gcloud beta access-context-manager perimeters dry-run describe - display the dry-run mode configuration for a Service Perimeter
gcloud beta access-context-manager perimeters dry-run describe (PERIMETER : --policy=POLICY) [GCLOUD_WIDE_FLAG ...]
(BETA) The dry-run mode configuration is presented as a diff against the enforcement mode configuration. '+' indicates additions in spec,'-' indicates removals from status and entries without either of those indicate that they are the same across the dry-run and the enforcement mode configurations. When a particular field is completely empty, it will not be displayed.
Note: When this command is executed on a Service Perimeter with no explicit dry-run mode configuration, the effective dry-run mode configuration is inherited from the enforcement mode configuration, and thus, the enforcement mode configuration is displayed in such cases.
To display the dry-run mode configuration for a Service Perimeter:
$ gcloud beta access-context-manager perimeters dry-run describe \ my-perimeter
Sample output:
=== name: my_perimeter title: My Perimeter type: PERIMETER_TYPE_REGULAR resources: + projects/123 - projects/456 projects/789 restrictedServices: + bigquery.googleapis.com - storage.googleapis.com bigtable.googleapis.com vpcAccessibleServices: + allowedServices: + bigquery.googleapis.com - storage.googleapis.com + enableRestriction: true
- Perimeter resource - The service perimeter to describe. The arguments in this
group can be used to specify the attributes of this resource.
This must be specified.
- PERIMETER
ID of the perimeter or fully qualified identifier for the perimeter. To set the perimeter attribute:
provide the argument perimeter on the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- --policy=POLICY
The ID of the access policy. To set the policy attribute:
provide the argument perimeter on the command line with a fully specified name;
provide the argument --policy on the command line;
set the property access_context_manager/policy.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command is currently in beta and might change without notice. These variants are also available:
$ gcloud access-context-manager perimeters dry-run describe
$ gcloud alpha access-context-manager perimeters dry-run describe