gcloud network-security firewall-endpoint-associations create

NAME

gcloud network-security firewall-endpoint-associations create - create a Firewall Plus endpoint association

SYNOPSIS

gcloud network-security firewall-endpoint-associations create [ASSOCIATION_ID] --network=NETWORK --zone=ZONE (--endpoint=ENDPOINT : --endpoint-zone=ENDPOINT_ZONE --organization=ORGANIZATION) [--async] [--labels=[KEY=VALUE,…]] [--max-wait=MAX_WAIT; default="60m"] [--tls-inspection-policy=TLS_INSPECTION_POLICY : --tls-inspection-policy-project=TLS_INSPECTION_POLICY_PROJECT --tls-inspection-policy-region=TLS_INSPECTION_POLICY_REGION] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Associate the specified network with the firewall endpoint. Successful creation of a firewall endpoint association results in an association in READY state. Check the progress of association creation by using gcloud network-security firewall-endpoint-associations list.

For more examples, refer to the EXAMPLES section below.

EXAMPLES

To associate a network with a firewall endpoint, run:

gcloud network-security firewall-endpoint-associations create --network=projects/my-project/networks/global/myNetwork --endpoint=organizations/1234/locations/us-central1-a/firewallEndpoints/my-endpoint --zone=us-central1-a --project=my-project

POSITIONAL ARGUMENTS

[ASSOCIATION_ID]

Name to give the association. If not specified, an auto-generated UUID will be used.

REQUIRED FLAGS

Network resource - Firewall Plus. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

• provide the argument --network on the command line with a fully specified name;
• provide the argument --project on the command line;
• set the property core/project.

This must be specified.

--network=NETWORK

ID of the network or fully qualified identifier for the network.

To set the network-name attribute:

• provide the argument --network on the command line.

--zone=ZONE

Zone of a firewall endpoint association

Firewall endpoint resource - Firewall Plus. The arguments in this group can be used to specify the attributes of this resource.

This must be specified.

--endpoint=ENDPOINT

ID of the firewall endpoint or fully qualified identifier for the firewall endpoint.

To set the endpoint-name attribute:

• provide the argument --endpoint on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--endpoint-zone=ENDPOINT_ZONE

Zone of the firewall endpoint.

To set the endpoint-zone attribute:

• provide the argument --endpoint on the command line with a fully specified name;
• provide the argument --endpoint-zone on the command line;
• provide the argument --zone on the command line;
• provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command line with a fully specified name.

--organization=ORGANIZATION

Organization ID to which the changes should apply.

To set the organization attribute:

• provide the argument --endpoint on the command line with a fully specified name;
• provide the argument --organization on the command line.

OPTIONAL FLAGS

--async

Return immediately, without waiting for the operation in progress to complete. The default is True. Enabled by default, use --no-async to disable.

--labels=[KEY=VALUE,…]

List of label KEY=VALUE pairs to add.

Keys must start with a lowercase character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers.

--max-wait=MAX_WAIT; default="60m"

Time to synchronously wait for the operation to complete, after which the operation continues asynchronously. Ignored if --no-async isn't specified. See $ gcloud topic datetimes for information on time formats.

TLS Inspection Policy resource - Path to TLS Inspection Policy configuration to use for intercepting TLS-encrypted traffic in this network. The arguments in this group can be used to specify the attributes of this resource.

--tls-inspection-policy=TLS_INSPECTION_POLICY

ID of the TLS Inspection Policy or fully qualified identifier for the TLS Inspection Policy.

To set the tls_inspection_policy attribute:

• provide the argument --tls-inspection-policy on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--tls-inspection-policy-project=TLS_INSPECTION_POLICY_PROJECT

Project of the TLS Inspection Policy.

To set the tls-inspection-policy-project attribute:

• provide the argument --tls-inspection-policy on the command line with a fully specified name;
• provide the argument --tls-inspection-policy-project on the command line;
• provide the argument --project on the command line;
• provide the argument FIREWALL_ENDPOINT_ASSOCIATION on the command line with a fully specified name.

--tls-inspection-policy-region=TLS_INSPECTION_POLICY_REGION

Region of the TLS Inspection Policy. NOTE: TLS Inspection Policy needs to be in the same region as Firewall Plus endpoint resource. To set the tls-inspection-policy-region attribute:

• provide the argument --tls-inspection-policy on the command line with a fully specified name;
• provide the argument --tls-inspection-policy-region on the command line.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

gcloud alpha network-security firewall-endpoint-associations create

gcloud beta network-security firewall-endpoint-associations create