --- a/gcloud/beta/dataproc/clusters/create +++ b/gcloud/beta/dataproc/clusters/create @@ -2,9 +2,9 @@ NAME gcloud beta dataproc clusters create - create a cluster SYNOPSIS - gcloud beta dataproc clusters create (CLUSTER : --region=REGION) - [--no-address] [--async] [--autoscaling-policy=AUTOSCALING_POLICY] - [--bucket=BUCKET] [--dataproc-metastore=DATAPROC_METASTORE] + gcloud beta dataproc clusters create (CLUSTER : --region=REGION) [--async] + [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] + [--dataproc-metastore=DATAPROC_METASTORE] [--driver-pool-accelerator=[type=TYPE,[count=COUNT],...]] [--driver-pool-boot-disk-size=DRIVER_POOL_BOOT_DISK_SIZE] [--driver-pool-boot-disk-type=DRIVER_POOL_BOOT_DISK_TYPE] @@ -60,6 +60,7 @@ SYNOPSIS --kerberos-root-principal-password-uri=KERBEROS_ROOT_PRINCIPAL_PASSWORD_URI [--kerberos-kms-key=KERBEROS_KMS_KEY : --kerberos-kms-key-keyring=KERBEROS_KMS_KEY_KEYRING --kerberos-kms-key-location=KERBEROS_KMS_KEY_LOCATION --kerberos-kms-key-project=KERBEROS_KMS_KEY_PROJECT]] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -111,17 +112,6 @@ POSITIONAL ARGUMENTS ▸ set the property dataproc/region. FLAGS - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --async Return immediately, without waiting for the operation in progress to complete. @@ -801,6 +791,31 @@ FLAGS ▸ provide the argument --kms-project on the command line; ▸ set the property core/project. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/beta/dataproc/workflow-templates/set-managed-cluster b/gcloud/beta/dataproc/workflow-templates/set-managed-cluster index fadd214de..111624788 100644 --- a/gcloud/beta/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/beta/dataproc/workflow-templates/set-managed-cluster @@ -4,10 +4,9 @@ NAME SYNOPSIS gcloud beta dataproc workflow-templates set-managed-cluster - (TEMPLATE : --region=REGION) [--no-address] - [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] - [--cluster-name=CLUSTER_NAME] [--dataproc-metastore=DATAPROC_METASTORE] - [--enable-component-gateway] + (TEMPLATE : --region=REGION) [--autoscaling-policy=AUTOSCALING_POLICY] + [--bucket=BUCKET] [--cluster-name=CLUSTER_NAME] + [--dataproc-metastore=DATAPROC_METASTORE] [--enable-component-gateway] [--initialization-action-timeout=TIMEOUT; default="10m"] [--initialization-actions=CLOUD_STORAGE_URI,[...]] [--labels=[KEY=VALUE,...]] @@ -49,6 +48,7 @@ SYNOPSIS --tags=TAG,[TAG,...] --network=NETWORK | --subnet=SUBNET --reservation=RESERVATION --reservation-affinity=RESERVATION_AFFINITY; default="any"] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -101,17 +101,6 @@ POSITIONAL ARGUMENTS ▸ set the property dataproc/region. FLAGS - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --autoscaling-policy=AUTOSCALING_POLICY ID of the autoscaling policy or fully qualified identifier for the autoscaling policy. @@ -678,6 +667,31 @@ FLAGS The type of reservation for the instance. RESERVATION_AFFINITY must be one of: any, none, specific. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/beta/functions/deploy b/gcloud/beta/functions/deploy index 170cedc2b..c9f148e55 100644 --- a/gcloud/beta/functions/deploy +++ b/gcloud/beta/functions/deploy @@ -121,7 +121,7 @@ FLAGS --docker-registry=DOCKER_REGISTRY Docker Registry to use for storing the function's Docker images. The - option container-registry is used by default. + option artifact-registry is used by default. Warning: Artifact Registry and Container Registry have different image storage costs. For more details, please see diff --git a/gcloud/beta/ml/speech/recognize b/gcloud/beta/ml/speech/recognize index 0cf4c0ef7..4495141a0 100644 --- a/gcloud/beta/ml/speech/recognize +++ b/gcloud/beta/ml/speech/recognize @@ -135,6 +135,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/beta/ml/speech/recognize-long-running b/gcloud/beta/ml/speech/recognize-long-running index 548d928e2..be7f033cf 100644 --- a/gcloud/beta/ml/speech/recognize-long-running +++ b/gcloud/beta/ml/speech/recognize-long-running @@ -144,6 +144,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/beta/pubsub/topics/create b/gcloud/beta/pubsub/topics/create index 3f5a49947..1a48c6265 100644 --- a/gcloud/beta/pubsub/topics/create +++ b/gcloud/beta/pubsub/topics/create @@ -5,11 +5,12 @@ SYNOPSIS gcloud beta pubsub topics create TOPIC [TOPIC ...] [--labels=[KEY=VALUE,...]] [--message-retention-duration=MESSAGE_RETENTION_DURATION] - [--message-storage-policy-allowed-regions=[REGION,...]] [--message-encoding=ENCODING (--schema=SCHEMA : --schema-project=SCHEMA_PROJECT) : --first-revision-id=FIRST_REVISION_ID --last-revision-id=LAST_REVISION_ID] + [--message-storage-policy-allowed-regions=[REGION,...] + : --message-storage-policy-enforce-in-transit] [--topic-encryption-key=TOPIC_ENCRYPTION_KEY : --topic-encryption-key-keyring=TOPIC_ENCRYPTION_KEY_KEYRING --topic-encryption-key-location=TOPIC_ENCRYPTION_KEY_LOCATION @@ -64,12 +65,6 @@ FLAGS is one of "s", "m", "h", and "d" for seconds, minutes, hours, and days, respectively. If the unit is omitted, seconds is assumed. - Options for explicitly specifying the message storage policy for a topic. - - --message-storage-policy-allowed-regions=[REGION,...] - A list of one or more Cloud regions where messages are allowed to be - stored at rest. - Schema settings. The schema that messages published to this topic must conform to and the expected message encoding. @@ -111,6 +106,22 @@ FLAGS ▫ provide the argument --project on the command line; ▫ set the property core/project. + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for a + topic. + + --message-storage-policy-allowed-regions=[REGION,...] + A list of one or more Cloud regions where messages are allowed to be + stored at rest. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --message-storage-policy-enforce-in-transit + Whether or not to enforce in-transit guarantees for this topic using + the allowed regions. This ensures that publishing, pulling, and push + delivery are only handled in allowed Cloud regions. + Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have purpose set to "ENCRYPT_DECRYPT". The service account, diff --git a/gcloud/beta/pubsub/topics/update b/gcloud/beta/pubsub/topics/update index 28aba428e..ef6bf555e 100644 --- a/gcloud/beta/pubsub/topics/update +++ b/gcloud/beta/pubsub/topics/update @@ -11,8 +11,9 @@ SYNOPSIS : --schema-project=SCHEMA_PROJECT) : --first-revision-id=FIRST_REVISION_ID --last-revision-id=LAST_REVISION_ID]] - [--message-storage-policy-allowed-regions=[REGION,...] - | --recompute-message-storage-policy] + [--recompute-message-storage-policy + | [--message-storage-policy-allowed-regions=[REGION,...] + : --message-storage-policy-enforce-in-transit]] [--topic-encryption-key=TOPIC_ENCRYPTION_KEY : --topic-encryption-key-keyring=TOPIC_ENCRYPTION_KEY_KEYRING --topic-encryption-key-location=TOPIC_ENCRYPTION_KEY_LOCATION @@ -65,6 +66,13 @@ EXAMPLES $ gcloud beta pubsub topics update mytopic \ --recompute-message-storage-policy + To enforce both at-rest and in-transit guarantees for messages published to + the topic, run: + + $ gcloud beta pubsub topics update mytopic \ + --message-storage-policy-allowed-regions=some-cloud-region1,\ + some-cloud-region2 --message-storage-policy-enforce-in-transit + POSITIONAL ARGUMENTS Topic resource - Name of the topic to update. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but @@ -184,18 +192,27 @@ FLAGS At most one of these can be specified: - Options for explicitly specifying the message storage policy for a - topic. These fields can be set only if the + --recompute-message-storage-policy + If given, Pub/Sub recomputes the regions where messages can be stored + at rest, based on your organization's "Resource Location Restriction" + policy. + + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for + a topic. These fields can be set only if the --recompute-message-storage-policy flag is not set. --message-storage-policy-allowed-regions=[REGION,...] A list of one or more Cloud regions where messages are allowed to be stored at rest. - --recompute-message-storage-policy - If given, Pub/Sub recomputes the regions where messages can be stored - at rest, based on your organization's "Resource Location Restriction" - policy. + This flag argument must be specified if any of the other arguments + in this group are specified. + + --message-storage-policy-enforce-in-transit + Whether or not to enforce in-transit guarantees for this topic + using the allowed regions. This ensures that publishing, pulling, + and push delivery are only handled in allowed Cloud regions. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have diff --git a/gcloud/beta/redis/instances/create b/gcloud/beta/redis/instances/create index 3beb2d7b5..8d4191d88 100644 --- a/gcloud/beta/redis/instances/create +++ b/gcloud/beta/redis/instances/create @@ -184,6 +184,8 @@ FLAGS Redis 6.x compatibility redis_7_0 Redis 7.0 compatibility + redis_7_2 + Redis 7.2 compatibility --replica-count=REPLICA_COUNT The replica count of the instance. diff --git a/gcloud/beta/redis/instances/upgrade b/gcloud/beta/redis/instances/upgrade index 0e8e6506c..651ad0ed0 100644 --- a/gcloud/beta/redis/instances/upgrade +++ b/gcloud/beta/redis/instances/upgrade @@ -65,6 +65,8 @@ REQUIRED FLAGS Redis 6.x compatibility redis_7_0 Redis 7.0 compatibility + redis_7_2 + Redis 7.2 compatibility OPTIONAL FLAGS --async diff --git a/gcloud/beta/run/integrations/create b/gcloud/beta/run/integrations/create index c78141e6e..840075ed7 100644 --- a/gcloud/beta/run/integrations/create +++ b/gcloud/beta/run/integrations/create @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud beta run integrations create --type=TYPE [--name=NAME] [--parameters=[PARAMETER=VALUE,...]] [--region=REGION] - [--service=SERVICE] [GCLOUD_WIDE_FLAG ...] + [--service=SERVICE] [--service-account=SERVICE_ACCOUNT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a Cloud Run Integration. @@ -42,6 +43,9 @@ OPTIONAL FLAGS Name of the Cloud Run service to attach to the integration. It is required for some integrations. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/run/integrations/delete b/gcloud/beta/run/integrations/delete index 9e5fdfd68..fa480461f 100644 --- a/gcloud/beta/run/integrations/delete +++ b/gcloud/beta/run/integrations/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud beta run integrations delete NAME [--region=REGION] - [GCLOUD_WIDE_FLAG ...] + [--service-account=SERVICE_ACCOUNT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Delete a Cloud Run Integration and its associated resources. @@ -23,6 +23,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/run/integrations/update b/gcloud/beta/run/integrations/update index 326214446..179252057 100644 --- a/gcloud/beta/run/integrations/update +++ b/gcloud/beta/run/integrations/update @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud beta run integrations update NAME [--parameters=[PARAMETER=VALUE,...]] [--region=REGION] + [--service-account=SERVICE_ACCOUNT] [--add-service=ADD_SERVICE | --remove-service=REMOVE_SERVICE] [GCLOUD_WIDE_FLAG ...] @@ -30,6 +31,9 @@ FLAGS Region in which the resource can be found. Alternatively, set the property [run/region]. + --service-account=SERVICE_ACCOUNT + Name of the service account to use when deploying the integration. + At most one of these can be specified: --add-service=ADD_SERVICE diff --git a/gcloud/beta/sql/export/sql b/gcloud/beta/sql/export/sql index 73ef69f9b..173fec189 100644 --- a/gcloud/beta/sql/export/sql +++ b/gcloud/beta/sql/export/sql @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud beta sql export sql INSTANCE URI [--async] [--database=DATABASE,[DATABASE,...], -d DATABASE,[DATABASE,...]] - [--offload] [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] + [--offload] [--parallel] + [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] [--threads=THREADS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -42,11 +43,20 @@ FLAGS source instances and allows other operations to be performed while the export is in progress. + --parallel + Perform a parallel export. This flag is only applicable to MySQL and + Postgres. + --table=TABLE,[TABLE,...], -t TABLE,[TABLE,...] Tables to export from the specified database. If you specify tables, specify one and only one database. For PostgreSQL instances, only one table can be exported at a time. + --threads=THREADS + Specifies the number of threads to use for the parallel export. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/sql/import/sql b/gcloud/beta/sql/import/sql index bf1d8d327..1c32d8c2e 100644 --- a/gcloud/beta/sql/import/sql +++ b/gcloud/beta/sql/import/sql @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud beta sql import sql INSTANCE URI [--async] - [--database=DATABASE, -d DATABASE] [--user=USER] [GCLOUD_WIDE_FLAG ...] + [--database=DATABASE, -d DATABASE] [--parallel] [--threads=THREADS] + [--user=USER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta sql import sql imports data into a Cloud SQL instance @@ -45,6 +46,15 @@ FLAGS specified in the file to be imported. If your SQL dump file includes a database statement, it will override the database set in this flag. + --parallel + Perform a parallel import. This flag is only applicable to MySQL and + Postgres. + + --threads=THREADS + Specifies the number of threads to use for the parallel import. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + --user=USER PostgreSQL user for this import operation. diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create index 3230ba0df..0d6a3db4f 100644 --- a/gcloud/compute/instance-templates/create +++ b/gcloud/compute/instance-templates/create @@ -218,9 +218,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -318,36 +318,37 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --[no-]enable-nested-virtualization If set to true, enables nested virtualization for the instance. Use diff --git a/gcloud/compute/instance-templates/create-with-container b/gcloud/compute/instance-templates/create-with-container index f745b1e1e..c1a9bd37c 100644 --- a/gcloud/compute/instance-templates/create-with-container +++ b/gcloud/compute/instance-templates/create-with-container @@ -296,13 +296,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -344,40 +344,41 @@ FLAGS Specifies a textual description for the instance template. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to the instance that is diff --git a/gcloud/compute/instances/bulk/create b/gcloud/compute/instances/bulk/create index 23fe51cec..7b93ac29a 100644 --- a/gcloud/compute/instances/bulk/create +++ b/gcloud/compute/instances/bulk/create @@ -251,9 +251,9 @@ OPTIONAL FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -384,9 +384,9 @@ OPTIONAL FLAGS systems. The default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/compute/instances/create b/gcloud/compute/instances/create index 073a84542..3a8b3e2ee 100644 --- a/gcloud/compute/instances/create +++ b/gcloud/compute/instances/create @@ -247,9 +247,9 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -372,36 +372,37 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. If omitted, a device name of the form - persistent-disk-N will be used. + An optional name to display the disk name in the guest operating + system. If omitted, a device name of the form persistent-disk-N is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/compute/instances/create-with-container b/gcloud/compute/instances/create-with-container index eca02e616..a7f36b005 100644 --- a/gcloud/compute/instances/create-with-container +++ b/gcloud/compute/instances/create-with-container @@ -319,13 +319,13 @@ FLAGS pd-standard. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. provisioned-iops Indicates how many IOPS to provision for the disk. This sets the @@ -367,40 +367,41 @@ FLAGS Specifies a textual description of the instances. --disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],[force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE] - Attaches persistent disks to the instances. The disks specified must - already exist. + Attaches an existing persistent disk to the instances. name - The disk to attach to the instances. When creating more than one - instance and using this property, the only valid mode for attaching - the disk is read-only (see mode below). + The disk to attach to the instances. If you create more than one + instance, you can only attach a disk in read-only mode. By default, + you attach a zonal persistent disk located in the same zone of the + instance. If you want to attach a regional persistent disk, you + must specify the disk using its URI; for example, + projects/myproject/regions/us-central1/disks/my-regional-disk. mode - Specifies the mode of the disk. Supported options are ro for - read-only and rw for read-write. If omitted, rw is used as a - default. It is an error for mode to be rw when creating more than - one instance because read-write disks can only be attached to a - single instance. + The mode of the disk. Supported options are ro for read-only mode + and rw for read-write mode. If omitted, rw is used as a default + value. If you use rw when creating more than one instance, you + encounter errors. boot - If yes, indicates that this is a boot disk. The virtual machines - will use the first partition of the disk for their root file - systems. The default value for this is no. + If set to yes, you attach a boot disk. The virtual machine then + uses the first partition of the disk for the root file systems. The + default value for this is no. device-name - An optional name that indicates the disk name the guest operating - system will see. Must be the same as name if used with + An optional name to display the disk name in the guest operating + system. Must be the same as name if used with --container-mount-disk. If omitted, a device name of the form - persistent-disk-N will be used. If omitted and used with + persistent-disk-N is used. If omitted and used with --container-mount-disk (where the name of the container mount disk - is the same as in this flag), a device name equal to disk name will - be used. + is the same as in this flag), a device name equal to disk name is + used. auto-delete - If yes, this persistent disk will be automatically deleted when the - instance is deleted. However, if the disk is later detached from - the instance, this option won't apply. The default value for this - is yes. + If set to yes, the persistent disk is automatically deleted when + the instance is deleted. However, if you detach the disk from the + instance, deleting the instance doesn't delete the disk. The + default value for this is yes. scope Can be zonal or regional. If zonal, the disk is interpreted as a diff --git a/gcloud/compute/networks/subnets/create b/gcloud/compute/networks/subnets/create index f0526dfaf..93471a2fd 100644 --- a/gcloud/compute/networks/subnets/create +++ b/gcloud/compute/networks/subnets/create @@ -3,7 +3,7 @@ NAME custom subnet mode SYNOPSIS - gcloud compute networks subnets create NAME --network=NETWORK --range=RANGE + gcloud compute networks subnets create NAME --network=NETWORK [--description=DESCRIPTION] [--enable-flow-logs] [--enable-private-ip-google-access] [--ipv6-access-type=IPV6_ACCESS_TYPE] @@ -13,9 +13,11 @@ SYNOPSIS [--logging-metadata=LOGGING_METADATA] [--logging-metadata-fields=[METADATA_FIELD,...]] [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE] - [--purpose=PURPOSE] [--region=REGION] [--role=ROLE] - [--secondary-range=PROPERTY=VALUE,[...]] [--stack-type=STACK_TYPE] - [GCLOUD_WIDE_FLAG ...] + [--purpose=PURPOSE] [--range=RANGE] [--region=REGION] + [--reserved-internal-range=RESERVED_INTERNAL_RANGE] [--role=ROLE] + [--secondary-range=PROPERTY=VALUE,[...]] + [--secondary-range-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL, + [...]] [--stack-type=STACK_TYPE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute networks subnets create define a subnetwork for a network in @@ -36,9 +38,6 @@ REQUIRED FLAGS --network=NETWORK The network to which the subnetwork belongs. - --range=RANGE - The IP space allocated to this subnetwork in CIDR format. - OPTIONAL FLAGS --description=DESCRIPTION An optional description of this subnetwork. @@ -115,6 +114,9 @@ OPTIONAL FLAGS REGIONAL_MANAGED_PROXY Reserved for Regional Envoy-based Load Balancing. + --range=RANGE + The IP space allocated to this subnetwork in CIDR format. + --region=REGION Region of the subnetwork to create. If not specified, you might be prompted to select a region (interactive mode only). @@ -135,6 +137,18 @@ OPTIONAL FLAGS Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION. + --reserved-internal-range=RESERVED_INTERNAL_RANGE + If set, the primary IP range of the subnetwork will be associated with + the given internal range resource. If --range is set, the subnetwork + will only use the given IP range, which must be contained by the IP + range defined by the internal range resource. For example, + --range=10.0.0.0/24 --reserved-internal-range + //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE + If --range is not set, the subnetwork will use the entire IP range + defined by the internal range resource. For example, + --reserved-internal-range + //networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE + --role=ROLE The role of subnetwork. This field is required when the purpose is set to GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY or @@ -154,6 +168,14 @@ OPTIONAL FLAGS ◆ RANGE_NAME - Name of the secondary range. ◆ RANGE - IP range in CIDR format. + --secondary-range-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] + Adds secondary IP ranges that are associated with internal range + resources. For example, --secondary-range-with-reserved-internal-range + range1=//networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE + adds a secondary range with the reserved internal range resource. + ◆ RANGE_NAME - Name of the secondary range. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. + --stack-type=STACK_TYPE The stack type for this subnet. Determines if IPv6 is enabled on the subnet. If not specified IPV4_ONLY will be used. STACK_TYPE must be one diff --git a/gcloud/compute/networks/subnets/update b/gcloud/compute/networks/subnets/update index 9f20164ea..922f8afe6 100644 --- a/gcloud/compute/networks/subnets/update +++ b/gcloud/compute/networks/subnets/update @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud compute networks subnets update NAME - [--drain-timeout=DRAIN_TIMEOUT; default="0s"] + [--add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL, + [...]] [--drain-timeout=DRAIN_TIMEOUT; default="0s"] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL] [--logging-filter-expr=LOGGING_FILTER_EXPR] @@ -35,6 +36,17 @@ POSITIONAL ARGUMENTS Name of the subnetwork to update. FLAGS + --add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,[...] + Adds secondary IP ranges that are associated with internal range + resources. + + For example, --add-secondary-ranges-with-reserved-internal-range + range1=//networkconnectivity.googleapis.com/projects/PROJECT/locations/global/internalRanges/RANGE + adds a secondary range with the reserved internal range resource. + + ◆ RANGE_NAME - Name of the secondary range. + ◆ INTERNAL_RANGE_URL - URL of an internal range resource. + --drain-timeout=DRAIN_TIMEOUT; default="0s" The time period for draining traffic from Internal HTTP(S) Load Balancer proxies that are assigned addresses in the current ACTIVE diff --git a/gcloud/compute/routes/create b/gcloud/compute/routes/create index c84459fe9..8204d4bef 100644 --- a/gcloud/compute/routes/create +++ b/gcloud/compute/routes/create @@ -72,8 +72,7 @@ REQUIRED FLAGS must be INTERNAL. You can use any --destination-range that doesn't exactly match the destination of a subnet route and isn't more specific (has a longer subnet mask) than the destination of a subnet - route. Also, the forwarding rule's IP address can't be in the - --destination-range. For more information, see + route. For more information, see https://cloud.google.com/load-balancing/docs/internal/ilb-next-hop-overview#destination_range. --next-hop-instance=NEXT_HOP_INSTANCE diff --git a/gcloud/compute/tpus/tpu-vm/create b/gcloud/compute/tpus/tpu-vm/create index 9d8bb472c..550872b6a 100644 --- a/gcloud/compute/tpus/tpu-vm/create +++ b/gcloud/compute/tpus/tpu-vm/create @@ -6,10 +6,10 @@ SYNOPSIS [--async] [--data-disk=[mode=MODE],[source=SOURCE]] [--description=DESCRIPTION] [--internal-ips] [--labels=[KEY=VALUE,...]] [--metadata=[KEY=VALUE,...]] [--metadata-from-file=[KEY=VALUE,...]] - [--network=NETWORK; default="default"] [--preemptible] [--range=RANGE] - [--reserved] [--scopes=[SCOPES,...]] - [--service-account=SERVICE_ACCOUNT] [--shielded-secure-boot] - [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]] + [--network=NETWORK; default="default"] [--preemptible] + [--queue-count=QUEUE_COUNT] [--range=RANGE] [--reserved] + [--scopes=[SCOPES,...]] [--service-account=SERVICE_ACCOUNT] + [--shielded-secure-boot] [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]] [--accelerator-type=ACCELERATOR_TYPE; default="v2-8" | --topology=TOPOLOGY --type=TYPE] [GCLOUD_WIDE_FLAG ...] @@ -132,6 +132,13 @@ OPTIONAL FLAGS Preemptible TPUs cannot be restarted. + --queue-count=QUEUE_COUNT + Specifies the networking queue count for TPU VM instances. Both Rx and + Tx queues will be set to this number. If it's not specified, a default + queue count will be assigned. For Virtio-net, each interface will get + min(floor(#vCPU / #vNIC), 32) queues. For gVNIC, each interface will + get min(floor(#vCPU / #vNIC / 2), 16) queues. + --range=RANGE CIDR Range for the TPU. diff --git a/gcloud/config/get b/gcloud/config/get index 5f19f706e..6e400b755 100644 --- a/gcloud/config/get +++ b/gcloud/config/get @@ -216,6 +216,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1120,6 +1124,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/config/help b/gcloud/config/help index f719c76be..e1b4ebc52 100644 --- a/gcloud/config/help +++ b/gcloud/config/help @@ -248,6 +248,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1152,6 +1156,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/config/list b/gcloud/config/list index 0b8802400..53fee5071 100644 --- a/gcloud/config/list +++ b/gcloud/config/list @@ -260,6 +260,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1164,6 +1168,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/config/set b/gcloud/config/set index b64a996af..1fd2bfd99 100644 --- a/gcloud/config/set +++ b/gcloud/config/set @@ -263,6 +263,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1167,6 +1171,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/config/unset b/gcloud/config/unset index b8ac8e5cb..2ef8aa216 100644 --- a/gcloud/config/unset +++ b/gcloud/config/unset @@ -224,6 +224,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud assured command group. Defaults to https://assuredworkloads.googleapis.com/ + auditmanager + Overrides API endpoint for gcloud audit-manager command group. + Defaults to https://auditmanager.googleapis.com/ + baremetalsolution Overrides API endpoint for gcloud bms command group. Defaults to https://baremetalsolution.googleapis.com/ @@ -1128,6 +1132,10 @@ AVAILABLE PROPERTIES --region flag is required but not provided, the command will fall back to this value, if set. + runapps + deployment_service_account + Service account to use when deploying integrations. + scc organization Default organization gcloud should use for scc surface. diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create index 3358b85f7..34a540eea 100644 --- a/gcloud/container/clusters/create +++ b/gcloud/container/clusters/create @@ -25,8 +25,8 @@ SYNOPSIS [--enable-cloud-logging] [--enable-cloud-monitoring] [--enable-cloud-run-alpha] [--enable-confidential-nodes] [--enable-cost-allocation] [--enable-dataplane-v2] [--enable-fleet] - [--enable-google-cloud-access] [--enable-gvnic] - [--enable-identity-service] [--enable-image-streaming] + [--enable-fqdn-network-policy] [--enable-google-cloud-access] + [--enable-gvnic] [--enable-identity-service] [--enable-image-streaming] [--enable-intra-node-visibility] [--enable-ip-alias] [--enable-kubernetes-alpha] [--enable-kubernetes-unstable-apis=API,[API,...]] @@ -467,6 +467,10 @@ FLAGS different project, please use --fleet-project=FLEET_HOST_PROJECT. Example: $ gcloud container clusters create --enable-fleet + --enable-fqdn-network-policy + Enable FQDN Network Policies on the cluster. FQDN Network Policies are + disabled by default. + --enable-google-cloud-access When you enable Google Cloud Access, any public IP addresses owned by Google Cloud can reach the public control plane endpoint of your diff --git a/gcloud/container/clusters/update b/gcloud/container/clusters/update index e7ca95ccb..1303309ad 100644 --- a/gcloud/container/clusters/update +++ b/gcloud/container/clusters/update @@ -12,8 +12,9 @@ SYNOPSIS | --disable-database-encryption | --disable-default-snat | --disable-workload-identity | --enable-autoscaling | --enable-cost-allocation | --enable-fleet - | --enable-google-cloud-access | --enable-identity-service - | --enable-image-streaming | --enable-intra-node-visibility + | --enable-fqdn-network-policy | --enable-google-cloud-access + | --enable-identity-service | --enable-image-streaming + | --enable-intra-node-visibility | --enable-kubernetes-unstable-apis=API,[API,...] | --enable-l4-ilb-subsetting | --enable-legacy-authorization | --enable-master-authorized-networks | --enable-master-global-access @@ -254,6 +255,10 @@ REQUIRED FLAGS different project, please use --fleet-project=FLEET_HOST_PROJECT. Example: $ gcloud container clusters update --enable-fleet + --enable-fqdn-network-policy + Enable FQDN Network Policies on the cluster. FQDN Network Policies + are disabled by default. + --enable-google-cloud-access When you enable Google Cloud Access, any public IP addresses owned by Google Cloud can reach the public control plane endpoint of your diff --git a/gcloud/database-migration/connection-profiles/create/postgresql b/gcloud/database-migration/connection-profiles/create/postgresql index 5a7d0bc27..0eab628aa 100644 --- a/gcloud/database-migration/connection-profiles/create/postgresql +++ b/gcloud/database-migration/connection-profiles/create/postgresql @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud database-migration connection-profiles create postgresql - (CONNECTION_PROFILE : --region=REGION) [--no-async] + (CONNECTION_PROFILE : --region=REGION) + [--alloydb-cluster=ALLOYDB_CLUSTER] [--no-async] [--cloudsql-instance=CLOUDSQL_INSTANCE] [--display-name=DISPLAY_NAME] [--labels=[KEY=VALUE,...]] [--ca-certificate=CA_CERTIFICATE @@ -64,6 +65,10 @@ POSITIONAL ARGUMENTS ▸ provide the argument --region on the command line. FLAGS + --alloydb-cluster=ALLOYDB_CLUSTER + If the destination is an AlloyDB cluster, use this field to provide the + AlloyDB cluster ID. + --no-async Waits for the operation in progress to complete before returning. diff --git a/gcloud/database-migration/connection-profiles/update b/gcloud/database-migration/connection-profiles/update index 044205e9a..212710b60 100644 --- a/gcloud/database-migration/connection-profiles/update +++ b/gcloud/database-migration/connection-profiles/update @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud database-migration connection-profiles update (CONNECTION_PROFILE : --region=REGION) - [--ca-certificate=CA_CERTIFICATE] + [--alloydb-cluster=ALLOYDB_CLUSTER] [--ca-certificate=CA_CERTIFICATE] [--client-certificate=CLIENT_CERTIFICATE] [--cloudsql-instance=CLOUDSQL_INSTANCE] [--display-name=DISPLAY_NAME] [--host=HOST] [--port=PORT] [--private-key=PRIVATE_KEY] @@ -62,6 +62,10 @@ POSITIONAL ARGUMENTS ▸ provide the argument --region on the command line. FLAGS + --alloydb-cluster=ALLOYDB_CLUSTER + If the destination is an AlloyDB cluster, use this field to provide the + AlloyDB cluster ID. + --ca-certificate=CA_CERTIFICATE x509 PEM-encoded certificate of the CA that signed the database server's certificate. Database Migration Service will use this diff --git a/gcloud/database-migration/migration-jobs/demote-destination b/gcloud/database-migration/migration-jobs/demote-destination new file mode 100644 index 000000000..3dbb0d77d --- /dev/null +++ b/gcloud/database-migration/migration-jobs/demote-destination @@ -0,0 +1,61 @@ +NAME + gcloud database-migration migration-jobs demote-destination - demote a + destination of a Database Migration Service migration job + +SYNOPSIS + gcloud database-migration migration-jobs demote-destination + (MIGRATION_JOB : --region=REGION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Demote a destination of a Database Migration Service migration job. + +EXAMPLES + To Demote a migration job destination: + + $ gcloud database-migration migration-jobs demote-destination \ + MIGRATION_JOB --region=us-central1 + +POSITIONAL ARGUMENTS + Migration job resource - Migration job resource - Cloud Database Migration + Service migration job to demote its destination. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument migration_job on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MIGRATION_JOB + ID of the migration_job or fully qualified identifier for the + migration_job. + + To set the migration_job attribute: + ▸ provide the argument migration_job on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The name of the region. + + To set the region attribute: + ▸ provide the argument migration_job on the command line with a + fully specified name; + ▸ provide the argument --region on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the datamigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/database-migration/ diff --git a/gcloud/database-migration/migration-jobs/help b/gcloud/database-migration/migration-jobs/help index 4d2cb14cd..66d7470f6 100644 --- a/gcloud/database-migration/migration-jobs/help +++ b/gcloud/database-migration/migration-jobs/help @@ -22,6 +22,9 @@ COMMANDS delete Delete a Database Migration Service migration job. + demote-destination + Demote a destination of a Database Migration Service migration job. + describe Show details about a Database Migration Service migration job. diff --git a/gcloud/dataproc/clusters/create b/gcloud/dataproc/clusters/create index 3940d34ae..21a41dfad 100644 --- a/gcloud/dataproc/clusters/create +++ b/gcloud/dataproc/clusters/create @@ -4,9 +4,8 @@ NAME SYNOPSIS gcloud dataproc clusters create (CLUSTER : --region=REGION) [--action-on-failed-primary-workers=ACTION_ON_FAILED_PRIMARY_WORKERS] - [--no-address] [--async] [--autoscaling-policy=AUTOSCALING_POLICY] - [--bucket=BUCKET] [--confidential-compute] - [--dataproc-metastore=DATAPROC_METASTORE] + [--async] [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] + [--confidential-compute] [--dataproc-metastore=DATAPROC_METASTORE] [--driver-pool-accelerator=[type=TYPE,[count=COUNT],...]] [--driver-pool-boot-disk-size=DRIVER_POOL_BOOT_DISK_SIZE] [--driver-pool-boot-disk-type=DRIVER_POOL_BOOT_DISK_TYPE] @@ -67,6 +66,7 @@ SYNOPSIS [[--metric-sources=[METRIC_SOURCE,...] : --metric-overrides=[METRIC_SOURCE:INSTANCE:GROUP:METRIC,...] | --metric-overrides-file=METRIC_OVERRIDES_FILE]] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -128,17 +128,6 @@ FLAGS NO_ACTION take no action - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --async Return immediately, without waiting for the operation in progress to complete. @@ -886,6 +875,31 @@ FLAGS metrics enabled for the metric sources. The path can be a Cloud Storage URL (example: gs://path/to/file) or a local file system path. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/dataproc/workflow-templates/set-managed-cluster b/gcloud/dataproc/workflow-templates/set-managed-cluster index a56360ee6..be66552e6 100644 --- a/gcloud/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/dataproc/workflow-templates/set-managed-cluster @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud dataproc workflow-templates set-managed-cluster - (TEMPLATE : --region=REGION) [--no-address] - [--autoscaling-policy=AUTOSCALING_POLICY] [--bucket=BUCKET] - [--cluster-name=CLUSTER_NAME] [--confidential-compute] - [--dataproc-metastore=DATAPROC_METASTORE] [--enable-component-gateway] + (TEMPLATE : --region=REGION) [--autoscaling-policy=AUTOSCALING_POLICY] + [--bucket=BUCKET] [--cluster-name=CLUSTER_NAME] + [--confidential-compute] [--dataproc-metastore=DATAPROC_METASTORE] + [--enable-component-gateway] [--initialization-action-timeout=TIMEOUT; default="10m"] [--initialization-actions=CLOUD_STORAGE_URI,[...]] [--labels=[KEY=VALUE,...]] @@ -54,6 +54,7 @@ SYNOPSIS [[--metric-sources=[METRIC_SOURCE,...] : --metric-overrides=[METRIC_SOURCE:INSTANCE:GROUP:METRIC,...] | --metric-overrides-file=METRIC_OVERRIDES_FILE]] + [--no-address | --public-ip-address] [--single-node | --min-num-workers=MIN_NUM_WORKERS --num-secondary-workers=NUM_SECONDARY_WORKERS --num-workers=NUM_WORKERS @@ -106,17 +107,6 @@ POSITIONAL ARGUMENTS ▸ set the property dataproc/region. FLAGS - --no-address - If provided, the instances in the cluster will not be assigned external - IP addresses. - - If omitted the instances in the cluster will each be assigned an - ephemeral external IP address. - - Note: Dataproc VMs need access to the Dataproc API. This can be - achieved without external IP addresses using Private Google Access - (https://cloud.google.com/compute/docs/private-google-access). - --autoscaling-policy=AUTOSCALING_POLICY ID of the autoscaling policy or fully qualified identifier for the autoscaling policy. @@ -753,6 +743,31 @@ FLAGS metrics enabled for the metric sources. The path can be a Cloud Storage URL (example: gs://path/to/file) or a local file system path. + At most one of these can be specified: + + --no-address + If provided, the instances in the cluster will not be assigned + external IP addresses. + + If omitted, then the Dataproc service will apply a default policy to + determine if each instance in the cluster gets an external IP address + or not. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + + --public-ip-address + If provided, cluster instances are assigned external IP addresses. + + If omitted, the Dataproc service applies a default policy to + determine whether or not each instance in the cluster gets an + external IP address. + + Note: Dataproc VMs need access to the Dataproc API. This can be + achieved without external IP addresses using Private Google Access + (https://cloud.google.com/compute/docs/private-google-access). + At most one of these can be specified: --single-node diff --git a/gcloud/edge-cloud/container/clusters/get-credentials b/gcloud/edge-cloud/container/clusters/get-credentials index c5c6cb22a..0075b0638 100644 --- a/gcloud/edge-cloud/container/clusters/get-credentials +++ b/gcloud/edge-cloud/container/clusters/get-credentials @@ -6,7 +6,7 @@ SYNOPSIS gcloud edge-cloud container clusters get-credentials (CLUSTER : --location=LOCATION) [--auth-provider-cmd-path=AUTH_PROVIDER_CMD_PATH] - [GCLOUD_WIDE_FLAG ...] + [--offline-credential] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Fetch credentials for a running Edge Container cluster. This command @@ -63,6 +63,10 @@ FLAGS Path to the gcloud executable for the auth provider field in kubeconfig. + --offline-credential + Once specified, an offline credential will be generated for the + cluster. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/edge-cloud/container/clusters/update b/gcloud/edge-cloud/container/clusters/update index 2907c0e4b..4ac57737d 100644 --- a/gcloud/edge-cloud/container/clusters/update +++ b/gcloud/edge-cloud/container/clusters/update @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud edge-cloud container clusters update (CLUSTER : --location=LOCATION) - [--async] + [--async] [--release-channel=RELEASE_CHANNEL] [--clear-maintenance-window | --maintenance-window-end=MAINTENANCE_WINDOW_END --maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE @@ -59,6 +59,14 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --release-channel=RELEASE_CHANNEL + Release channel a cluster is subscribed to. It supports two values, + NONE and REGULAR. NONE is used to opt out of any release channel. + Clusters subscribed to the REGULAR channel will be automatically + upgraded to versions that are considered GA quality, and cannot be + manually upgraded. RELEASE_CHANNEL must be one of: none, regular, + release-channel-unspecified. + At most one of these can be specified: --clear-maintenance-window diff --git a/gcloud/functions/deploy b/gcloud/functions/deploy index c93072185..326cfedb3 100644 --- a/gcloud/functions/deploy +++ b/gcloud/functions/deploy @@ -109,7 +109,7 @@ FLAGS --docker-registry=DOCKER_REGISTRY Docker Registry to use for storing the function's Docker images. The - option container-registry is used by default. + option artifact-registry is used by default. Warning: Artifact Registry and Container Registry have different image storage costs. For more details, please see diff --git a/gcloud/ml/speech/recognize b/gcloud/ml/speech/recognize index d0cb95704..c779306bc 100644 --- a/gcloud/ml/speech/recognize +++ b/gcloud/ml/speech/recognize @@ -115,6 +115,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/ml/speech/recognize-long-running b/gcloud/ml/speech/recognize-long-running index 8db329717..985da89af 100644 --- a/gcloud/ml/speech/recognize-long-running +++ b/gcloud/ml/speech/recognize-long-running @@ -124,6 +124,14 @@ OPTIONAL FLAGS audio that originated from a phone call (typically recorded at an 8khz sampling rate). This is a premium model and can produce better results but costs more than the standard rate. + telephony + Improved version of the "phone_call" model, best for audio that + originated from a phone call, typically recorded at an 8kHz + sampling rate. + telephony_short + Dedicated version of the modern "telephony" model for short or even + single-word utterances for audio that originated from a phone call, + typically recorded at an 8kHz sampling rate. video_enhanced audio that originated from video or includes multiple speakers. Ideally the audio is recorded at a 16khz or greater sampling rate. diff --git a/gcloud/pubsub/topics/create b/gcloud/pubsub/topics/create index 79d0b6eaf..050d2f9c4 100644 --- a/gcloud/pubsub/topics/create +++ b/gcloud/pubsub/topics/create @@ -4,11 +4,12 @@ NAME SYNOPSIS gcloud pubsub topics create TOPIC [TOPIC ...] [--labels=[KEY=VALUE,...]] [--message-retention-duration=MESSAGE_RETENTION_DURATION] - [--message-storage-policy-allowed-regions=[REGION,...]] [--message-encoding=ENCODING (--schema=SCHEMA : --schema-project=SCHEMA_PROJECT) : --first-revision-id=FIRST_REVISION_ID --last-revision-id=LAST_REVISION_ID] + [--message-storage-policy-allowed-regions=[REGION,...] + : --message-storage-policy-enforce-in-transit] [--topic-encryption-key=TOPIC_ENCRYPTION_KEY : --topic-encryption-key-keyring=TOPIC_ENCRYPTION_KEY_KEYRING --topic-encryption-key-location=TOPIC_ENCRYPTION_KEY_LOCATION @@ -63,12 +64,6 @@ FLAGS is one of "s", "m", "h", and "d" for seconds, minutes, hours, and days, respectively. If the unit is omitted, seconds is assumed. - Options for explicitly specifying the message storage policy for a topic. - - --message-storage-policy-allowed-regions=[REGION,...] - A list of one or more Cloud regions where messages are allowed to be - stored at rest. - Schema settings. The schema that messages published to this topic must conform to and the expected message encoding. @@ -110,6 +105,22 @@ FLAGS ▫ provide the argument --project on the command line; ▫ set the property core/project. + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for a + topic. + + --message-storage-policy-allowed-regions=[REGION,...] + A list of one or more Cloud regions where messages are allowed to be + stored at rest. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --message-storage-policy-enforce-in-transit + Whether or not to enforce in-transit guarantees for this topic using + the allowed regions. This ensures that publishing, pulling, and push + delivery are only handled in allowed Cloud regions. + Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have purpose set to "ENCRYPT_DECRYPT". The service account, diff --git a/gcloud/pubsub/topics/update b/gcloud/pubsub/topics/update index d68e321b6..5db032f3a 100644 --- a/gcloud/pubsub/topics/update +++ b/gcloud/pubsub/topics/update @@ -11,8 +11,9 @@ SYNOPSIS : --schema-project=SCHEMA_PROJECT) : --first-revision-id=FIRST_REVISION_ID --last-revision-id=LAST_REVISION_ID]] - [--message-storage-policy-allowed-regions=[REGION,...] - | --recompute-message-storage-policy] + [--recompute-message-storage-policy + | [--message-storage-policy-allowed-regions=[REGION,...] + : --message-storage-policy-enforce-in-transit]] [--topic-encryption-key=TOPIC_ENCRYPTION_KEY : --topic-encryption-key-keyring=TOPIC_ENCRYPTION_KEY_KEYRING --topic-encryption-key-location=TOPIC_ENCRYPTION_KEY_LOCATION @@ -65,6 +66,13 @@ EXAMPLES $ gcloud pubsub topics update mytopic \ --recompute-message-storage-policy + To enforce both at-rest and in-transit guarantees for messages published to + the topic, run: + + $ gcloud pubsub topics update mytopic \ + --message-storage-policy-allowed-regions=some-cloud-region1,\ + some-cloud-region2 --message-storage-policy-enforce-in-transit + POSITIONAL ARGUMENTS Topic resource - Name of the topic to update. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but @@ -184,18 +192,27 @@ FLAGS At most one of these can be specified: - Options for explicitly specifying the message storage policy for a - topic. These fields can be set only if the + --recompute-message-storage-policy + If given, Pub/Sub recomputes the regions where messages can be stored + at rest, based on your organization's "Resource Location Restriction" + policy. + + Options for explicitly specifying the message storage policy + (https://cloud.google.com/pubsub/docs/resource-location-restriction) for + a topic. These fields can be set only if the --recompute-message-storage-policy flag is not set. --message-storage-policy-allowed-regions=[REGION,...] A list of one or more Cloud regions where messages are allowed to be stored at rest. - --recompute-message-storage-policy - If given, Pub/Sub recomputes the regions where messages can be stored - at rest, based on your organization's "Resource Location Restriction" - policy. + This flag argument must be specified if any of the other arguments + in this group are specified. + + --message-storage-policy-enforce-in-transit + Whether or not to enforce in-transit guarantees for this topic + using the allowed regions. This ensures that publishing, pulling, + and push delivery are only handled in allowed Cloud regions. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the topic. The specified Cloud KMS key should have diff --git a/gcloud/scc/help b/gcloud/scc/help index 136b7ebc1..d7c441304 100644 --- a/gcloud/scc/help +++ b/gcloud/scc/help @@ -39,6 +39,9 @@ GROUPS posture-deployments Manage Cloud Security Command Center (SCC) posture deployments. + posture-operations + Manage Cloud Security Command Center (SCC) posture operations. + posture-templates Manage Cloud Security Command Center (SCC) posture templates. diff --git a/gcloud/scc/posture-deployments/create b/gcloud/scc/posture-deployments/create index ac5e5bac3..3d6cc6230 100644 --- a/gcloud/scc/posture-deployments/create +++ b/gcloud/scc/posture-deployments/create @@ -20,15 +20,18 @@ DESCRIPTION EXAMPLES Create a posture deployment named posture-deployment-foo-1 within parent - organizations/123/locations/global(i.e. a posture-deployment in - organization 123, location global, with id posture-deployment-foo-1, which - deploys posture organizations/123/locations/foo-posture with revision-id - foo-posture-revision-id): + organizations/123/locations/global on resource folders/456 (i.e. a + posture-deployment in organization 123, location global, with id + posture-deployment-foo-1, which deploys posture + organizations/123/locations/foo-posture with revision-id + foo-posture-revision-id on folders/456): $ gcloud scc posture-deployments create \ - organizations/123/locations/global posture-deployment-foo-1 \ - --posture-name=organizations/123/locations/global/foo-posture \ - --posture-revision-id=foo-posture-revision-id + organizations/123/locations/global/postureDeployments/\ + posture-deployment-foo-1 \ + --posture-name=organizations/123/locations/global/foo-posture \ + --posture-revision-id=foo-posture-revision-id \ + --target-resource=projects/456 POSITIONAL ARGUMENTS Posture deployment resource - The name of the posture deployment to be @@ -68,7 +71,7 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --posture-name=POSTURE_NAME Posture that needs to be deployed. Format: - organizations//locations/global/postures/ + organizations//locations//postures/ --posture-revision-id=POSTURE_REVISION_ID Posture revision that needs to be deployed. diff --git a/gcloud/scc/posture-deployments/list b/gcloud/scc/posture-deployments/list index eac41f776..4b4a0e593 100644 --- a/gcloud/scc/posture-deployments/list +++ b/gcloud/scc/posture-deployments/list @@ -13,7 +13,7 @@ DESCRIPTION EXAMPLES To list Cloud Security Command Center posture deployments for organization - 123, run: + 123 in the global location, run: $ gcloud scc posture-deployments list \ organizations/123/locations/global diff --git a/gcloud/scc/posture-deployments/update b/gcloud/scc/posture-deployments/update index 77d67e23c..c4e9fbbbe 100644 --- a/gcloud/scc/posture-deployments/update +++ b/gcloud/scc/posture-deployments/update @@ -16,9 +16,11 @@ DESCRIPTION Fields specified in update-mask flag are updated. Updatable fields are description and posture_name with posture_revision-id. The target_resource for a posture deployment cannot be updated. The posture deployment to be - updated should be in ACTIVE State. If posture details of posture deployment - need to be updated, then the desired posture needs to be in ACTIVE state. - LRO operation ID is returned as the response of the command. + updated should be in ACTIVE State. An empty or "" update-mask implies that + posture-id and posture-revision-id are to be updated. If posture details of + posture deployment need to be updated, then the desired posture needs to be + in ACTIVE state. LRO operation ID is returned as the response of the + command. EXAMPLES Update the description of the posture deployment named @@ -36,6 +38,12 @@ EXAMPLES --update-mask=posture_id,posture_revision-id \ --posture-id=foo-posture --posture-revision-id=abcdefgh + Update posture deployment named `foo-posture-deployment` with the posture named `foo-posture` and revision_id `abcdefgh` in the organization `organizations/123/locations/global`: + $ gcloud scc posture-deployments update \ + organizations/123/locations/global/postureDeployments/\ + foo-posture-deployment --posture-id=foo-posture \ + --posture-revision-id=abcdefgh + POSITIONAL ARGUMENTS Posture deployment resource - The posture deployment to update. For example diff --git a/gcloud/scc/posture-operations/describe b/gcloud/scc/posture-operations/describe new file mode 100644 index 000000000..5cb3164c1 --- /dev/null +++ b/gcloud/scc/posture-operations/describe @@ -0,0 +1,43 @@ +NAME + gcloud scc posture-operations describe - describe a Cloud Security Command + Center posture long running operation + +SYNOPSIS + gcloud scc posture-operations describe OPERATION_NAME + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Cloud Security Command Center (SCC) posture long running + operation. + +EXAMPLES + To return long running operation status for operation + (operation-1694515698847-605272e4bcd7c-f93dade6-067467ae) of parent + organizations/123/locations/global, run: + + $ gcloud scc posture-operations describe \ + organizations/123/locations/global/operations/\ + operation-1694515698847-605272e4bcd7c-f93dade6-067467ae + +POSITIONAL ARGUMENTS + OPERATION_NAME + Relative resource name of the operation, of the format: + organizations//locations//operations/. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-operations describe + diff --git a/gcloud/scc/posture-operations/help b/gcloud/scc/posture-operations/help new file mode 100644 index 000000000..25774fc53 --- /dev/null +++ b/gcloud/scc/posture-operations/help @@ -0,0 +1,27 @@ +NAME + gcloud scc posture-operations - manage Cloud Security Command Center + posture operations + +SYNOPSIS + gcloud scc posture-operations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud Security Command Center (SCC) posture operations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + Describe a Cloud Security Command Center (SCC) posture long running + operation. + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-operations + diff --git a/gcloud/scc/posture-templates/describe b/gcloud/scc/posture-templates/describe index 364e66c62..833bbc31a 100644 --- a/gcloud/scc/posture-templates/describe +++ b/gcloud/scc/posture-templates/describe @@ -30,7 +30,7 @@ EXAMPLES secure_by_default --revision-id=v1.0.0 POSITIONAL ARGUMENTS - Posture template resource - The posture template to describe. For example + Posture template resource - Posture template to be described. For example organizations//locations//postureTemplates/. The arguments in this group can be used to specify the attributes of this resource. @@ -65,7 +65,7 @@ POSITIONAL ARGUMENTS FLAGS --revision-id=REVISION_ID - ID of the specific posture template revision to describe. If not + ID of the specific posture template revision to be described. If not specified, latest revision is described. GCLOUD WIDE FLAGS diff --git a/gcloud/scc/postures/create b/gcloud/scc/postures/create index 56b1a5949..3911f572f 100644 --- a/gcloud/scc/postures/create +++ b/gcloud/scc/postures/create @@ -7,10 +7,10 @@ SYNOPSIS --posture-from-file=POSTURE_FROM_FILE [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Create a Cloud Security Command Center (SCC) posture. First argument is the - parent of the posture to be created. Second argument is the name of the - posture to be created. The posture details are provided in YAML file. The - file path is mentioned in posture-from-file flag. + Create a Cloud Security Command Center (SCC) posture. First argument + consists of the parent and name of the posture to be created. The posture + details are provided in YAML file. The file path is mentioned in + --posture-from-file flag. Created posture is returned as the response of the command. LRO operation ID is printed as the standard output. @@ -18,10 +18,11 @@ DESCRIPTION EXAMPLES Create a posture named posture-foo-1 within parent organizations/123/locations/global(i.e. a posture in organization 123, - location global, with id posture-foo-1): + location global, with ID posture-foo-1): - $ gcloud scc postures create organizations/123/locations/global \ - posture-foo-1 --posture-from-file=posture.yaml + $ gcloud scc postures create \ + organizations/123/locations/global/postures/posture-foo-1 \ + --posture-from-file=posture.yaml POSITIONAL ARGUMENTS Posture resource - The name of the posture to be created. For example diff --git a/gcloud/scc/postures/delete b/gcloud/scc/postures/delete index b91b25940..56b8fdc1e 100644 --- a/gcloud/scc/postures/delete +++ b/gcloud/scc/postures/delete @@ -9,7 +9,7 @@ SYNOPSIS DESCRIPTION Delete a Cloud Security Command Center (SCC) posture. - Posture with all it's revisions is deleted. Deletion won't be allowed in + Posture with all its revisions is deleted. Deletion won't be allowed in case any of the versions of the posture is deployed on a workload. ETAG can be provided as an optional flag. @@ -31,7 +31,7 @@ EXAMPLES --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU POSITIONAL ARGUMENTS - Posture resource - The posture to delete. For example + Posture resource - The name of the posture to be deleted. For example organizations//locations//postures/. The arguments in this group can be used to specify the attributes of this resource. diff --git a/gcloud/scc/postures/describe b/gcloud/scc/postures/describe index 646a54549..da8486087 100644 --- a/gcloud/scc/postures/describe +++ b/gcloud/scc/postures/describe @@ -29,7 +29,7 @@ EXAMPLES --revision-id=abcdefg POSITIONAL ARGUMENTS - Posture resource - The posture to describe. For example + Posture resource - The posture to be described. For example organizations//locations//postures/. The arguments in this group can be used to specify the attributes of this resource. @@ -63,7 +63,7 @@ POSITIONAL ARGUMENTS FLAGS --revision-id=REVISION_ID - ID of the specific posture revision to describe. If not specified, + ID of the specific posture revision to described. If not specified, latest revision is described. GCLOUD WIDE FLAGS diff --git a/gcloud/scc/postures/extract b/gcloud/scc/postures/extract index 66d6f2332..60f105f30 100644 --- a/gcloud/scc/postures/extract +++ b/gcloud/scc/postures/extract @@ -9,9 +9,9 @@ SYNOPSIS DESCRIPTION Extract a Cloud Security Command Center (SCC) posture from a workload. - First argument is the parent of the posture to be created. Second argument - is the name of the posture to be created. The workload from where the - organization policies need to be extracted is provided via 'workload' flag. + First argument is the parent and name of the posture to be created. The + workload from where the organization policies need to be extracted is + provided via '--workload' flag. Extracted posture is returned as the response of the command. LRO operation ID is printed as the standard output. @@ -21,8 +21,9 @@ EXAMPLES organizations/123/locations/global(i.e. a posture in organization 123, location global, with id posture-foo-1) from workload projects/456: - $ gcloud scc postures extract organizations/123/locations/global \ - posture-foo-1 --workload=projects/456 + $ gcloud scc postures extract \ + organizations/123/locations/global/postures/posture-foo-1 \ + --workload=projects/456 POSITIONAL ARGUMENTS Posture resource - The name of the posture to be created. For example diff --git a/gcloud/scc/postures/update b/gcloud/scc/postures/update index b7c60a8bf..b5dab20d8 100644 --- a/gcloud/scc/postures/update +++ b/gcloud/scc/postures/update @@ -72,7 +72,7 @@ EXAMPLES POSITIONAL ARGUMENTS Posture resource - Arguments and flags that specify the Posture instance - to update. The arguments in this group can be used to specify the + to be updated. The arguments in this group can be used to specify the attributes of this resource. This must be specified. diff --git a/gcloud/sql/export/sql b/gcloud/sql/export/sql index 3755768d1..0e19aa026 100644 --- a/gcloud/sql/export/sql +++ b/gcloud/sql/export/sql @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud sql export sql INSTANCE URI [--async] [--database=DATABASE,[DATABASE,...], -d DATABASE,[DATABASE,...]] - [--offload] [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] + [--offload] [--parallel] + [--table=TABLE,[TABLE,...], -t TABLE,[TABLE,...]] [--threads=THREADS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -42,11 +43,20 @@ FLAGS source instances and allows other operations to be performed while the export is in progress. + --parallel + Perform a parallel export. This flag is only applicable to MySQL and + Postgres. + --table=TABLE,[TABLE,...], -t TABLE,[TABLE,...] Tables to export from the specified database. If you specify tables, specify one and only one database. For PostgreSQL instances, only one table can be exported at a time. + --threads=THREADS + Specifies the number of threads to use for the parallel export. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/sql/import/sql b/gcloud/sql/import/sql index eac5f3347..ffdb56df1 100644 --- a/gcloud/sql/import/sql +++ b/gcloud/sql/import/sql @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud sql import sql INSTANCE URI [--async] - [--database=DATABASE, -d DATABASE] [--user=USER] [GCLOUD_WIDE_FLAG ...] + [--database=DATABASE, -d DATABASE] [--parallel] [--threads=THREADS] + [--user=USER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud sql import sql imports data into a Cloud SQL instance from a SQL @@ -45,6 +46,15 @@ FLAGS specified in the file to be imported. If your SQL dump file includes a database statement, it will override the database set in this flag. + --parallel + Perform a parallel import. This flag is only applicable to MySQL and + Postgres. + + --threads=THREADS + Specifies the number of threads to use for the parallel import. If + --parallel is specified and this flag is not provided, Cloud SQL uses a + default thread count to optimize performance. + --user=USER PostgreSQL user for this import operation. diff --git a/gcloud/workflows/execute b/gcloud/workflows/execute index 9f9f400ff..4d59c3dc7 100644 --- a/gcloud/workflows/execute +++ b/gcloud/workflows/execute @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud workflows execute (WORKFLOW : --location=LOCATION) [--call-log-level=CALL_LOG_LEVEL; default="none"] [--data=DATA] + [--disable-concurrency-quota-overflow-buffering] [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -70,6 +71,11 @@ FLAGS JSON string with data that will be passed to the workflow as an argument. + --disable-concurrency-quota-overflow-buffering + If set, the execution will not be backlogged when the concurrency quota + is exhausted. Backlogged executions start when the concurrency quota + becomes available. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add.