gcloud beta workspace-key-access configs create

NAME
gcloud beta workspace-key-access configs create - create a Workspace Key Access config
SYNOPSIS
gcloud beta workspace-key-access configs create (CONFIG : --location=LOCATION) --admin-emails=[ADMIN_EMAILS,…] --customer-id=CUSTOMER_ID --idp-configs=[additionalAudiences=ADDITIONALAUDIENCES],[audience=AUDIENCE],[idpType=IDPTYPE],[issuer=ISSUER],[jwksUri=JWKSURI] --kacls-owner-domains=[KACLS_OWNER_DOMAINS,…] [--annotations=[ANNOTATIONS,…]] [--async] [--labels=[LABELS,…]] [--request-id=REQUEST_ID] [--tags=[TAGS,…]] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
(BETA) Create a Workspace Key Access config in a given project and location.
EXAMPLES
To create config my-config in us-east1, run:
gcloud beta workspace-key-access configs create my-config --location=us-east1 --customer-id=C0123abcd --admin-emails=admin@example.com --kacls-owner-domains=example.com --idp-configs=issuer=https://idp.example.com,audience=my-audience,jwksUri=https://idp.example.com/.well-known/\
jwks.json,idpType=PRIMARY_IDP
POSITIONAL ARGUMENTS
Config resource - Identifier. name of resource The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

  • provide the argument config on the command line with a fully specified name;
  • provide the argument --project on the command line;
  • set the property core/project.

This must be specified.

CONFIG
ID of the config or fully qualified identifier for the config.

To set the config attribute:

  • provide the argument config on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION
The location id of the config resource.

To set the location attribute:

  • provide the argument config on the command line with a fully specified name;
  • provide the argument --location on the command line.
REQUIRED FLAGS
--admin-emails=[ADMIN_EMAILS,…]
Email addresses of administrators for this workspace configuration.
--customer-id=CUSTOMER_ID
Customer ID.
--idp-configs=[additionalAudiences=ADDITIONALAUDIENCES],[audience=AUDIENCE],[idpType=IDPTYPE],[issuer=ISSUER],[jwksUri=JWKSURI]
Required, The Identity Provider configurations.
additionalAudiences
The expected additional audiences in the JWTs.
audience
The expected audience in the JWTs.
idpType
The type of the IdP.
issuer
The issuer of the IdP.
jwksUri
The JSON Web Key Set (JWKS) URI of the IdP.
Shorthand Example:
--idp-configs=additionalAudiences=[string],audience=string,idpType=string,issuer=string,jwksUri=string --idp-configs=additionalAudiences=[string],audience=string,idpType=string,issuer=string,jwksUri=string

JSON Example:

--idp-configs='[{"additionalAudiences": ["string"], "audience": "string", "idpType": "string", "issuer": "string", "jwksUri": "string"}]'

File Example:

--idp-configs=path_to_file.(yaml|json)
--kacls-owner-domains=[KACLS_OWNER_DOMAINS,…]
List of allowed Google Workspace customer domains where the KACLS is registered.
OPTIONAL FLAGS
--annotations=[ANNOTATIONS,…]
Annotations as key value pairs.
KEY
Sets KEY value.
VALUE
Sets VALUE value.
Shorthand Example:
--annotations=string=string

JSON Example:

--annotations='{"string": "string"}'

File Example:

--annotations=path_to_file.(yaml|json)
--async
Return immediately, without waiting for the operation in progress to complete.
--labels=[LABELS,…]
Labels as key value pairs.
KEY
Keys must start with a lowercase character and contain only hyphens (-), underscores (_), lowercase characters, and numbers.
VALUE
Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers.
Shorthand Example:
--labels=string=string

JSON Example:

--labels='{"string": "string"}'

File Example:

--labels=path_to_file.(yaml|json)
--request-id=REQUEST_ID
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request.

For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments.

The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).

--tags=[TAGS,…]
Tag bindings as key value pairs.
KEY
Sets KEY value.
VALUE
Sets VALUE value.
Shorthand Example:
--tags=string=string

JSON Example:

--tags='{"string": "string"}'

File Example:

--tags=path_to_file.(yaml|json)
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE
This command uses the workspacekeyaccess/v1beta API. The full documentation for this API can be found at: https://docs.cloud.google.com/kms/docs/hsm-for-workspace
NOTES
This command is currently in beta and might change without notice.