gcloud alpha compute network-policies traffic-classification-rules update

NAME

gcloud alpha compute network-policies traffic-classification-rules update - updates a Compute Engine network policy rule

SYNOPSIS

gcloud alpha compute network-policies traffic-classification-rules update --network-policy=NETWORK_POLICY --priority=PRIORITY [--action=ACTION] [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,…]] [--[no-]disabled] [--dscp-mode=DSCP_MODE] [--dscp-value=DSCP_VALUE] [--layer4-configs=[LAYER4_CONFIG,…]] [--network-policy-region=NETWORK_POLICY_REGION] [--new-priority=NEW_PRIORITY] [--src-ip-ranges=[SRC_IP_RANGE,…]] [--target-secure-tags=[TARGET_SECURE_TAGS,…]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,…]] [--traffic-class=TRAFFIC_CLASS] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) gcloud alpha compute network-policies traffic-classification-rules update is used to update network policy rules.

EXAMPLES

To update a rule with priority 10 in a network policy with name my-policy to change the description to new example rule, run:

gcloud alpha compute network-policies traffic-classification-rules update --priority=10 --network-policy=my-policy --description="new example rule"

REQUIRED FLAGS

--network-policy=NETWORK_POLICY

Network policy ID with which to update rule.

--priority=PRIORITY

Priority of the rule to be updated. Valid in [1, 2147482547].

OPTIONAL FLAGS

--action=ACTION

Action to take if the request matches the match condition. ACTION must be (only one value is supported): apply_traffic_classification.

--description=DESCRIPTION

An optional, textual description for the rule.

--dest-ip-ranges=[DEST_IP_RANGE,…]

Destination IP ranges to match for this rule.

--[no-]disabled

Use this flag to disable the rule. Disabled rules will not affect traffic. Use --disabled to enable and --no-disabled to disable.

--dscp-mode=DSCP_MODE

When set to AUTO, the DSCP value will be picked automatically based on selected traffic class. Otherwise, DSCP value must be specified. DSCP_MODE must be one of: auto, custom.

--dscp-value=DSCP_VALUE

Custom DSCP value from 0-63 range.

--layer4-configs=[LAYER4_CONFIG,…]

A list of destination protocols and ports to which the network policy rule will apply.

--network-policy-region=NETWORK_POLICY_REGION

Region of the network policy to operate on. Overrides the default compute/region property value for this command invocation.

--new-priority=NEW_PRIORITY

New priority for the rule to update. Valid priority range: [1, 2147482547].

--src-ip-ranges=[SRC_IP_RANGE,…]

CIDR IP address range.

--target-secure-tags=[TARGET_SECURE_TAGS,…]

An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name

--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,…]

List of target service accounts for the rule.

--traffic-class=TRAFFIC_CLASS

The traffic class that be applied to matching packet. TRAFFIC_CLASS must be one of: tc1, tc2, tc3, tc4, tc5, tc6.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist.