mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-13 00:18:35 +00:00
72 lines
2.7 KiB
Text
72 lines
2.7 KiB
Text
NAME
|
|
gcloud alpha auth enterprise-certificate-config create linux - create an
|
|
enterprise-certificate configuration file for Linux
|
|
|
|
SYNOPSIS
|
|
gcloud alpha auth enterprise-certificate-config create linux --label=LABEL
|
|
--module=MODULE --slot=SLOT [--ecp=ECP] [--ecp-client=ECP_CLIENT]
|
|
[--output-file=OUTPUT_FILE] [--tls-offload=TLS_OFFLOAD]
|
|
[--user-pin=USER_PIN] [GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
(ALPHA) This command creates a configuration file used by gcloud to use the
|
|
enterprise-certificate-proxy component for mTLS.
|
|
|
|
EXAMPLES
|
|
To create a credential configuration run:
|
|
|
|
$ gcloud alpha auth enterprise-certificate-config create linux \
|
|
--module=$PATH_TO_PKCS11_MODULE --slot=$PKCS11_SLOT_ID \
|
|
--label=$PKCS11_OBJECT_LABEL --user-pin=$PKCS11_USER_PIN
|
|
|
|
REQUIRED FLAGS
|
|
--label=LABEL
|
|
The PKCS #11 label for the target credentials. The certificate, public
|
|
key, and private key MUST have the same label.
|
|
enterprise-certificate-proxy will use all three objects.
|
|
|
|
--module=MODULE
|
|
The full file path to the PKCS #11 module.
|
|
|
|
--slot=SLOT
|
|
The PKCS #11 slot containing the target credentials.
|
|
|
|
OPTIONAL FLAGS
|
|
--ecp=ECP
|
|
Provide a custom path to the enterprise-certificate-proxy binary. This
|
|
flag must be the full path to the binary.
|
|
|
|
--ecp-client=ECP_CLIENT
|
|
Provide a custom path to the enterprise-certificate-proxy shared client
|
|
library. This flag must be the full path to the shared library.
|
|
|
|
--output-file=OUTPUT_FILE
|
|
Override the file path that the enterprise-certificate-proxy
|
|
configuration is written to.
|
|
|
|
--tls-offload=TLS_OFFLOAD
|
|
Provide a custom path to the enterprise-certificate-proxy shared tls
|
|
offload library. This flag must be the full path to the shared library.
|
|
|
|
--user-pin=USER_PIN
|
|
The user pin used to login to the PKCS #11 module. If there is no user
|
|
pin leave this field empty.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
NOTES
|
|
This command is currently in alpha and might change without notice. If this
|
|
command fails with API permission errors despite specifying the correct
|
|
project, you might be trying to access an API with an invitation-only early
|
|
access allowlist. These variants are also available:
|
|
|
|
$ gcloud auth enterprise-certificate-config create linux
|
|
|
|
$ gcloud beta auth enterprise-certificate-config create linux
|
|
|