gcloud vmware network-policies create

NAME: gcloud vmware network-policies create - create a VMware Engine network policy
SYNOPSIS: gcloud vmware network-policies create (NETWORK_POLICY : --location=LOCATION) --edge-services-cidr=EDGE_SERVICES_CIDR --vmware-engine-network=VMWARE_ENGINE_NETWORK [--async] [--description=DESCRIPTION] [--external-ip-access] [--internet-access] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: Create a VMware Engine network policy. Only one network policy applies to a VMware Engine network per region. Check the progress of a network policy creation using gcloud vmware network-policies list.
EXAMPLES: To create a network policy called my-network-policy which connects to the VMware Engine network my-vmware-engine-network using the edge services address range 192.168.0.0/26 with the internet access service enabled and the external IP access service disabled, run:
gcloud vmware network-policies create my-network-policy --location=us-west2 --project=my-project --vmware-engine-network=my-vmware-engine-network --edge-services-cidr=192.168.0.0/26 --internet-access --no-external-ip-access

Or:
gcloud vmware network-policies create my-network-policy --vmware-engine-network=my-vmware-engine-network --edge-services-cidr=192.168.0.0/26 --internet-access

In the second example, the project and the location are taken from gcloud properties core/project and compute/region respectively. If the --external-ip-access flag is not specified, it is taken as False.
POSITIONAL ARGUMENTS: VMware Engine Network Policy resource - network_policy. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.
To set the project attribute:

provide the argument network_policy on the command line with a fully specified name;

provide the argument --project on the command line;

set the property core/project.

This must be specified.

NETWORK_POLICY

ID of the VMware Engine Network Policy or fully qualified identifier for the VMware Engine Network Policy.
To set the network-policy attribute:

provide the argument network_policy on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION

The resource name of the location.
To set the location attribute:

provide the argument network_policy on the command line with a fully specified name;

provide the argument --location on the command line;

set the property compute/region.
REQUIRED FLAGS: --edge-services-cidr=EDGE_SERVICES_CIDR

IP address range to use for internet access and external IP access gateways, in CIDR notation. An RFC 1918 CIDR block with a "/26" prefix is required.

--vmware-engine-network=VMWARE_ENGINE_NETWORK

Resource ID of the VMware Engine network to attach the new policy to.
OPTIONAL FLAGS: --async

Return immediately, without waiting for the operation in progress to complete. The default is True. Enabled by default, use --no-async to disable.

--description=DESCRIPTION

User-provided description of the network policy.

--external-ip-access

Enable or disable network service that allows external IP addresses to be assigned to VMware workloads. To enable this service, internet-access must also be enabled. Use --no-external-ip-access to disable. If the flag is not provided, access to VMware workloads through external IP addresses is disabled.

--internet-access

Enable or disable network service that allows VMware workloads to access the internet. Use --no-internet-access to disable. If the flag is not provided, internet access is disabled.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.