mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-16 20:36:39 +00:00
112 lines
4.1 KiB
Text
112 lines
4.1 KiB
Text
NAME
|
|
gcloud beta active-directory domains trusts create - create a Microsoft
|
|
Active Directory Trust between a Managed Microsoft AD domain and
|
|
another domain
|
|
|
|
SYNOPSIS
|
|
gcloud beta active-directory domains trusts create DOMAIN
|
|
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
|
|
--target-domain-name=TARGET_DOMAIN_NAME [--async]
|
|
[--direction=DIRECTION; default="BIDIRECTIONAL"]
|
|
[--handshake-secret=HANDSHAKE_SECRET] [--selective-authentication]
|
|
[--type=TYPE; default="FOREST"] [GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
(BETA) Create a Microsoft Active Directory Trust between a Managed
|
|
Microsoft AD domain and another domain.
|
|
|
|
This command can fail for the following reasons:
|
|
▪ The domain specified does not exist.
|
|
▪ The active account does not have permission to access the given
|
|
domain.
|
|
▪ A trust already exists with the same target domain name.
|
|
▪ The active account does not have permission to create AD trusts.
|
|
|
|
EXAMPLES
|
|
The following command creates an external, bidirectional AD trust between
|
|
my-domain.com and target-domain.com.
|
|
|
|
$ gcloud beta active-directory domains trusts create my-domain.com \
|
|
--target-domain-name=target-domain.com \
|
|
--target-dns-ip-addresses=10.177.0.2 --type=EXTERNAL \
|
|
--direction=BIDIRECTIONAL --selective-authentication=false \
|
|
--async
|
|
|
|
POSITIONAL ARGUMENTS
|
|
Domain resource - Name of the Managed Microsoft AD domain you want to
|
|
create an AD trust from. This represents a Cloud resource. (NOTE) Some
|
|
attributes are not given arguments in this group but can be set in other
|
|
ways.
|
|
|
|
To set the project attribute:
|
|
◆ provide the argument domain on the command line with a fully
|
|
specified name;
|
|
◆ provide the argument --project on the command line;
|
|
◆ set the property core/project.
|
|
|
|
This must be specified.
|
|
|
|
DOMAIN
|
|
ID of the domain or fully qualified identifier for the domain.
|
|
|
|
To set the domain attribute:
|
|
▸ provide the argument domain on the command line.
|
|
|
|
REQUIRED FLAGS
|
|
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
|
|
Target DNS server IP addresses that can resolve the target domain.
|
|
|
|
Only IPv4 is supported.
|
|
|
|
--target-domain-name=TARGET_DOMAIN_NAME
|
|
Target domain name for the Managed Microsoft AD Trust.
|
|
|
|
OPTIONAL FLAGS
|
|
--async
|
|
Return immediately, without waiting for the operation in progress to
|
|
complete.
|
|
|
|
--direction=DIRECTION; default="BIDIRECTIONAL"
|
|
Direction of the trust.
|
|
|
|
Must be one of: INBOUND, OUTBOUND, BIDIRECTIONAL. Default is
|
|
BIDIRECTIONAL.
|
|
|
|
DIRECTION must be one of: bidirectional, inbound, outbound,
|
|
trust-direction-unspecified.
|
|
|
|
--handshake-secret=HANDSHAKE_SECRET
|
|
Trust handshake secret with target domain. The secret will not be
|
|
stored. If not specified, command will prompt user for secret.
|
|
|
|
--selective-authentication
|
|
If specified, trusted side will only have selective access to approved
|
|
set of resources.
|
|
|
|
Otherwise, the trusted side has forest/domain wide access. Default is
|
|
false.
|
|
|
|
--type=TYPE; default="FOREST"
|
|
Type of the trust. Must be FOREST or EXTERNAL. Default is FOREST. TYPE
|
|
must be one of: external, forest, trust-type-unspecified.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
API REFERENCE
|
|
This command uses the managedidentities/v1 API. The full documentation for
|
|
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
|
|
|
|
NOTES
|
|
This command is currently in beta and might change without notice. These
|
|
variants are also available:
|
|
|
|
$ gcloud active-directory domains trusts create
|
|
|
|
$ gcloud alpha active-directory domains trusts create
|
|
|