mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-08 18:45:13 +00:00
113 lines
3.9 KiB
Text
113 lines
3.9 KiB
Text
NAME
|
|
gcloud alpha access-context-manager levels create - create a new access
|
|
level
|
|
|
|
SYNOPSIS
|
|
gcloud alpha access-context-manager levels create (LEVEL : --policy=POLICY)
|
|
--title=TITLE
|
|
(--custom-level-spec=CUSTOM_LEVEL_SPEC
|
|
| [--basic-level-spec=BASIC_LEVEL_SPEC
|
|
: --combine-function=COMBINE_FUNCTION; default="and"]) [--async]
|
|
[--description=DESCRIPTION] [GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
(ALPHA) Create a new access level in a given access policy.
|
|
|
|
POSITIONAL ARGUMENTS
|
|
Level resource - The access level to create. The arguments in this group
|
|
can be used to specify the attributes of this resource.
|
|
|
|
This must be specified.
|
|
|
|
LEVEL
|
|
ID of the level or fully qualified identifier for the level.
|
|
|
|
To set the level attribute:
|
|
▸ provide the argument level on the command line.
|
|
|
|
This positional argument must be specified if any of the other
|
|
arguments in this group are specified.
|
|
|
|
--policy=POLICY
|
|
The ID of the access policy.
|
|
|
|
To set the policy attribute:
|
|
▸ provide the argument level on the command line with a fully
|
|
specified name;
|
|
▸ provide the argument --policy on the command line;
|
|
▸ set the property access_context_manager/policy;
|
|
▸ automatically, if the current account belongs to an organization
|
|
with exactly one access policy..
|
|
|
|
REQUIRED FLAGS
|
|
--title=TITLE
|
|
Short human-readable title of the access level.
|
|
|
|
Level specification.
|
|
|
|
Exactly one of these must be specified:
|
|
|
|
Custom level specification.
|
|
|
|
--custom-level-spec=CUSTOM_LEVEL_SPEC
|
|
Path to a file representing an expression that represents an access
|
|
level.
|
|
|
|
The expression is in the Common Expression Language (CEL) format.
|
|
For example:
|
|
|
|
expression: "origin.region_code in ['US', 'CA']"
|
|
|
|
Basic level specification.
|
|
|
|
--basic-level-spec=BASIC_LEVEL_SPEC
|
|
Path to a file containing a list of basic access level conditions.
|
|
|
|
An access level condition file is a YAML-formatted list of
|
|
conditions, which are YAML objects representing a Condition as
|
|
described in the API reference. For example:
|
|
|
|
- ipSubnetworks:
|
|
- 162.222.181.197/24
|
|
- 2001:db8::/48
|
|
- members:
|
|
- user:user@example.com
|
|
|
|
This flag argument must be specified if any of the other arguments
|
|
in this group are specified.
|
|
|
|
--combine-function=COMBINE_FUNCTION; default="and"
|
|
For a basic level, determines how conditions are combined.
|
|
COMBINE_FUNCTION must be one of: and, or.
|
|
|
|
OPTIONAL FLAGS
|
|
--async
|
|
Return immediately, without waiting for the operation in progress to
|
|
complete.
|
|
|
|
--description=DESCRIPTION
|
|
Long-form description of access level.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
API REFERENCE
|
|
This command uses the accesscontextmanager/v1alpha API. The full
|
|
documentation for this API can be found at:
|
|
https://cloud.google.com/access-context-manager/docs/reference/rest/
|
|
|
|
NOTES
|
|
This command is currently in alpha and might change without notice. If this
|
|
command fails with API permission errors despite specifying the correct
|
|
project, you might be trying to access an API with an invitation-only early
|
|
access allowlist. These variants are also available:
|
|
|
|
$ gcloud access-context-manager levels create
|
|
|
|
$ gcloud beta access-context-manager levels create
|
|
|