xe SrSSKJr SSKJr SSKJr SSKrSSKrSSKrSSKrSSK J r SSK J r SSK J r SS K J r SS K Jr SS K Jr SS K Jr SS KJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJr SSKJ!r" SSK#J$r% SSK&J'r' SSK(J)r) SSK*J+r+ SSK*J,r, SSK*J-r. SSK/r/Sr0SSS.r1S S!/r2S S!/r3S"r4S#r5S$r6S%r7S&r8\ Rr"S'S(\RtS)\0S*9r;\ Rr"S'S(S+\RtS)\0S,9r<\ Rr"S'S-\RtS)\0S.S/9r=\ Rr"S'S-\RtS)\ R`S.S/9r>\ Rr"S'S(\RtS)\ R`S+S/9r?\ RRS'\"RRS)05rDS0rES1rFS2rGS3rHSS4jrISS5jrJSS6jrKSS7jrLS8rMS9rNS:rOSS;jrPS<rQS=rRS>rSS?rTS@rUSArVSBrWSCrXSDrYSErZSFr[SSGjr\SSHjr]SSIjr^SJr_SSKjr`SLraSMrbSNrcSOrdSSPjreSQrfSRrgSSrhSSTjriSSUjrjSVrkSWrlSXrmSYrnSZroS[rpS\rqSS]jrrS^rsSS_jrtSS`jruSSajrvSbrwSScjrxSSdjrySSejrzSSfjr{Sgr|SShjr}Sir~SjrSSkjrSSljrSmrSnrSSojrSprSSqjrSSrjrSSsjrSStjrSSujrSvrSwrSxrSyrSzrS{rS|rS}rS~rSrSSjrSrSrSrSrSrSrSrSrSrSSjrSSjrSrSSSjjrSrSrSrSSjrSrSSjrSSjrSrSrSSjrSrSrSrSrSSjrSrSSjrSrSSjrSrSrSrSrSrSrSrSSjrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrg)z8Flags and helpers for the compute VM instances commands.)absolute_import)division)unicode_literalsN) constants)containers_utils) csek_utils) disks_util) image_utils) kms_utils)utils)service)apis)actions) arg_parsers)base) exceptions) completers)flags)scope) resource_args) arg_utils) labels_util)log) properties) resourcesaIf not specified, you might be prompted to select a zone (interactive mode only). `gcloud` attempts to identify the appropriate zone by searching for resources in your currently active project. If the zone cannot be determined, `gcloud` prompts you for a selection with all available Google Cloud Platform zones. To avoid prompting when this flag is omitted, the user can set the ``compute/zone'' property: $ gcloud config set compute/zone ZONE A list of zones can be fetched by running: $ gcloud compute zones list To unset the property, run: $ gcloud config unset compute/zone Alternatively, the zone can be stored in the environment variable ``CLOUDSDK_COMPUTE_ZONE''. zThe instances should be migrated to a new host. This will temporarily impact the performance of instances during a migration event.z#The instances should be terminated.)MIGRATE TERMINATENVMESCSIz3name=NAME [mode={ro,rw}] [device-name=DEVICE_NAME] zKname=NAME [mode={ro,rw}] [device-name=DEVICE_NAME] [scope={zonal,regional}]aE table( name, zone.basename(), machineType.machine_type().basename(), scheduling.preemptible.yesno(yes=true, no=''), networkInterfaces[].networkIP.notnull().list():label=INTERNAL_IP, networkInterfaces[].accessConfigs[0].natIP.notnull().list() :label=EXTERNAL_IP, status )a+table( name, zone.basename(), networkInterfaces[].stackType.notnull().list(), networkInterfaces[].ipv6AccessConfigs[0].externalIpv6.notnull().list():label=EXTERNAL_IPV6, networkInterfaces[].ipv6Address.notnull().list():label=INTERNAL_IPV6)a table( name, zone.basename(), machineType.machine_type().basename(), scheduling.preemptible.yesno(yes=true, no=''), networkInterfaces.internal_ip():label=INTERNAL_IP, external_ip():label=EXTERNAL_IP, status )instance instance_namecompute.instances) resource_namename completerzonal_collectionzone_explanationF)r#r$requiredr%r&r'instance_namesT)r#r$r%r&r'pluralc"U(dgURS5(dgUSVs/sHDnURS5(dMUSSRS5(dM9USSSPMF nnUSVs/sHpnURS5(dMUSSRS5(dM9USSRS5(dMWUSSSS USSS3PMr nnS RX#-5$s snfs snf) zFTransforms an instance resource to collect IPv4 and IPv6 external IPs.networkInterfaces accessConfigsrnatIPipv6AccessConfigs externalIpv6externalIpv6PrefixLength/ getjoin)resourceripv4_external_ipsipv6_external_ipss 9lib/googlecloudsdk/command_lib/compute/instances/flags.pyTransformInstanceExternalIpr=sE  ) * * +,,!  %$%o$6q$9$=$=g$F%aG$,+,,! " #m   # ' ' 7m   # ' '(B C m   "> 231Q7J5KA5NOi5j4kl, $8 99 s)DD#D;D D 7D D c@U(dgUVs/sH nURS5(dMUSPM" nnUVs/sH@nURS5(dMURS5(dM3USSUS3PMB nnSRX#-5$s snfs snf)zWTransforms a list of network interface resources to collect IPv4 and IPv6 internal IPs.r, networkIP ipv6AddressinternalIpv6PrefixLengthr3r4r5)r8r9ipv4_internal_ipsipv6_internal_ipss r<TransformInstanceInternalIprDs  ! { a n! } <"#%%(B"C<= !A89:; $8 99 sB BBB0Bc8[R"[U5$N) functoolspartialInstanceZoneScopeLister)compute_clients r<GetInstanceZoneScopeListerrKs   2N CCcURnUSn[RRRR SS9nUR RSURSRU5U[RS94n/nURU/US9n/n U(ay[R"SRU55 [RR!S RS R#U555 [$R&"X5n OU(dj[R"SRU55 [RR!S RU55 [$R&"X5n O`UHZn [(R*R-U R.S S U0S9n U R1UR3U R55S95 M\ [6R8R:U 0$)z3Scope lister for zones of underspecified instances.rTr(AggregatedListz name eq ^{0}$)filterproject maxResults)errors_to_collectz+Errors fetching filtered aggregate list: {}z2Error fetching possible zones for instance: [{0}]., z+Unable to find an instance with name [{0}].z compute.zonesrQ collectionparams)r$)messagesrVALUEScorerQGetapitools_client instances%ComputeInstancesAggregatedListRequestformatrMAX_RESULTS_PER_PAGE MakeRequestsrdebugstatusPrintr7 zones_serviceListcore_resourcesREGISTRYParsezoneappendZoneName compute_scope ScopeEnumZONE) rJ_underspecified_namesrXr!rQrequesterrorsmatching_instanceszonesirjs r<rIrIs  $ $(&q)-    " " * * . . . ='  + + 5 57G  ; ;'..}= %::<< =' &%22G9EK3M % II<CCFKLJJ<CC II* + -.   ~ 7E II<CCFKLJJ5<<]KM   ~ 7E   $ $ * * &&_i5I+Kd ll8==diik=23   ! ! & & ..rLc X[R"SS[RUS[S9$)Nr z--next-hop-instancer")r#r$r%r(r&r') compute_flagsResourceArgumentcompute_completersInstancesCompleterZONE_PROPERTY_EXPLANATIONrNs r<InstanceArgumentForRouter~s-  ' ' "55*0  22rLc x[R"SS[RUSSR U5[ S9$)Nr --instancer"z4Router appliance instance of the BGP peer being {0}.r#r$r%r(r& short_helpr'ryrzr{r|r_r})r(operation_types r<InstanceArgumentForRouterrs>  ' ' "55*GNN 0 22rLc R[R"SS[RUSSSS9$)Nr rr"zFThe name of the virtual machine instance that will handle the traffic.z5If not specified, it will be set to the same as zone.r)ryrzr{r|rNs r<!InstanceArgumentForTargetInstancers7  ' ' "55*! B D DrLc [R"SS[RUSSR U5S[R S9$)Nr z --instancesr"z5Specifies a list of instances to {0} the target pool.T)r#r$r%r(r&rr*r'r)actionr(s r<InstanceArgumentForTargetPoolr sD  ' ' "55*I6&> $>> @ @rLc [R"SS[RS[RR SSSS9$)zKMakeSourceInstanceTemplateArg. Returns: compute_flags.ResourceArgument --source-instance-templatezinstance templateFzcompute.instanceTemplateszcompute.regionInstanceTemplateszThe name of the instance template that the instance will be created from. An instance template can be a global/regional resource. Users can override instance properties using other flags.)r$r#r%r(scope_flags_usageglobal_collectionregional_collectionr)ryrzr{InstanceTemplatesCompleterScopeFlagsUsageDONT_USE_SCOPE_FLAGSrLr<MakeSourceInstanceTemplateArgr-sC  ' ' ''"==%55JJ3;  rLc P[R"SS[RSSSS9$)Nz--source-machine-imagez machine imageFzcompute.machineImageszEThe name of the machine image that the instance will be created from.)r$r#r%r(rr)ryrzr{MachineImagesCompleterrrLr<AddMachineImageArgrEs/  ' ' ##"99/%  ''rLc\URSSSR[RS9S9 g)Nz$--source-machine-image-csek-key-fileFILEz Path to a Customer-Supplied Encryption Key (CSEK) key file, mapping resources to user managed keys which were used to encrypt the source machine-image. See {csek_help} for more details. ) csek_helpmetavarhelp) add_argumentr_r CSEK_HELP_URLparsers r<"AddSourceMachineImageEncryptionKeyrPs4,  &:33& 4 6rLcSnUR5nUR5nURSUSS9 [R"U5 URSSR [ RS9S9 U(aURS S S9 U(aURS S S9 U(a[R"U5 U(aURS SSS9 gg)zFAdds arguments related to images for instances and instance-templates.cg)z1Returns the detailed help for the `--image` flag.aR Specifies the boot image for the instances. For each instance, a new boot disk will be created from the given image. Each boot disk will have the same name as the instance. To view a list of public images and projects, run `$ gcloud compute images list`. It is best practice to use `--image` when a specific version of an image is needed. When using this option, ``--boot-disk-device-name'' and ``--boot-disk-size'' can be used to override the boot disk's device name and size, respectively. rrrLr< AddImageHelp"AddImageArgs..AddImageHelpcs rLz--imageIMAGE)rrz--image-familya The image family for the operating system that the boot disk will be initialized with. Compute Engine offers multiple Linux distributions, some of which are available as both regular and Shielded VM images. When a family is specified instead of an image, the latest non-deprecated image associated with that family is used. It is best practice to use `--image-family` when the latest version of an image is needed. By default, ``{default_image_family}'' is assumed for this flag. )default_image_familyrz--source-snapshotas The name of the source disk snapshot that the instance boot disk will be created from. You can provide this as a full URL to the snapshot or just the snapshot name. For example, the following are valid values: * https://compute.googleapis.com/compute/v1/projects/myproject/global/snapshots/snapshot * snapshot z--source-instant-snapshotab The name of the source disk instant snapshot that the instance boot disk will be created from. You can provide this as a full URL to the instant snapshot. For example, the following is a valid value: * https://compute.googleapis.com/compute/v1/projects/myproject/zones/my-zone/instantSnapshots/instant-snapshot z--source-snapshot-regionSOURCE_SNAPSHOT_REGIONz Sets the region for the `--source-snapshot` flag. By default, when specifying a snapshot, the global snapshot scope is used. Use this flag to override this behavior to use regionally scoped snapshots.rN) add_groupadd_mutually_exclusive_grouprr AddImageProjectFlagr_rDEFAULT_IMAGE_FAMILYAddImageFamilyScopeFlag)renable_snapshotssupport_image_family_scopeenable_instant_snapshotssupport_source_snapshot_regionrimage_parent_group image_groups r< AddImageArgsrZs '')"??A+ 9<I !!"45   &i&D&D& E G   #   ''(:;###"(Q$$rLc&URSSSS9 g)Nz--can-ip-forward store_truezsIf provided, allows the instances to send and receive packets with non-matching destination or source IP addresses.rrrrs r<AddCanIpForwardArgsrs"  DFrLcz[R"SU5n[U5RR U5 gNcompute)rGetMessagesModule(GetPrivateIpv6GoogleAccessTypeFlagMapper choice_arg AddToParserr api_versionrXs r<AddPrivateIpv6GoogleAccessArgrs0  # #I{ ;(*84??KK rLc8[R"SSSSS.SS9$)N--maintenance-intervalc"UR5$rFupperxs r<(AddMaintenanceInterval..s QWWYrLzVMs receive infrastructure and hypervisor updates on a periodic basis, minimizing the number of maintenance operations (live migrations or terminations) on an individual VM. Security updates will still be applied as soon as they are available.aVMs receive infrastructure and hypervisor updates on a periodic basis, minimizing the number of maintenance operations (live migrations or terminations) on an individual VM. This may mean a VM will take longer to receive an update than if it was configured for AS_NEEDED. Security updates will still be applied as soonas they are available. RECURRENT is used for GEN3 and Sliceof Hardware VMs.)PERIODIC RECURRENTzP Specifies how infrastructure upgrades should be applied to the VM. )typechoicesr)rArgumentrrLr<AddMaintenanceIntervalrs-  ( / rLcT[R"S[R"5SS9$)Nz--maintenance-freeze-durationz Specifies the amount of hours after instance creation where the instance won't be scheduled for maintenance, e.g. `4h`, `2d6h`. See $ gcloud topic datetimes for information on duration formats.rr)rrrDurationrrLr<AddMaintenanceFreezeDurationrs* %    ! M NNrLch[5RU5 [5RU5 g)z"Add flags related to Stable Fleet.N)rrrrs r<AddStableFleetArgsrs$&&v. ,,V4rLc`[R"SURRSSSS.SS9$Nz!--private-ipv6-google-access-typezinherit-subnetworkzenable-bidirectional-accesszenable-outbound-vm-access)INHERIT_FROM_SUBNETWORK%ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLE#ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEz/The private IPv6 Google access type for the VM.)custom_mappingshelp_str)rChoiceEnumMapperInstance&PrivateIpv6GoogleAccessValueValuesEnumrXs r<rrs?  # #)>>#+) A B BrLcz[R"SU5n[U5RR U5 gr)rr3GetPrivateIpv6GoogleAccessTypeFlagMapperForTemplaterrrs r<(AddPrivateIpv6GoogleAccessArgForTemplaters-  # #I{ ;(5 ;;v.rLc`[R"SURRSSSS.SS9$r)rrInstancePropertiesrrs r<rrs?  # #)!!HH#+) A B BrLc\URS[R"[SS.S9SSS9 g) =Adds local SSD argument for instances and instance-templates. --local-ssdc"UR5$rFrrs r<r!AddLocalSsdArgs..s !'')rL) device-name interfacespecrka) Attaches a local SSD to the instances. *device-name*::: Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if `interface` is `SCSI`. If omitted, a device name of the form ``local-ssd-N'' will be used. *interface*::: Optional. The kind of disk interface exposed to the VM for this SSD. Valid values are ``SCSI'' and ``NVME''. SCSI is the default and is supported by more guest operating systems. NVME might provide higher performance. rrrNrrArgDictstrrs r<AddLocalSsdArgsrs=    +%   rLcvURS[R"S[R"50S9SSS9 g)z@Adds local NVDIMM argument for instances and instance-templates.z--local-nvdimmsizerrka Attaches a local NVDIMM to the instances. *size*::: Optional. Size of the NVDIMM disk. The value must be a whole number followed by a size unit of ``KB'' for kilobyte, ``MB'' for megabyte, ``GB'' for gigabyte, or ``TB'' for terabyte. For example, ``3TB'' will produce a 3 terabyte disk. Allowed values are: 3TB and 6TB and the default is 3 TB. rN)rrr BinarySizers r<AddLocalNvdimmArgsr!sE     +((*%   rLc URS[R"[S[R"SSS9S.S9SS S 9 g ) rrc"UR5$rFrrs r<r)AddLocalSsdArgsWithSize..As QWWYrL375GB6000GB lower_bound upper_bound)rrrrrka; Attaches a local SSD to the instances. *device-name*::: Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if `interface` is `SCSI`. If omitted, a device name of the form ``local-ssd-N'' will be used. *interface*::: Optional. The kind of disk interface exposed to the VM for this SSD. Valid values are ``SCSI'' and ``NVME''. SCSI is the default and is supported by more guest operating systems. NVME might provide higher performance. *size*::: Optional. The only valid value is ``375GB''. Specify the ``--local-ssd'' flag multiple times if you need multiple ``375GB'' local SSD partitions. You can specify a maximum of 24 local SSDs for a maximum of ``9TB'' attached to an instance. rN)rrrrrrs r<AddLocalSsdArgsWithSizer5sP     .!,,%8   rLcU(agg)zAHelper to get documentation for "device-name" param of disk spec.awAn optional name to display the disk name in the guest operating system. Must be the same as `name` if used with `--container-mount-disk`. If omitted, a device name of the form `persistent-disk-N` is used. If omitted and used with `--container-mount-disk` (where the `name` of the container mount disk is the same as in this flag), a device name equal to disk `name` is used.zAn optional name to display the disk name in the guest operating system. If omitted, a device name of the form `persistent-disk-N` is used.rcontainer_mount_enableds r<GetDiskDeviceNameHelpr ]s  +rLc|[US9n[X5 [[[R"5[[R"5[S.nU(a![US'[R"5US'SR U5nU(aUS- nUR S[R"US9S US 9 g ) zEAdds arguments related to disks for instances and instance-templates.r)r$modebootr auto-deleterrz force-attachaD Attaches an existing disk to the instances. *name*::: The disk to attach to the instances. If you create more than one instance, you can only attach a disk in read-only mode. By default, you attach a zonal disk located in the same zone of the instance. If you want to attach a regional disk, you must specify the disk using its URI; for example, ``projects/myproject/regions/us-central1/disks/my-regional-disk''. *mode*::: The mode of the disk. Supported options are ``ro'' for read-only mode and ``rw'' for read-write mode. If omitted, ``rw'' is used as a default value. If you use ``rw'' when creating more than one instance, you encounter errors. *boot*::: If set to ``yes'', you attach a boot disk. The virtual machine then uses the first partition of the disk for the root file systems. The default value for this is ``no''. *device-name*::: {} *auto-delete*::: If set to ``yes'', the persistent disk is automatically deleted when the instance is deleted. However, if you detach the disk from the instance, deleting the instance doesn't delete the disk. The default value is ``yes''. *interface*::: The interface to use for the disk. The value must be one of the following: * SCSI * NVME a *scope*::: Can be `zonal` or `regional`. If ``zonal'', the disk is interpreted as a zonal disk in the same zone as the instance (default). If ``regional'', the disk is interpreted as a regional disk in the same region as the instance. The default value for this is ``zonal''. *force-attach*::: If ``yes'', this persistent disk will force-attached to the instance even it is already attached to another instance. The default value is 'no'. --diskrrkrN)r AddBootDiskArgsrr ArgBooleanr_rr)renable_regional_disks enable_kmsrdisk_device_name_help disk_arg_spec disk_helps r< AddDiskArgsrns 057&%$$& ++- - M'$/$:$:$   I    M 2   rLcURSSS9 URS[R"SS9SS9 URS S S9 URS S S SS9 URS[R"5SS9 URS[R"5SS9 URSSS9 U(a=/SQn[ UVs/sH o3SU-4PM sn5nSn[ R "USXES9 ggs snf)zAdds boot disk args.--boot-disk-device-namez The name the guest operating system will see for the boot disk. This option can only be specified if a new boot disk is being created (as opposed to mounting an existing persistent disk). r--boot-disk-size1GBra The size of the boot disk. This option can only be specified if a new boot disk is being created (as opposed to mounting an existing persistent disk). The value must be a whole number followed by a size unit of ``KB'' for kilobyte, ``MB'' for megabyte, ``GB'' for gigabyte, or ``TB'' for terabyte. For example, ``10GB'' will produce a 10 gigabyte disk. Disk size must be a multiple of 1 GB. Default size unit is ``GB''. r--boot-disk-typea The type of the boot disk. This option can only be specified if a new boot disk is being created (as opposed to mounting an existing persistent disk). To get a list of available disk types, run `$ gcloud compute disk-types list`. z--boot-disk-auto-deleterTzAAutomatically delete boot disks when their instances are deleted.rdefaultr--boot-disk-provisioned-iopsz Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle. "--boot-disk-provisioned-throughputz Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle. --boot-disk-interfacez Indicates the interface to use for the boot disk. The value must be one of the following: * SCSI * NVME kms-key kms-keyring kms-location kms-projectz --boot-disk---boot-disk-kms-keydiskflag_overridesr$N)rrr BoundedIntdictkms_resource_argsAddKmsKeyResourceArg)rr kms_flagsflagr*r$s r<rrsI     ! !e 4         N P  $  ! ! #   *  ! ! #   II3<=94% &9=?N D**~B  >sC3c/SQn[UVs/sH o"SU-4PM sn5nSn[R"USX4S9 gs snf)Nr"z --instance-z--instance-kms-keyr r))r,r-r.)rr/r0r*r$s r<AddInstanceKmsArgsr2sRG)/8/8t]T !"y. $(( jD s>cf[US9nU(dSOSnU(dSOSnSRUUUS9nU(aUS- nU(a!USRS [RS 9- n0S [_S [_S [_S[_S[_S[ R "SS9_S[_S[_S[ R"5_S[_S[_S[ R"SS9_S[_S[_S[ R"SSS9_S [_nU(a [US!'U(a$[US"'[US#'[US$'[US%'U(a[ R"5US&'U(aUS'- n[US('U(aUS)- n[US*'U (aUS+- n[US,'U(aUS-- n[US.'U(a[ R"5US/'US0- nU (a[ R"5US1'US2- nU (aUS3- n[ R"S4S9US5'U (aGUS6R[R[RS79- n[ R"SSS9US'U (aUS8- n[US9'URS:[ R"US;9S9 g?)@z?Adds create-disk argument for instances and instance-templates.rr,z] Must specify this option if attaching the disk to a container with `--container-mount-disk`.zk It is an error to create a disk in `ro` mode if attaching it to a container with `--container-mount-disk`.a Creates and attaches persistent disks to the instances. *name*::: Specifies the name of the disk. This option cannot be specified if more than one instance is being created.{disk_name} *description*::: Optional textual description for the disk being created. *mode*::: Specifies the mode of the disk. Supported options are ``ro'' for read-only and ``rw'' for read-write. If omitted, ``rw'' is used as a default.{disk_mode} *image*::: Specifies the name of the image that the disk will be initialized with. A new disk will be created based on the given image. To view a list of public images and projects, run `$ gcloud compute images list`. It is best practice to use image when a specific version of an image is needed. If both image and image-family flags are omitted a blank disk will be created. *image-family*::: The image family for the operating system that the boot disk will be initialized with. Compute Engine offers multiple Linux distributions, some of which are available as both regular and Shielded VM images. When a family is specified instead of an image, the latest non-deprecated image associated with that family is used. It is best practice to use --image-family when the latest version of an image is needed. *image-project*::: The Google Cloud project against which all image and image family references will be resolved. It is best practice to define image-project. A full list of available image projects can be generated by running `gcloud compute images list`. * If specifying one of our public images, image-project must be provided. * If there are several of the same image-family value in multiple projects, image-project must be specified to clarify the image to be used. * If not specified and either image or image-family is provided, the current default project is used. *size*::: The size of the disk. The value must be a whole number followed by a size unit of ``KB'' for kilobyte, ``MB'' for megabyte, ``GB'' for gigabyte, or ``TB'' for terabyte. For example, ``10GB'' will produce a 10 gigabyte disk. Disk size must be a multiple of 1 GB. If not specified, the default image size will be used for the new disk. *type*::: The type of the disk. To get a list of available disk types, run $ gcloud compute disk-types list. The default disk type is ``pd-standard''. *device-name*::: {disk_device} *provisioned-iops*::: Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle. Value must be between 10,000 and 120,000. *provisioned-throughput*::: Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle. *disk-resource-policy*::: Resource policy to apply to the disk. Specify a full or partial URL. For example: * ``https://www.googleapis.com/compute/v1/projects/my-project/regions/us-central1/resourcePolicies/my-resource-policy'' * ``projects/my-project/regions/us-central1/resourcePolicies/my-resource-policy'' For more information, see the following docs: * https://cloud.google.com/sdk/gcloud/reference/beta/compute/resource-policies/ * https://cloud.google.com/compute/docs/disks/scheduled-snapshots *auto-delete*::: If ``yes'', this persistent disk will be automatically deleted when the instance is deleted. However, if the disk is later detached from the instance, this option won't apply. The default value for this is ``yes''. *architecture*::: Specifies the architecture or processor type that this disk can support. For available processor types on Compute Engine, see https://cloud.google.com/compute/docs/cpu-platforms. *storage-pool*::: The name of the storage pool in which the new disk is created. The new disk and the storage pool must be in the same location. *interface*::: The interface to use with the disk. The value must be one of the following: * SCSI * NVME ) disk_name disk_mode disk_devicez *boot*::: If ``yes'', indicates that this is a boot disk. The instance will use the first partition of the disk for its root file system. The default value for this is ``no''. a *kms-key*::: Fully qualified Cloud KMS cryptokey name that will protect the {resource}. This can either be the fully qualified path or the name. The fully qualified Cloud KMS cryptokey name format is: ``projects//locations//keyRings// cryptoKeys/''. If the value is not fully qualified then kms-location, kms-keyring, and optionally kms-project are required. See {kms_help} for more details. *kms-project*::: Project that contains the Cloud KMS cryptokey that will protect the {resource}. If the project is not specified then the project where the {resource} is being created will be used. If this flag is set then key-location, kms-keyring, and kms-key are required. See {kms_help} for more details. *kms-location*::: Location of the Cloud KMS cryptokey to be used for protecting the {resource}. All Cloud KMS cryptokeys are reside in a 'location'. To get a list of possible locations run 'gcloud kms locations list'. If this flag is set then kms-keyring and kms-key are required. See {kms_help} for more details. *kms-keyring*::: The keyring which contains the Cloud KMS cryptokey that will protect the {resource}. If this flag is set then kms-location and kms-key are required. See {kms_help} for more details. r()r8kms_help descriptionr image image-familyz image-projectrrrrrr zprovisioned-iopszprovisioned-throughputzdisk-resource-policy) max_length architecturez storage-poollabels:) min_lengthcustom_delim_charrr$r#r&r%r$r ac *source-snapshot*::: The source disk snapshot that will be used to create the disk. You can provide this as a full URL to the snapshot or just the snapshot name. For example, the following are valid values: * https://compute.googleapis.com/compute/v1/projects/myproject/global/snapshots/snapshot * snapshot source-snapshotah *source-snapshot-csek-required*::: The CSK protected source disk snapshot that will be used to create the disk. This can be provided as a full URL to the snapshot or just the snapshot name. Must be specified with `source-snapshot-csek-key-file`. The following are valid values: * https://www.googleapis.com/compute/v1/projects/myproject/global/snapshots/snapshot * snapshot *source-snapshot-csek-key-file*::: Path to a Customer-Supplied Encryption Key (CSEK) key file for the source snapshot. Must be specified with `source-snapshot-csek-required`. zsource-snapshot-csek-key-filea\ *source-instant-snapshot*::: The source disk instant snapshot that will be used to create the disk. You can provide this as a full URL to the instant snapshot. For example, the following is a valid value: * https://compute.googleapis.com/compute/v1/projects/myproject/zones/myzone/instantSnapshots/instantSnapshot source-instant-snapshota *image-csek-required*::: Specifies the name of the CSK protected image that the disk will be initialized with. A new disk will be created based on the given image. To view a list of public images and projects, run `$ gcloud compute images list`. It is best practice to use image when a specific version of an image is needed. If both image and image-family flags are omitted a blank disk will be created. Must be specified with `image-csek-key-file`. *image-csek-key-file*::: Path to a Customer-Supplied Encryption Key (CSEK) key file for the image. Must be specified with `image-csek-required`. zimage-csek-key-filez multi-writera *multi-writer*::: If ``yes'', the disk is created in multi-writer mode so that it can be attached with read-write access to two VMs. The default value is ``no''. The multi-writer feature requires specialized filesystems, among other restrictions. For more information, see https://cloud.google.com/compute/docs/disks/sharing-disks-between-vms. zconfidential-computez *confidential-compute*::: If ``yes'', the disk is created in confidential mode. The default value is ``no''. Encryption with a Cloud KMS key is required to enable this option. a *replica-zones*::: Required for each regional disk associated with the instance. Specify the URLs of the zones where the disk should be replicated to. You must provide exactly two replica zones, and one zone must be the same as the instance zone. z replica-zonesz *labels*::: List of label KEY=VALUE pairs separated by `:` character to add to the disk. Example: `Key1=Value1:Key2=Value2:Key3=Value3`. {KEY_FORMAT_HELP} {VALUE_FORMAT_HELP} )KEY_FORMAT_HELPVALUE_FORMAT_HELPz *source-snapshot-region*::: The region of the source snapshot that will be used to create the disk. You can provide region name to use scoped snapshot as the source snapshot. zsource-snapshot-region --create-diskrrkPROPERTY=VALUErrrrN)r r_r KMS_HELP_URLrrrrintArgListrrErFrr)rrrrsource_snapshot_csek image_csek include_name support_bootsupport_multi_writersupport_replica_zonesenable_source_instant_snapshotsenable_confidential_computesupport_disk_labelsrrdisk_name_extra_helpdisk_mode_extra_helprrs r<AddCreateDiskArgsrX sk$057#:6$;FU j &$$'  k t I  ( P &I$:$:  s!!'H!I, . )     ! ! #    24  rLc /nURnURnURURSUR UR 5UR URS94/US9nU(a[R"USS9 US$)zReturns the address resource corresponding to the given reference. Args: compute_client: GCE API client, address_ref: resource reference to reserved IP address Returns: GCE reserved IP address resource r[)addressrQregion)requestsrSz!Could not fetch address resource.) error_messager) rXr\ra addressesComputeAddressesGetRequestrmrQrar RaiseToolException)rJ address_refrtrXrress r< _GetAddressribs &  $ $(  * *'##""E44(--/(00'..5012  $ #  AC Q-rLcU(dg[R"[R"U55 U$![a Of=f[ XU5n[ X5nUR$)aZResolves the --address flag value. If the value of --address is a name, the regional address is queried. Args: resources: resources object, compute_client: GCE API client, address: The command-line flags. The flag accessed is --address, region: The region. Returns: If an --address is given, the resolved IP address; otherwise None. N) ipaddress ip_addresssix text_type ValueError GetAddressRefrir`)rrJr`rargrhs r<ExpandAddressFlagrq|s_    w/0 N   i&9+N0# s+6 AAcURUS[RRRR US.S9$)zEGenerates an address reference from the specified address and region.zcompute.addresses)rQrarU)rirrYrZrQ GetOrFail)rr`ras r<rprpsA  $&&++33==   rLc\[U5 [U5 [XS9 [UUUUUS9 g)z/Validates the values of all disk-related flags.)r)renable_source_snapshot_csekenable_image_csekenable_source_instant_snapshotN)ValidateDiskCommonFlagsValidateDiskAccessModeFlagsValidateDiskBootFlagsValidateCreateDiskFlags)argsrrrurvrws r<ValidateDiskFlagsr}s3$d#4 '"=)%C rLcUR=(d /HnURS5nU(d*[R"SSR [ 55eURS5nU(a,US;a&[R"SSR U55eURS5nU(dMU[ ;dM[R"SSR [ U55e g ) z2Validates the values of common disk-related flags.r$rzH[name] is missing in [--disk]. [--disk] value must be of the form [{0}].r rwro=Value for [mode] in [--disk] must be [rw] or [ro], not [{0}].rKValue for [interface] in [--disk] must be one of following: {0}, not [{1}].N)r(r6rInvalidArgumentExceptionr_ DISK_METAVAR PD_INTERFACES)r|r(r4 mode_valuers r<rxrxsiio2od I   / /  6,'  &!Jj 4  / /  I 6*   %IyYm3  / /  F=)4 'rLcUR=(d /HlnURS5nURS5n[UR5S:dM@US:XdMH[R "SSR U55e g)z%Checks disks R/O and R/W access mode.r$r r;rrzFCannot attach disk [{0}] in read-write mode to more than one instance.N)r(r6lenr)rBadArgumentExceptionr_)r|r(r4rs r<ryryssiio2od I&!J 4  !# d(:  + +  fY' )) rLcjSnU=(d /H!nURSS5(dMUS- nM# U$)z*get number of boot disks in list of disks.rr Fr;r6)disksnum_of_boot_diskr(s r<GetNumOfBootDiskrs<krkd xx! rLcSn[UR5nUS:a[R"SS5e[UR5nUS:a[R"SS5eXC-S:a[R"SS5eXC-S:XaSnUR S 5(aRUR S 5(a%[ R"UR5(d[R"S S 5eUR S 5(aRUR S 5(a%[ R"UR5(d[R"SS5eUR S5(aIUR[;a5[R"SSR[UR55eUR S5(a[R"UR 5nUR S 5(aJUR["R$;a,US:a&[R"SSRU55eUR&(aU(a[R"SS5eU(GaIUR((a[R"SS5eUR(a[R"SS5eUR (a[R"SS5eUR*(d[R"SS5eU(aUR,(a[R"SS5eUR.(a[R"SS5eUR0(a[R"SS5eUR2(a[R"SS5eg g g )!z0Validates the values of boot disk-related flags.Fr;rzfEach instance can have exactly one boot disk. At least two boot disks were specified through [--disk].rGzmEach instance can have exactly one boot disk. At least two boot disks were specified through [--create-disk].zxEach instance can have exactly one boot disk. At least two boot disks were specified through [--disk and --create-disk].Tboot_disk_provisioned_iopsboot_disk_typerzE--boot-disk-provisioned-iops cannot be used with the given disk type. boot_disk_provisioned_throughputr zK--boot-disk-provisioned-throughput cannot be used with the given disk type.boot_disk_interfacer!zKValue for [--boot-disk-interface] must be one of following: {0}, not [{1}].boot_disk_size rz=Value must be greater than or equal to 10 GB; received {0} GBzEach instance can have exactly one boot disk. One boot disk was specified through [--disk or --create-disk] and another through [--image].rzkEach instance can have exactly one boot disk. One boot disk was specified through [--disk or --create-disk]rz--no-boot-disk-auto-deleter'z--boot-disk-kms-keyringz--boot-disk-kms-locationz--boot-disk-kms-projectN)rr(rr create_disk IsSpecifiedr IsProvisioningTypeIopsrrIsProvisioningTypeThroughputrrr_r BytesToGbrrLEGACY_DISK_TYPE_LISTr9boot_disk_device_nameboot_disk_auto_deleteboot_disk_kms_keyboot_disk_kms_keyringboot_disk_kms_locationboot_disk_kms_project)r|rboot_disk_specifiednum_of_boot_disk_in_disks num_of_boot_disk_in_create_diskssize_gbs r<rzrzs.tyy9"  ) )6 77&6d6F6F%G"%)  ) ) = >> 'BaG  ) ) H II 'BqH 233       . .t/B/B C C  / / (    899       4 4T5H5H I I  / / .    +,, }4  / / ! ((.T55)   &''ood112G )**   9#B#B B bL  / /  I 6'?   ZZ'  ) )* ++  !!  + + # J KK    + + J KK   + + J KK  % %  + + & J KK   -- ! LM M  # #-- % LM M  $ $-- & LM M  # #-- % LM M $'/rLc4[USS5n[USS5n[US/5n[US/5=(d /GHn U RS5n U(a<[U5S:a-U (a&[R"SS R U 55eU (a%U(aU(a[R"SS 5eU RS 5n U (a,U S ;a&[R "SS R U 55eU RS5n U (a5U [;a+[R "SSR [U 55eU RS5n U RS5nU RS5nU RS5nU RS5nU RS5n[5nU (aURU 5 U(aURU5 U(aURU5 U(aURU5 U(aURU5 U(aURU5 SS/nU(aURS5 U(aURS5 U(aURS5 U(aURS5 SR SRUSS5US5nSR U5n[U5S:dGM[R"U5e g) z2Validates the values of create-disk related flags.require_csek_key_createN csek_key_filenamesrr$r;rz?Cannot create a disk with [name]={} for more than one instance.zPCannot create a disk with customer supplied key when disk name is not specified.r rrrrr9r:rBrNsource_snapshot_csek_filerCz[image]z[image-family]z[image-csek-required]z[source-snapshot]z[source-snapshot-csek-required]z[source-instant-snapshot]z {}, or {}rTzZMust specify exactly one of {} for a [--create-disk]. These fields are mutually exclusive.)getattrr6rrrr_rrsetaddrkr7compute_exceptions ArgumentError)r|rrurvrOrwrrresource_namesr(r4rr image_valueimage_family_valuesource_snapshotimage_csek_filersource_instant_snapshot disk_sourcemutex_attributesformatted_attributessource_error_messages r<r{r{ks$D*CTJ$6-4"-.dM2.4"4d IN+a/I  + +  K 6)  ,  + +    &!Jj 4  / /  I 6*  %IYm3  / /  F=)4  ((7#K.1hh01Ohh|,O $)D E"hh'@A%Kook"oo()ooo&ooo& oo/0oo-.!#345612"?@%9:&--dii8H"8M.N.>r.BD @@F A" ;!  , ,-A BBA5rLcUR(a:UR(d(UR(d[R"S5eggg)zValidates the image flags.zYMust specify either [--image] or [--image-family] when specifying [--image-project] flag.N) image_projectr9 image_familyrrr|s r<ValidateImageFlagsrs< t/@/@  * * " ##0ArLcUR5nU[R;aU$[R"SSU-5ez8Validates stack type field, throws exception if invalid.--network-interfacez"Invalid value for stack-type [%s].)rr$NETWORK_INTERFACE_STACK_TYPE_CHOICESrrstack_type_input stack_types r<!ValidateNetworkInterfaceStackTypersB%%'*9AAA   - -,z9 ;;rLcUR5nU[R;aU[R:waU$[R "SSU-5er)rrr&NETWORK_INTERFACE_IPV6_ONLY_STACK_TYPErrrs r<5ValidateNetworkInterfaceStackTypeIpv6OnlyNotSupportedrsP%%'*IBBBIDDD   - -,z9 ;;rLcUR5nU[R;aU$[R"SSUS35e)z8Validates igmp query field, throws exception if invalid.rzInvalid value for igmp-query [z].)rr$NETWORK_INTERFACE_IGMP_QUERY_CHOICESrr)igmp_query_input igmp_querys r<!ValidateNetworkInterfaceIgmpQueryrsF%%'*9AAA   - - ( B7 99rLc|UR5nU[R;aU$[R"SS5e)z:Validates network tier field, throws exception if invalid.rzInvalid value for network-tier)rr!NETWORK_TIER_CHOICES_FOR_INSTANCErr)network_tier_input network_tiers r<_ValidateNetworkTierrs?#))+,Y@@@   - -.C.N PPrLcUR5nU[R;aU$[R"SSU-5e)z?Validates IPv6 network tier field, throws exception if invalid.rz)Invalid value for ipv6-network-tier [%s].)rr+NETWORK_INTERFACE_IPV6_NETWORK_TIER_CHOICESrr)ipv6_network_tier_inputipv6_network_tiers r<(_ValidateNetworkInterfaceIpv6NetworkTierrsI-335  > >?   - -36GG IIrLcUR5nU[R;aU$[R"SSU-5e)zDValidates network interface type field, throws exception if invalid.rzInvalid value for nic-type [%s])rr"NETWORK_INTERFACE_NIC_TYPE_CHOICESrr)nic_type_inputnic_types r<ValidateNetworkInterfaceNicTypersC  ! ! #( === O  - -@8K MMrLc UR5n [U 5 U(aSn OSn U RSU S9 [[S[[[[[[[[[[SS.n [ U S'[ U S'U(a [U S 'U(a [U S 'O [U S '[U S '/n U(d[U S 'U RS 5 OU RS5 U RS5 U(a[U S'U RS5 U(aU RS5 OU RS5 U RS5 U(dU RS5 U RS5 U(aU RS5 OU RS5 U RS5 U (aU RS5 U(aU RS5 [U S'U(aU RS5 U(aURSS9nURS [R"U SS!9S"S#S$RU 5S%9 U(a;S&nURS'[R "5S(US)9 S*nURS+S,US-9 ggURS [R"U SS!9S"S#S$RU 5S%9 g).aAdds address arguments for instances and instance-templates. Args: parser: gcloud command arguments parser. instances: adds address arguments for instances if set to true, for instance templates elsewise. support_subinterface: indicates subinterface is supported or not. instance_create: adds address arguments for instance creation if set to true. containers: adds address arguments for create-with-containers command if set to true, for create command otherwise. support_network_queue_count: indicates flexible networking queue count is supported or not. support_vlan_nic: indicates whether VLAN network interfaces are supported. support_ipv6_only: indicates whether IPV6_ONLY stack type is supported. support_igmp_query: indicates whether setting igmp query on network interfaces is supported. support_enable_vpc_scoped_dns: indicates whether setting enable vpc scoped dns on network interfaces is supported. z Assigns the given external address to the instance that is created. The address might be an IP address or the name or URI of an address resource. This option can only be used when creating a single instance. z Assigns the given external IP address to the instance that is created. This option can only be used when creating a single instance. z --addressrN)r`network no-addresssubnetzprivate-network-ipaliasesznetwork-attachmentz ipv6-addresszipv6-prefix-lengthzexternal-ipv6-addresszexternal-ipv6-prefix-lengthzinternal-ipv6-addresszinternal-ipv6-prefix-lengthzenable-vpc-scoped-dnsz network-tierznic-typez igmp-queryz stack-typezipv6-network-tierzipv6-public-ptr-domaina Adds a network interface to the instance. Mutually exclusive with any of these flags: *--address*, *--network*, *--network-tier*, *--subnet*, *--private-network-ip*, *--stack-type*, *--ipv6-network-tier*, *--internal-ipv6-address*, *--internal-ipv6-prefix-length*, *--ipv6-address*, *--ipv6-prefix-length*, *--external-ipv6-address*, *--external-ipv6-prefix-length*, *--ipv6-public-ptr-domain*. This flag can be repeated to specify multiple network interfaces. a Adds a network interface to the instance. Mutually exclusive with any of these flags: *--address*, *--network*, *--network-tier*, *--subnet*, *--private-network-ip*, *--stack-type*, *--ipv6-network-tier*, *--internal-ipv6-address*, *--internal-ipv6-prefix-length*, *--ipv6-address*, *--ipv6-prefix-length*, *--external-ipv6-address*, *--external-ipv6-prefix-length*. This flag can be repeated to specify multiple network interfaces. a The following keys are allowed: *address*::: Assigns the given external address to the instance that is created. Specifying an empty string will assign an ephemeral IP. Mutually exclusive with no-address. If neither key is present the instance will get an ephemeral IP. *network*::: Specifies the network that the interface will be part of. If subnet is also specified it must be subnetwork of this network. If neither is specified, this defaults to the "default" network. *no-address*::: If specified the interface will have no external IP. Mutually exclusive with address. If neither key is present the instance will get an ephemeral IP. *network-tier*::: Specifies the network tier of the interface. ``NETWORK_TIER'' must be one of: `PREMIUM`, `STANDARD`. The default value is `PREMIUM`. *private-network-ip*::: Assigns the given RFC1918 IP address to the interface. *subnet*::: Specifies the subnet that the interface will be part of. If network key is also specified this must be a subnetwork of the specified network. *nic-type*::: Specifies the Network Interface Controller (NIC) type for the interface. ``NIC_TYPE'' must be one of: `GVNIC`, `VIRTIO_NET`. z queue-counta4 *queue-count*::: Specifies the networking queue count for this interface. Both Rx and Tx queues will be set to this number. If it's not specified, a default queue count will be assigned. See https://cloud.google.com/compute/docs/network-bandwidth#rx-tx for more details. z *stack-type*::: Specifies whether IPv6 is enabled on the interface. ``STACK_TYPE'' must be one of: `IPV4_ONLY`, `IPV4_IPV6`, `IPV6_ONLY`. The default value is `IPV4_ONLY`. z *stack-type*::: Specifies whether IPv6 is enabled on the interface. ``STACK_TYPE'' must be one of: `IPV4_ONLY`, `IPV4_IPV6`. The default value is `IPV4_ONLY`. a *ipv6-network-tier*::: Specifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config. ``IPV6_NETWORK_TIER'' must be `PREMIUM` (currently only one value is supported). *internal-ipv6-address*::: Assigns the given internal IPv6 address or range to the instance that is created. The address must be the first IP address in the range or from a /96 IP address range. This option can be used only when creating a single instance. *internal-ipv6-prefix-length*::: Optional field that indicates the prefix length of the internal IPv6 address range. It should be used together with internal-ipv6-address. Only /96 IP address range is supported and the default value is 96. If not set, either the prefix length from --internal-ipv6-address will be used or the default value of 96 will be assigned. *external-ipv6-address*::: Assigns the given external IPv6 address to the instance that is created. The address must be the first IP address in the range. This option can be used only when creating a single instance. *external-ipv6-prefix-length*::: The prefix length of the external IPv6 address range. This field should be used together with external-ipv6-address. Only the /96 IP address range is supported, and the default value is 96. a* *ipv6-public-ptr-domain*::: Assigns a custom PTR domain for the external IPv6 in the IPv6 access configuration of instance. If its value is not specified, the default PTR record will be used. This option can only be specified for the default network interface, `nic0`. z *aliases*::: Specifies the IP alias ranges to allocate for this interface. If there are multiple IP alias ranges, they are separated by semicolons. For example: --aliases="10.128.1.0/24;range1:/32" a/ Each IP alias range consists of a range name and an IP range separated by a colon, or just the IP range. The range name is the name of the range within the network interface's subnet from which to allocate an IP alias range. If unspecified, it defaults to the primary IP range of the subnet. The IP range can be a CIDR range (e.g. `192.168.100.0/24`), a single IP address (e.g. `192.168.100.1`), or a netmask in CIDR format (e.g. `/24`). If the IP range is specified by CIDR range or single IP address, it must belong to the CIDR range specified by the range name on the subnet. If the IP range is specified by netmask, the IP allocator will pick an available range with the specified netmask and allocate it to this network interface. a Each IP alias range consists of a range name and a CIDR netmask (e.g. `/24`) separated by a colon or just the netmask. The range name is the name of the range within the network interface's subnet from which to allocate an IP alias range. If unspecified, it defaults to the primary IP range of the subnet. The IP allocator will pick an available range with the specified netmask and allocate it to this network interface. z *network-attachment*::: Specifies the network attachment that this interface should connect to. Mutually exclusive with *--network* and *--subnet* flags. z *enable-vpc-scoped-dns*::: If specified with network_attachment, DNS resolution will be enabled over this interface. z *vlan*::: VLAN ID of a Dynamic Network Interface, must be an integer in the range from 2 to 255 inclusively. vlana *igmp-query*::: Determines if the Compute Engine Instance can receive and respond to IGMP query packets on the specified network interface. ``IGMP_QUERY'' must be one of: `IGMP_QUERY_V2`, `IGMP_QUERY_DISABLED`. It is disabled by default. Tmutexr)rallow_key_onlyrkrHr,rIa Same as --network-interface except that the value for the entry will be read from a local file. This is used in case subinterfaces need to be specified. All field names in the json follow lowerCamelCase. The following additional key is allowed: subinterfaces Specifies the list of subinterfaces assigned to this network interface of the instance. The following keys are allowed: subnetwork: Specifies the subnet that the subinterface will be part of. The subnet should have l2-enable set and VLAN tagged. vlan: Specifies the VLAN of the subinterface. Can have a value between 2-4094. This should be the same VLAN as the subnet. VLAN tag within a network interface is unique. ipAddress: Optional. Specifies the ip address of the subinterface. If not specified, an ip address will be allocated from subnet ip range. An example json looks like: [ { "network":"global/networks/network-example", "subnetwork":"projects/example-project/regions/us-central1/subnetworks/untagged-subnet", "subinterfaces":[ { "subnetwork":"projects/example-project/regions/us-central1/subnetworks/tagged-subnet", "vlan":2, "ipAddress":"111.11.11.1" } ] } ] --network-interface-from-filezKEY=LOCAL_FILE_PATHrrrz Same as --network-interface-from-file except that the value for the entry will be a json string. This can also be used in case subinterfaces need to be specified. All field names in the json follow lowerCamelCase.$--network-interface-from-json-stringNETWORK_INTERFACE_JSON_STRINGr)rAddNoAddressArgrrrKrrrrrrrkrrrr7 FileContents)rr]support_subinterfaceinstance_create containerssupport_network_queue_countsupport_vlan_nicsupport_ipv6_onlysupport_igmp_querysupport_enable_vpc_scoped_dnsrd address_help%multiple_network_interface_cards_specnetwork_interface_help_textsnetwork_interfaces network_interface_file_help_text network_interface_json_help_texts r<AddAddressArgsrs]@113)) L  L <8"%("%(#+'";O'74()*,79*N*F("$ GJ)*BC '' )  !'') %%'  <!;>)-8 '')   '')  !'')  %%'  8  '') %% '   '' )  !'')  %%'  # '')   '')  58)&1 '') )))5##  6  WW1 2$4$*&J%% )'')'/ &1 *& %% 01/&1en   6  WW1 24rLc&URSSSS9 g)Nz --no-addressra If provided, the instances are not assigned external IP addresses. To pull container images, you must configure private Google access if using Container Registry or configure Cloud NAT for instances to access container images directly. For more information, see: * https://cloud.google.com/vpc/docs/configure-private-google-access * https://cloud.google.com/nat/docs/using-nat rrrs r<rrYs    rLclUcSnURS[RUSRU5S9 g)Nz3 If unspecified, the default type is n1-standard-1.--machine-typez Specifies the machine type used for the instances. To get a list of available machine types, run 'gcloud compute machine-types list'.{})r%r(r)rr{MachineTypesCompleterr_)rr(unspecified_helps r<AddMachineTypeArgsrhsBL"88 !''7 8:rLc URSSUSRUR(aURS-OS5S9 g)Nz--min-cpu-platformPLATFORMa When specified, the VM will be scheduled on host with specified CPU architecture or a newer one. To list available CPU platforms in given zone, run: $ gcloud {}compute zones describe ZONE --format="value(availableCpuPlatforms)" Default setting is "AUTOMATIC". CPU platform selection is available only in selected zones. You can find more information on-line: [](https://cloud.google.com/compute/docs/instances/specify-min-cpu-platform)  r,)rr(r)rr_prefix)rtrackr(s r<AddMinCpuPlatformArgsr us@  &u||# <#>rLcVURSSS9 U(aURSSSS9 gg)Nz--min-node-cpuzp Minimum number of virtual CPUs this instance will consume when running on a sole-tenant node. rz--clear-min-node-cpurz Removes the min-node-cpu field from the instance. If specified, the instance min-node-cpu will be cleared. The instance will not be overcommitted and utilize the full CPU count assigned. rr)r is_updates r<AddMinNodeCpuArgr sE     rLc&URSSSS9 g)Nz--location-hintTzQ Used by internal tools to control sub-zone location of the instance. )hiddenrrrs r<AddLocationHintArgrs    rLczSnU(a URS[RUS9 gURSSSUS9 g)aNSet preemptible scheduling property for instances. For set_scheduling operation, in addition we are providing no-preemptible flag in use case when user wants to disable this property. Args: parser: ArgumentParser, parser to which flags will be added. is_update: Bool. If True, flags are intended for set-scheduling operation. a$ If provided, instances will be preemptible and time-limited. Instances might be preempted to free up resources for standard VM instances, and will only be able to run for a limited amount of time. Preemptible instances can not be restarted and will not migrate. z --preemptiblerrFrNrrStoreTrueFalseAction)rr  help_texts r<AddPreemptibleVmArgsrsO )  //    e)MrLchSSSS.nU(aSUS'URSU[RSS 9 g ) z=Set arguments for specifing provisioning model for instances.zCompute Engine may stop a Spot VM instance whenever it needs capacity. Because Spot VM instances don't have a guaranteed runtime, they come at a discounted price.zkThe default option. The STANDARD provisioning model gives you full control over your VM instances' runtime.zThe VM instances run for the entire duration of their associated reservation. You can only specify this provisioning model if you want your VM instances to consume a specific reservation with either a calendar reservation mode or a dense deployment type.)SPOTSTANDARDRESERVATION_BOUNDzaThe VM instance is provisioned using the Flex Start provisioning model and has a limited runtime. FLEX_START--provisioning-modelz Specifies the provisioning model for your VM instances. This choice affects the price, availability, and how long your VM instances can run. rrrNrrChoiceToEnumName)rsupport_flex_startrs r<AddProvisioningModelVmArgsrsV 6  5 L '" & L   % % rLcSnSnU(aURSSS9nURSSSS 9 URS [R"5US 9 URS SS9nURS SSS 9 URS[RR US 9 gURS [R"5US 9 URS[RR US 9 g)zHSet arguments for specifing max-run-duration and termination-time flags.a Limits how long this VM instance can run, specified as a duration relative to the last time when the VM began running. Format the duration, MAX_RUN_DURATION, as the number of days, hours, minutes, and seconds followed by d, h, m, and s respectively. For example, specify `30m` for a duration of 30 minutes or specify `1d2h3m4s` for a duration of 1 day, 2 hours, 3 minutes, and 4 seconds. Alternatively, to specify a timestamp, use --termination-time instead. If neither --max-run-duration nor --termination-time is specified (default), the VM instance runs until prompted by a user action or system event. If either is specified, the VM instance is scheduled to be automatically terminated at the VM's termination timestamp (`terminationTimestamp`) using the action specified by --instance-termination-action. Note: The `terminationTimestamp` is removed whenever the VM is stopped or suspended and redefined whenever the VM is rerun. For --max-run-duration specifically, the `terminationTimestamp` is the sum of MAX_RUN_DURATION and the time when the VM last entered the `RUNNING` state, which changes whenever the VM is rerun. a Limits how long this VM instance can run, specified as a time. Format the time, TERMINATION_TIME, as a RFC 3339 timestamp. For more information, see https://tools.ietf.org/html/rfc3339. Alternatively, to specify a duration, use --max-run-duration instead. If neither --termination-time nor --max-run-duration is specified (default), the VM instance runs until prompted by a user action or system event. If either is specified, the VM instance is scheduled to be automatically terminated at the VM's termination timestamp (`terminationTimestamp`) using the action specified by --instance-termination-action. Note: The `terminationTimestamp` is removed whenever the VM is stopped or suspended and redefined whenever the VM is rerun. For --termination-time specifically, the `terminationTimestamp` remains the same whenever the VM is rerun, but any requests to rerun the VM fail if the specified timestamp is in the past. zMax Run DurationTrz--clear-max-run-durationrzP Removes the max-run-duration field from the scheduling options. r--max-run-durationrzTermination Timez--clear-termination-timezP Removes the termination-time field from the scheduling options. --termination-timeN)rrrrDatetimeri)rr max_run_duration_help_texttermination_time_help_textmax_run_duration_grouptermination_time_groups r<AddMaxRunDurationVmArgsr(s% . &#--.@-M''" (''  ! ! # '( $--.@-M''" (''  ! ! ' ' '(    ! ! # '    ! ! ' ' 'rLcSnU(aFURSSS9nURSSSS9 URS [R"5US 9 g URS [R"5US 9 g ) zMSet arguments for specifing discard-local-ssds-at-termination-timestamp flag.a Required to be set to `true` and only allowed for VMs that have one or more local SSDs, use --instance-termination-action=STOP, and use either --max-run-duration or --termination-time. This flag indicates the value that you want Compute Engine to use for the `--discard-local-ssd` flag in the automatic `gcloud compute instances stop` command. This flag only supports the `true` value, which discards local SSD data when automatically stopping this VM during its `terminationTimestamp`. For more information about the `--discard-local-ssd` flag, see https://cloud.google.com/compute/docs/disks/local-ssd#stop_instance. z+Discard Local SSDs At Termination TimestampTrz3--clear-discard-local-ssds-at-termination-timestamprzk Removes the discard-local-ssds-at-termination-timestamp field from the scheduling options. rz---discard-local-ssds-at-termination-timestamprN)rrrr)rr 5discard_local_ssds_at_termination_timestamp_help_text1discard_local_ssds_at_termination_timestamp_groups r<AddDiscardLocalSsdVmArgsr,7s ; 78>8H8H5T9I956BB= C6BB7  # # % BC  7  # # % BrLcLURS[R"SSS9SS9 g)Nz--host-error-timeout-seconds90s300srz The timeout in seconds for host error detection. The value must be set with 30 second increments, with a range of 90 to 330 seconds. If unset, the default behavior of the host error recovery is used. rrrrrs r<AddHostErrorTimeoutSecondsArgsr1_s-$   Ev F  rLcU(aURSSSSS9 OURS[RSS9 URS[R"S S S 9S S 9 g)z$Set arguments for graceful shutdown.z--graceful-shutdown store_constTz< Enables graceful shutdown for the instance. )rconstrzH Enables or disables graceful shutdown for the instance. rz --graceful-shutdown-max-duration1s3600srax Specifies the maximum time for the graceful shutdown. After this time, the instance is set to STOPPING even if tasks are still running. Specify the time as the number of hours, minutes, or seconds followed by h, m, and s respectively. For example, specify 30m for 30 minutes or 20m10s for 20 minutes and 10 seconds. The value must be between 1 second and 1 hour. rN)rrrr)r is_creates r<AddGracefulShutdownArgsr8jsy   //  (   Dg F rLcLURS[R"5SS9 g)Nz--preemption-notice-durationz Specifies the metadata preemption notice duration before the ACPI G2 soft off signal is triggered for Spot VMs. e.g. 120s. rr0rs r<AddPreemptionNoticeDurationArgsr:s)$    ! rLc NURS[R"SSSS9SS9 g)Nz--local-ssd-recovery-timeouth0h168h) default_unitrrz Specifies the maximum amount of time a Local Ssd Vm should wait while recovery of the Local Ssd state is attempted. Its value should be in between 0 and 168 hours with hour granularity and the default value being 1 hour. rr0rs r<AddLocalSsdRecoveryTimeoutArgsr@s3$   & B    rLcU(aEURSSS9nURSSSS.[RSS 9 URS S S S 9 gURSSSS.[RSS 9 g)aSet arguments for specifing the termination action for the instance. For set_scheduling operation we are implementing this as argument group with additional argument clear-* providing the functionality to clear the instance-termination-action field. Args: parser: ArgumentParser, parser to which flags will be added. is_update: Bool. If True, flags are intended for set-scheduling operation. zInstance Termination ActionTrz--instance-termination-actionz`Default only for Spot VMs. Stop the VM without preserving memory. The VM can be restarted later.zPermanently delete the VM.)STOPDELETEz Specifies the termination action that will be taken upon VM preemption (--provisioning-model=SPOT) or automatic instance termination (--max-run-duration or --termination-time). rz#--clear-instance-termination-actionra Disables the termination action for this VM if allowed OR sets termination action to the default value. Depending on a VM's availability settings, a termination action is either required or not allowed. This flag is required when you are updating a VM such that it's previously specified termination action is no longer allowed. If you use this flag when a VM requires a termination action, it's termination action is just set to the default value (stop). rN)rrrr)rr termination_action_groups r<"AddInstanceTerminationActionVmArgsrEs%//%T 0 3))':3   ' ' * ))-  *   ':3   ' ' rLcURS5(aU(a\URS5(dEURS5(d/URS5(d[R"/SQS5eO-URS5(d[R"SS5eU(aDURS5(a-URS5(a[R "S5eg g g ) z,Validates instance scheduling related flags.instance_termination_actionprovisioning_modelmax_run_durationtermination_time)rr!r"z7required with argument `--instance-termination-action`.rzlMust specify exactly one of --max-run-duration or --termination-time as these fields are mutually exclusive.N)rrMinimumArgumentExceptionRequiredArgumentExceptionrr)r|support_max_run_durations r<ValidateInstanceSchedulingrNs 344344122122113 DF F  2 3 3  0 0 C EE$"2"2##"../ABB  * * 2 33C#rLcDURSSS9 URSSS9 g)z2Set arguments for choosing the network/subnetwork.z --networkz Specifies the network that the VM instances are a part of. If `--subnet` is also specified, subnet must be a subnetwork of the network specified by this `--network` flag. If neither is specified, the default network is used. rz--subnetz Specifies the subnet that the VM instances are a part of. If `--network` is also specified, subnet must be a subnetwork of the network specified by the `--network` flag. Nrrs r<AddNetworkArgsrPs:     rLc$URSSS9 g)z2Set arguments for choosing the network IP address.z--private-network-ipz Specifies the RFC1918 IP to assign to the instance. The IP should be in the subnet or legacy network IP range. rNrrs r<AddPrivateNetworkIpArgsrR s  rLc `UR5nSRX4S9nURSSU(aSRU5OUS9 SRU5nSRU5nS RU(aUOUUS 9n URS U S 9 UR5n U RS SU(aSRUS9OSRX4S9S9 Sn Sn SRU(aU OU U[R"5US9n U RS[ R "5SU S9 g)aAdd args for configuring service account and scopes. This should replace AddScopeArgs (b/30802231). Args: parser: ArgumentParser, parser to which flags will be added. instance_exists: bool, If instance already exists and we are modifying it. extra_scopes_help: str, Extra help text for the scopes flag. operation: operation being performed, capitalized. E.g. 'Create' or 'Import' resource: resource type on which scopes and service account are being added. E.g. 'instance' or 'machine image'. z.{operation} {resource} without service account) operationr8z--no-service-accountrz#Remove service account from the {0}rzYou can explicitly specify the Compute Engine default service account using the 'default' alias. If not provided, the {0} will use the service account it currently has. zO If not provided, the {0} will use the project's default service account. a3 A service account is an identity attached to the {resource}. Its access tokens can be accessed through the instance metadata server and are used to authenticate applications on the instance. The account can be set using an email address corresponding to the required service account. {extra_help} ) extra_helpr8z--service-accountr --no-scopesz%Remove all scopes from the {resource})r8z%{operation} {resource} without scopesz keep the scopes it currently hasz/be assigned the default scopes, described belowzFIf not provided, the {resource} will {exists}. {extra} {scopes_help} )existsextra scopes_helpr8--scopesSCOPErN)rr_rr ScopesHelprrL)rinstance_existsextra_scopes_helprTr8service_account_groupno_sa_instance_not_exist sa_exists sa_not_existsservice_account_help scopes_group scopes_existsscopes_not_existsrYs r<AddServiceAccountAndScopeArgsrg s"!==?6==>2$$   1 7 7 A6 %8  fX   fX   f-=  $$ 4%6446,   3 9 98 9 LELLM2 3 5-G F+=1B $$&    {**,gKQrLc`URS[R[RSS9 g)z,Adds network interface flag to the argparse.rz Specifies the name of the network interface which contains the access configuration. If this is not provided, then "nic0" is used as the default. )rrrN)rrDEFAULT_NETWORK_INTERFACErStoreOnceActionrs r<AddNetworkInterfaceArgsrkY s1 11  ( (  rLctU(aURSSSS9 gU(aSnOSnURSSUS9 g) z'Adds network tier flag to the argparse.--network-tierc"UR5$rFrrs r<r$AddNetworkTierArgs..m s qwwyrLz Update the network tier of the access configuration. It does not allow to change from `PREMIUM` to `STANDARD` and visa versa. rNz Specifies the network tier that will be used to configure the instance. ``NETWORK_TIER'' must be one of: `PREMIUM`, `STANDARD`. The default value is `PREMIUM`. z Specifies the network tier of the access configuration. ``NETWORK_TIER'' must be one of: `PREMIUM`, `STANDARD`. The default value is `PREMIUM`. c"UR5$rFrrs r<rro s qwwyrLr)rr for_updatenetwork_tier_helps r<AddNetworkTierArgsrsg s\         07HJrLcpSnU(dUS- nURSU(a[ROSUS9 g)zCAdds display device arguments for instance or access configuration.z(Enable a display device on VM instances. Disabled by default.z--enable-display-devicerrNrrr  display_helps r<AddDisplayDeviceArgrx s;;, ++L1:[ - - rLcrSnU(dUS- nURSU(a[ROSSUS9 g)zCAdds watchdog timer arguments for instance or access configuration.z/Enable a watchdog timer device on VM instances.ruz--enable-watchdog-timerrNrrrvs r<AddWatchdogTimerArgrz s>B, ++L1:[ - -   rLcUR5nU(aSnOSnURSSUS9 U(aSnOSnURSSUS9 g ) z?Adds public DNS arguments for instance or access configuration.zR If provided, the instance will not be assigned a public DNS name. zy If provided, the external IP in the access configuration will not be assigned a public DNS name. z--no-public-dnsrrz; Assigns a public DNS name to the instance. z Assigns a public DNS name to the external IP in the access configuration. This option can only be specified for the default network-interface, "nic0". z --public-dnsNrr)rr public_dns_argsno_public_dns_helppublic_dns_helps r<AddPublicDnsArgsr ss779/    3EG O O \ArLc*UR5nU(aSnOSnURSSUS9 U(aSnOSnURSSUS9 UR5nU(aS nOS nURS SUS9 U(aS nOS nURSUS9 g)z?Adds public PTR arguments for instance or access configuration.z If provided, no DNS PTR record is created for the external IP of the instance. Mutually exclusive with public-ptr-domain. z If provided, no DNS PTR record is created for the external IP in the access configuration. Mutually exclusive with public-ptr-domain. --no-public-ptrrrzN Creates a DNS PTR record for the external IP of the instance. z Creates a DNS PTR record for the external IP in the access configuration. This option can only be specified for the default network-interface, "nic0".z --public-ptrz If both this flag and --public-ptr are specified, creates a DNS PTR record for the external IP of the instance with the PTR domain name being the DNS name of the instance. z If both this flag and --public-ptr are specified, creates a DNS PTR record for the external IP in the access configuration with the PTR domain name being the DNS name of the instance. z--no-public-ptr-domainz Assigns a custom PTR domain for the external IP of the instance. Mutually exclusive with no-public-ptr. z Assigns a custom PTR domain for the external IP in the access configuration. Mutually exclusive with no-public-ptr. This option can only be specified for the default network-interface, "nic0". --public-ptr-domainrNr|)rr public_ptr_argsno_public_ptr_helppublic_ptr_helppublic_ptr_domain_argsno_public_ptr_domain_helppublic_ptr_domain_helps r<AddPublicPtrArgsr s779/     3EG O&O\A">>@ !  !  %%  $&&     %%"8&:rLc&URSSSS9 g)zFAdds IPv6 public PTR domain for IPv6 access configuration of instance.--ipv6-public-ptr-domainNa Assigns a custom PTR domain for the external IPv6 in the IPv6 access configuration of instance. If unspecified or specified to be an empty string, the default PTR record will be used. This option can only be specified for the default network interface, ``nic0''.)rrrrs r<AddIpv6PublicPtrDomainArgr s!  @rLcnUR5nSnURSSUS9 SnURSUS9 g) z=Adds IPv6 public PTR arguments for ipv6 access configuration.z If provided, the default DNS PTR record will replace the existing one for external IPv6 in the IPv6 access configuration. Mutually exclusive with ipv6-public-ptr-domain. --no-ipv6-public-ptrrrz Assigns a custom PTR domain for the external IPv6 in the access configuration. Mutually exclusive with no-ipv6-public-ptr. This option can only be specified for the default network interface, ``nic0''. rrNr|)ripv6_public_ptr_argsno_ipv6_public_ptr_helpipv6_public_ptr_domain_helps r<AddIpv6PublicPtrArgsr s] <<>  ##\8O$Q!  ## 'B$DrLc[USS5n[USS5nU(aMUbIU[R:wa4[R"SR [RU55eggg)z1Validates the values of public DNS related flags.network_interfaceN public_dnszUPublic DNS can only be enabled for default network interface '{0}' rather than '{1}'.)rrrirrr_)r|rrs r<ValidatePublicDnsFlagsr szd$7>t\40*%Y@@@  , , ))/113D*F GG A &rLc@[USS5n[USS5nUSLaKUbHU[R:wa4[R"SR [RU55eUR b'URSLa[R"SS5egg)z1Validates the values of public PTR related flags.rN public_ptrTzUPublic PTR can only be enabled for default network interface '{0}' rather than '{1}'.rr) rrrirrr_public_ptr_domain no_public_ptrrConflictingArgumentsException)r|rrs r<ValidatePublicPtrFlagsr' sd$7>t\40*4%Y@@@  , , ))/113D*F GG  'D,>,>$,F  2 23H3D FF-G'rLc\[USS5nURcUR(aKUbHU[R:wa4[ R "SR[RU55eURb)UR(a[R"SS5egg)z6Validates the values of IPv6 public PTR related flags.rNzZIPv6 Public PTR can only be enabled for default network interface '{0}' rather than '{1}'.rr) ripv6_public_ptr_domainno_ipv6_public_ptrrrirrr_rr)r|rs r<ValidateIpv6PublicPtrFlagsr9 sd$7>   ,0G0G%Y@@@  , , ))/113D*F GG    ,1H1H  2 23M3I KK2I,rLcUR(a(UR(d[R"SS5eUR=(d /H!nU(aM [R "SS5e g)NrVz+required with argument --no-service-accountrZz Scope cannot be an empty string.)no_service_account no_scopesrrLscopesr)r|rs r<"ValidateServiceAccountAndScopeArgsrK sb T^^  . .   !r!e 5  / / 8 ::"rLcLURS[R"SS9SSS9 g)Nz--tagsr;r@TAGa Specifies a list of tags to apply to the instance. These tags allow network firewall rules and routes to be applied to specified VM instances. See gcloud_compute_firewall-rules_create(1) for more details. To read more about configuring network tags, read this guide: https://cloud.google.com/vpc/docs/add-remove-network-tags To list instances with their respective status and tags, run: $ gcloud compute instances list --format='table(name,status,tags.list())' To list instances tagged with a specific tag, `tag1`, run: $ gcloud compute instances list --filter='tags:tag1' rrrrLrs r< AddTagsArgsrW s.   ! ,  rLcLURS[R"SS9SSS9 g)zAdds secure tag related args.z --secure-tagsr;r SECURE_TAGa Specifies a list of secure tags to apply to the instance. These tags allow network firewall rules and routes to be applied to specified VM instances. See gcloud_compute_network_firewall-policies_rules_create(1) for more details. rNrrs r<AddSecureTagsArgsrn s.   ! ,   rLclURS[R"5S[RSS9 g)z'Adds resource manager tag related args.z--resource-manager-tagsz KEY=VALUEzP Specifies a list of resource manager tags to apply to the instance. )rrrrN)rrr UpdateActionrs r<AddResourceManagerTagsArgsr| s5      % %  rLc(URSSSSS9 g)Nz--restart-on-failurerTz The instances will be restarted if they are terminated by Compute Engine. This does not affect terminations performed by the user. rrrs r<AddNoRestartOnFailureArgsr s#   rLcSnSnSnU(a=URS5nURSS[UUS9 [R"SS S 9nURSU[UUS 9 g) z'Adds maintenance behavior related args.z Specifies the behavior of the VMs when their host machines undergo maintenance. The default is MIGRATE. For more information, see https://cloud.google.com/compute/docs/instances/host-maintenance-options. c"UR5$rFrrs r<r*AddMaintenancePolicyArgs.. s  rLNzMaintenance Behavior.z--on-host-maintenancemaintenance_policy)destrrrz--maintenance-policyzRThe {flag_name} flag is now deprecated. Please use `--on-host-maintenance` instead)warn)rrrr)rrMIGRATION_OPTIONSrDeprecationAction)r deprecater flag_typers r<AddMaintenancePolicyArgsr s) ") &  0 01H IF  !!     & &*+F     rLc`URS[R"[[S.S9SS9 g)zAdds Accelerator-related args. --accelerator)rcountra~ Attaches accelerators (e.g. GPUs) to the instances. *type*::: The specific type (e.g. nvidia-tesla-t4 for NVIDIA T4) of accelerator to attach to the instances. Use 'gcloud compute accelerator-types list' to learn about all available accelerator types. *count*::: Number of accelerators to attach to each instance. The default value is 1. rN)rrrrrKrs r<AddAcceleratorArgsr s8    %   rLc[USS5nU(a1URSS5nU(d[R"SS5egg)zValiadates flags specifying accelerators (e.g. GPUs). Args: args: parsed comandline arguments. Raises: InvalidArgumentException: when type is not specified in the accelerator config dictionary. acceleratorNrr,rzSaccelerator type must be specified. e.g. --accelerator type=nvidia-tesla-t4,count=2)rr6rr)r|accelerator_argsaccelerator_type_names r<ValidateAcceleratorArgsr sQT=$7,00<  / / < == !rLc URSSS9 URSSS9 URSSSS 9 URS S S S 9 [U5 [U5 URS [R"5SSSS9 URSSS9 URSS SS 9 URSS SS 9 URS/SQSSSSS9 g)zAdds Konlet-related args.--container-imagezn Full container image name, which should be pulled onto VM instance, eg. `docker.io/tomcat`. r--container-commandz Specifies what executable to run when the container starts (overrides default entrypoint), eg. `nc`. Default: None (default container entrypoint is used) --container-argrka Argument to append to container entrypoint or to override container CMD. Each argument must have a separate flag. Arguments are appended in the order of flags. Example: Assuming the default entry point of the container (or an entry point overridden with --container-command flag) is a Bourne shell-compatible executable, in order to execute 'ls -l' command in the container, the user could use: `--container-arg="-c" --container-arg="ls -l"` Caveat: due to the nature of the argument parsing, it's impossible to provide the flag value that starts with a dash (`-`) without the `=` sign (that is, `--container-arg "-c"` will not work correctly). Default: None. (no arguments appended) r--container-privilegedrzn Specify whether to run container in privileged mode. Default: `--no-container-privileged`. --container-envKEY=VALUE, ...a) Declare environment variables KEY with value VALUE passed to container. Only the last value of KEY is taken when KEY is repeated more than once. Values, declared with --container-env flag override those with the same KEY from file, provided in --container-env-file. rI--container-env-filea@ Declare environment variables in a file. Values, declared with --container-env flag override those with the same KEY from file. File with environment variables in format used by docker (almost). This means: - Lines are in format KEY=VALUE. - Values must contain equality signs. - Variables without values are not supported (this is different from docker format). - If `#` is first non-whitespace character in a line the line is ignored as a comment. - Lines with nothing but whitespace are ignored. --container-stdinzd Keep container STDIN open even if not attached. Default: `--no-container-stdin`. --container-ttyz[ Allocate a pseudo-TTY for the container. Default: `--no-container-tty`. --container-restart-policyneverz on-failurealwaysrPOLICYc"UR5$rFlowervals r<rAddKonletArgs..F syy{rLz< Specify whether to restart a container on exit. )rrrrrN)r_AddContainerMountHostPathFlag_AddContainerMountTmpfsFlagrrrs r< AddKonletArgsr s?         ,    !(f%          "         "/ "  rLcURS5(d[R"SS5eURS5(a8URR S5(a[R "SS5egg) zValidates Konlet-related args.container_imagerz You must provide container image machine_typet2az--machine_typez?T2A machine types are not compatible with Konlet or containers.N)rrrLr startswithrrs r<ValidateKonletArgsrL sz  + , ,  . .? AA n%%$*;*;*F*Fu*M*M  - -I KK+N%rLc UR=(d /GH7nURS5nU(aBU[;a8[R"SSR USR [5S95eURS5nUcMtU[R[R-:wdMU[R[R-:wdMU[R[R-:wdM[R"SS R U[R[R[RS 95e g) zValidate local ssd flags.rz--local-ssd:interfacezCUnexpected local SSD interface: [{given}]. Legal values are [{ok}].rT)givenokrNz--local-ssd:sizeziUnexpected local SSD size: [{given}] bytes. Legal values are {small}GB, {large}GB, and {z3_metal}GB only.)rsmalllargez3_metal) local_ssdr6LOCAL_SSD_INTERFACESrrr_r7rSSD_SMALL_PARTITION_GBBYTES_IN_ONE_GBSSD_LARGE_PARTITION_GBSSD_Z3_METAL_PARTITION_GB)r|rrrs r<ValidateLocalSsdFlagsrW s#>>'R'i k*IY&::  / / !$%%+V$)),@"A&,&C DD == D   933i6O6OO P..1J1JJL11I4M4MMO11  L V6666"<<   +(rLc "[USS5n[USS5n[USS5nUcUcUcgUb.UH(nSU;dM SU;dM[R"SS5e /S QnUVs/sHn[XS5(dMUPM nnUVs/sH$nS RUR S S 55PM& nn/S QnUVs/sHn[XS5(dMUPM n nU Vs/sH$nS RUR S S 55PM& nnU(dU (dgU(aUb)[R "SSSR U5-5eUb)[R "SSSR U5-5e[R "SSSR U5-5eU (aGUbSn OUbSn OSn [RRSU S3SR U5-S-5 ggs snfs snfs snfs snf)aValidates flags specifying network interface cards. Throws exceptions or print warning if incompatible nic args are specified. Args: args: parsed command line arguments. Raises: InvalidArgumentException: when it finds --network-interface that has both address, and no-address keys. ConflictingArgumentsException: when it finds --network-interface and at least one of --address, --network, --private_network_ip, or --subnet. rNnetwork_interface_from_file"network_interface_from_json_stringr`rrz7specifies both address and no-address for one interface)r`rprivate_network_iprz--{0}rq-) rrrrinternal_ipv6_addressinternal_ipv6_prefix_length ipv6_addressipv6_prefix_lengthexternal_ipv6_addressexternal_ipv6_prefix_lengthzall of the following: rTrrzWhen z4 is specified, the following arguments are ignored: z. ) rrrr_replacerr7rrcwrite) r|rrnetwork_interface_from_jsonniconflicting_argsargconflicting_args_present warning_argswarning_args_present nic_arg_names r<ValidateNicFlagsr { s^d$7> '.K(,!. '(L(,!.$?$G!) $ b\R/11 ! EG G &%cD)Ac%8P7OgnnS[[c*+7O ,"!cWT%=c\8L7KgnnS[[c*+7K "*> $  4 4  "TYY/?%@ @  % 0  4 4 ) "TYY/?%@ @   4 4 0 "TYY/?%@ @  $*l $ 04l;lJJ  ~  ))L ! "  c&s$+G=G=+HHH*+H c.URSSSS.SSS9 g) zAdds --disk-scope flag.z --disk-scopezThe disk specified in --disk is interpreted as a zonal disk in the same zone as the instance. Ignored if a full URI is provided to the `--disk` flag.zThe disk specified in --disk is interpreted as a regional disk in the same region as the instance. Ignored if a full URI is provided to the `--disk` flag.)zonalregionalzThe scope of the disk.r )rrrNrrs r<AddDiskScopeFlagr  s1MP  $ rLc/SQnURS5(aYUR5nUHnX2;dM URU5 M U(a [RR S5 ggg)zfWarn if --source-instance-template is mixed with unsupported flags. Args: args: Argument namespace ) z --projectz--zonez--regionrzINSTANCE_NAMES:1rrZr[z--labelssource_instance_templatezWhen a source instance template is used, additional parameters other than --machine-type and --labels will be ignored but provided by the source instance template N)rGetSpecifiedArgNamesremoverrcr)r| allowed_flagsspecified_argsr0s r<(WarnForSourceInstanceTemplateLimitationsr so -  011..0N d# jj$% 2rLcUR(aMUR[R;a.[R"SSR URS95egg)NrmzInvalid network tier [{tier}])tier)rrrrrr_rs r<ValidateNetworkTierArgsr sY  yJJJ  - -'..D4E4E.F HHKrLcZSnU(aSO[RnURSX#S9 g)a@Adds --deletion-protection Boolean flag. Args: parser: ArgumentParser, parser to which flags will be added. use_default_value: Bool, if True, deletion protection flag will be given the default value False, else None. Update uses None as an indicator that no update needs to be done for deletion protection. z-Enables deletion protection for the instance.rz--deletion-protection)rrN)rrr)ruse_default_valuerrs r<AddDeletionProtectionFlagr s3?)  &1&F&F -IMrLc\U(aSnSS0nO[Rn0nSnU(aUS- nUR"SUSUS.UD6 SnU(aUS- nUR"SS UUS .UD6 S nU(aS n OS n URU 5n U(aU S- n UR"SU SUS.UD6 g)aAdds flags for Shielded VM configuration. Args: parser: ArgumentParser, parser to which flags will be added. use_default_value: Bool, if True, flag will be given the default value False, else None. Update uses None as an indicator that no update needs to be done for deletion protection. for_update: Bool, if True, flags are intended for an update operation. for_container: Bool, if True, flags intended for an instances with container operation. rrNa The instance boots with secure boot enabled. On Shielded VM instances, Secure Boot is not enabled by default. For information about how to modify Shielded VM options, see https://cloud.google.com/compute/docs/instances/modifying-shielded-vm. z} Changes to this setting with the update command only take effect after stopping and starting the instance. shielded_vm_secure_boot)rrra The instance boots with the TPM (Trusted Platform Module) enabled. A TPM is a hardware module that can be used for different security operations such as remote attestation, encryption, and sealing of keys. On Shielded VM instances, vTPM is enabled by default. For information about how to modify Shielded VM options, see https://cloud.google.com/compute/docs/instances/modifying-shielded-vm. shielded_vm_vtpm)rrra Enables monitoring and attestation of the boot integrity of the instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the instance is created. This baseline can be updated by using `gcloud compute instances {} --shielded-learn-integrity-policy`. On Shielded VM instances, integrity monitoring is enabled by default. For information about how to modify Shielded VM options, see https://cloud.google.com/compute/docs/instances/modifying-shielded-vm. For information about monitoring integrity on Shielded VM instances, see https://cloud.google.com/compute/docs/instances/integrity-monitoring." zupdate-containerupdate shielded_vm_integrity_monitoring)z--shielded-secure-boot)z--shielded-vtpm)z--shielded-integrity-monitoring)rrrr_) rrrq for_containerdefault_action action_kwargssecure_boot_help vtpm_help integrity_monitoring_help_formatupdate_commandintegrity_monitoring_helps r<AddShieldedInstanceConfigArgsr(! s!N%M 55NM        $     )   I         & "'NN>EE"    ' $ -    rLc2SnSnURSSUSUS9 g)z;Adds flags for shielded instance integrity policy settings.z Causes the instance to re-learn the integrity policy baseline using the current instance configuration. Use this flag after any planned boot-specific changes in the instance configuration, like kernel updates or kernel driver installation. rz!--shielded-learn-integrity-policy"shielded_vm_learn_integrity_policyNrrrrr)rrr!s r<&AddShieldedInstanceIntegrityPolicyArgsr, s2)  .) /   rLcU(aSSS.nSnU(aSUS'SRUS45nU(aH[R"S 5n[[S .nUR S S [ R "US 9SUS9 UR5nUR SSUUS9 [R"SSSS9nOSnUR SSUSSS9 g)z1Adds flags for confidential compute for instance.zSecure Encrypted Virtualizationz6Secure Encrypted Virtualization - Secure Nested Paging)SEVSEV_SNPaD The instance boots with Confidential Computing enabled. Confidential Computing can be based on Secure Encrypted Virtualization (SEV) or Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP), both of which are AMD virtualization features for running confidential instances. zTrust Domain eXtensionTDXr,z Trust Domain eXtension based on Intel virtualization features for running confidential instances is also supported. a Secure VM Service Module (SVSM) is supported on AMD Secure Nested Paging (SEV-SNP) VMs for additional security. To specify the svsm-config also provide the argument `confidential-compute-type=SEV_SNP` on the command line. *tpm*::: The virtual Trusted Platform Module (TPM) used by SVSM. Currently the only vTPM supported is: EPHEMERAL. *snp-irq*::: The interrupt request mode to use for the AMD SEV-SNP VM. Currently the only IRQ mode supported is: UNRESTRICTED. )tpmzsnp-irqz --svsm-configTrrH)rrrrz--confidential-compute-typeconfidential_compute_type)rrrz--confidential-computezmThe --confidential-compute flag will soon be deprecated. Please use `--confidential-compute-type=SEV` insteadr)rrconfidential_computeNz The instance boots with Confidential Computing enabled. Confidential Computing is based on Secure Encrypted Virtualization (SEV), an AMD virtualization feature for running confidential instances. r+) r7textwrapdedentrrrrrrr) r!support_confidential_compute_type%support_confidential_compute_type_tdxsupport_snp_svsmrrsvsm_help_textsvsm_congfig_specbool_flag_actions r<AddConfidentialComputeArgsr< s '0KG I-/gen''9( i (  n  ""(9:"  0 0 2F % (   00  = $ !    rLc$URSSS9 g)z/Adds flag for overriding hostname for instance.z --hostnameaL Specify the hostname of the instance to be created. The specified hostname must be RFC1035 compliant. If hostname is not specified, the default hostname is [INSTANCE_NAME].c.[PROJECT_ID].internal when using the global DNS, and [INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal when using zonal DNS. rNrrs r<AddHostnameArgr> s  rLcURUS9nSSSS.nU(aURSSS.5 URS US US 9 U(aS nOS nURSUS9 g)zFAdds the argument group to handle reservation affinity configurations.rz,Consume any available, matching reservation.z*Do not consume from any reserved capacity.z)Must consume from a specific reservation.)anynonespecificzPrefer to consume from a specific reservation, but still consume any available matching reservation if the specified reservation is not available or exhausted.zPrefer to consume from a specific reservation, but still consume from the on-demand pool if the specified reservation is not available or exhausted.)specific-then-any-reservationspecific-then-no-reservationz--reservation-affinityr@)rrrz The name of the reservation, required when `--reservation-affinity` is one of: `specific`, `specific-then-any-reservation` or `specific-then-no-reservation`. zO The name of the reservation, required when `--reservation-affinity=specific`. --reservationN)rrr)r group_text affinity_text support_specific_then_x_affinitygrouprreservation_help_texts r<AddReservationAffinityGrouprK s     +% ;:= ' & NN :  .     & rLc[USS5nUS;a.URS5(d[R"SS5egg)z0Validates flags specifying reservation affinity.reservation_affinityN)rBrCrD reservationrEz7The name of the specific reservation must be specified.)rrrr)r|affinitys r< ValidateReservationAffinityGrouprP" sT T14 8(    M * *  / /  C  + rLc,U(aSnSnX4$SnSnX4$)z5Get description text for --container-mount-disk flag.aMounts a disk to the container by using mount-path or updates how the volume is mounted if the same mount path has already been declared. The disk must already be attached to the instance with a device-name that matches the disk name. Multiple flags are allowed. zName of the disk. Can be omitted if exactly one additional disk is attached to the instance. The name of the single additional disk will be used by default. zMounts a disk to the specified mount path in the container. Multiple ' flags are allowed. Must be used with `--disk` or `--create-disk`. zName of the disk. If exactly one additional disk is attached to the instance using `--disk` or `--create-disk`, specifying disk name here is optional. The name of the single additional disk will be used by default. r)rqr8name_descriptions r</_GetContainerMountDescriptionAndNameDescriptionrS1 s9K   ((K  ((rLcU(aUS:Xa[RR$US:Xa[RR$[R "US5e)z(Parser for mode option in ArgDict specs.rrzMode can only be [ro] or [rw].)rMountVolumeMode READ_WRITE READ_ONLYrr) argument_namer s r<ParseMountVolumeModerYM sP   + + 6 66 t|  + + 5 55  - -m.N PPrLc[US9up#SRX#U(aSOS5n[[[[R "[ S5S.nURS[R"US/S9US S 9 g ) z Add --container-mount-disk flag.rqa{} *name*::: {} *mount-path*::: Path on container to mount to. Mount paths with spaces and commas (and other special characters) are not supported by this command. *partition*::: Optional. The partition of the disk to mount. Multiple partitions of a disk can be mounted.{} *mode*::: Volume mount mode: `rw` (read/write) or `ro` (read-only). Defaults to `rw`. Fails if the disk mode is `ro` and volume mount mode is `rw`. r,z" Can't be used with --create-disk.--container-mount-disk)r$ mount-path partitionr r])r required_keysrk)rrrN) rSr_rrKrGrHrYrrr)rrqr8rRrrs r<AddContainerMountDiskFlagr`X s6L + F;2!FH & 46NO  $     D G   rLcrUc[R"SS5nUc[U5S:XaURR USR 5R 5USRUSRURRRR:HS.S4$UHnURR UR 5R 5nXQ:XdM=UURURURRRR:HS.S4s $ g)z6Helper to match a mount disk's name to a disk message.ralphar;rr$ device_namerFNN) rGetClientClassrrrisourcerm deviceNamer MESSAGES_MODULE AttachedDiskModeValueValuesEnumrV)holdermount_disk_namer(client disk_specr4s r<_GetMatchingDiskFromMessagesrp{ s ^  G 4FTa    " "47>> 2 7 7 9 G   !W\\  # # 0 0 D D O OP     i  &&y'7'78==?I#""6#9#9#F#F%%jj1   rLcSnUc+[X-5S:XaX-SnU"U5[U54$UH$nURS5U:XdMU"U5S4s $ UH$nURS5U:XdMU"U5S4s $ g)z?Helper to match a mount disk's name to a disk spec from a flag.cnURS5URS5URS5S:HS.$)Nr$rr rrcrrs r<_GetMatchingDiskFromSpec;_GetMatchingDiskFromFlags.._GetMatchingDiskFromSpec s5 xx .hhv$& rLr;rr$FTre)rboolr6)rmr(rrsros r<_GetMatchingDiskFromFlagsrv sT%7!8A!=#Q'I #I .[0A AAi}}V/ %i 0% 77i}}V/ %i 0$ 66 rLcbURS5nU[RR:Xa<URS5(a&[R "SSR X55eURS5(a.U(a&[R "SSR U55egg)zAMake sure the correct mode is specified for container mount disk.r^rr\zValue for [mode] in [--container-mount-disk] cannot be [rw] if the disk is attached in [ro] mode: disk name [{}], partition [{}]zeCannot mount disk named [{}] to container: disk is created in [ro] mode and thus cannot be formatted.N)r6rrUrVrrr_)r$r mount_disk matching_diskcreater^s r< _CheckModer{ snn[))$44???  - -  HHN I  t  - -  --3VD\ ;;"(rLc PU=(d /nU=(d /nU(dgU(d%U(dU(d[R"SS5eU(aSOSn/nUGHGnU(a[XRS5X%S9upO[ URS5X#5upURS5(dg[ X#-5S:wa&[R"SS R U55eU RS5n U (d[R"SS 5eO>URS5n U (d&[R"SS R X55eU (aU RS 5(aiU RS 5U RS5:waE[R"SS R U RS5U RS 555eURS5n U (a [XXU 5 U (aRU (aKURS5(a5[R"SSR XRS555e[R"U5nURS5=(d U US'URU5 GMJ U$)z&Validate --container-mount-disk value.Nr\z-Must be used with `--disk` or `--create-disk`r,z# using `--disk` or `--create-disk`.r$)rnr;zfMust specify the name of the disk to be mounted unless exactly one disk is attached to the instance{}.zhWhen attaching or creating a disk that is also being mounted to a container, must specify the disk name.z`Attempting to mount a disk that is not attached to the instance: must attach a disk named [{}]{}rdzContainer mount disk cannot be used with a device whose device-name is different from its name. The disk with name [{}] has the device-name [{}].r r^z{Container mount disk cannot specify a partition when the disk is created with --create-disk: disk name [{}], partition [{}]) rrrpr6rvrr_r{copydeepcopyrk) rlcontainer_mount_diskr(rrqrnmessagevalidated_disksrxryrzr$rs r<GetValidatedContainerMountDiskr s` $!r+  +  - - 7 99B"G'/(j: ..($?mV8 .. $5m >>& ! ! T  A %11 $ 66U(d[R"TS5eU$)NzEmpty string is not allowed.)rr)stringparameter_names r<FactoryNonEmptyString..Factorys%   / /0N PP MrLr)rrs` r<r\r\s .rLcUR5nURS[R"5SSSS9 URSSS9 URS [R"5SS S S9 g ) z.Add flags to update the container environment.rrkra Update environment variables `KEY` with value `VALUE` passed to container. - Sets `KEY` to the specified value. - Adds `KEY` = `VALUE`, if `KEY` is not yet declared. - Only the last value of `KEY` is taken when `KEY` is repeated more than once. Values, declared with `--container-env` flag override those with the same `KEY` from file, provided in `--container-env-file`. rIraR Update environment variables from a file. Same update rules as for `--container-env` apply. Values, declared with `--container-env` flag override those with the same `KEY` from file. File with environment variables declarations in format used by docker (almost). This means: - Lines are in format KEY=VALUE - Values must contain equality signs. - Variables without values are not supported (this is different from docker format). - If # is first non-whitespace character in a line the line is ignored as a comment. rz--remove-container-envKEYz} Removes environment variables `KEY` from container declaration Does nothing, if a variable is not present. N)add_argument_grouprrrrL)r env_groups r<_AddContainerEnvGroupr s''))       "   $       rLcjUR5nURSSSS9 URSSSSS 9 g) z&Add flags to update the container arg.rrka Completely replaces the list of arguments with the new list. Each argument must have a separate --container-arg flag. Arguments are appended the new list in the order of flags. Cannot be used in the same command with `--clear-container-arg`. rz--clear-container-argsrNz Removes the list of arguments from container declaration. Cannot be used in the same command with `--container-arg`. rr|)r arg_groups r<_AddContainerArgGroupr@sS113)         rLc|UR5nURS[S5SS9 URSSSSS9 g) z=Add flags to update the command in the container declaration.rz Sets command in the declaration to the specified value. Empty string is not allowed. Cannot be used in the same command with `--clear-container-command`. rz--clear-container-commandrNz~ Removes command from container declaration. Cannot be used in the same command with `--container-command`. r)rrr\)r command_groups r<_AddContainerCommandGroupr[sW557- / 0  !   rLc U(aSnOSnURSS[R"[[[R "[ S5S.S9SSRU5S 9 g ) z/Helper to add --container-mount-host-path flag.z - Adds a volume, if `mount-path` is not yet declared. - Replaces a volume, if `mount-path` is declared. All parameters (`host-path`, `mount-path`, `mode`) are completely replaced.r,z--container-mount-host-pathz3host-path=HOSTPATH,mount-path=MOUNTPATH[,mode=MODE])z host-pathr]r rrkaf Mounts a volume by using host-path.{} *host-path*::: Path on host to mount from. *mount-path*::: Path on container to mount to. Mount paths with spaces and commas (and other special characters) are not supported by this command. *mode*::: Volume mount mode: rw (read/write) or ro (read-only). Default: rw. rrrrN)rrrrrGrHrYr_)rrq additionals r<rrtsrJJ#C   ##$8$AC     & 5rLcZURSS[R"S[0S9SSS9 g) z+Helper to add --container-mount-tmpfs flag.z--container-mount-tmpfszmount-path=MOUNTPATHr]rrkz Mounts empty tmpfs into container at MOUNTPATH. *mount-path*::: Path on container to mount to. Mount paths with spaces and commas (and other special characters) are not supported by this command. rNrrs r<rrs6$   \3$7 8    rLc .UR5n[USS9 [U5 U(a [USS9 SS/nU(aUR S5 UR S[ R"5SSRS RU55S 9 g ) z5Add flags to update what is mounted to the container.Tr[z `host-path`z`tmpfs`z`disk`z--remove-container-mountszMOUNTPATH[,MOUNTPATH,...]z Removes volume mounts ({}) with `mountPath: MOUNTPATH` from container declaration. Does nothing, if a volume mount is not declared. rTrN) rrrr`rkrrrLr_r7)rcontainer_mount_disk_enabled mount_group mount_typess r<_AddContainerMountGrouprs))++ >k*!f6 *+!x  !    ) &;' ( *rLcURS[S5SS9 URSSSSS9 URS SSS S9 URS SSS S9 URS /SQSSSS9 g)z$Add basic args for update-container.rzp Sets container image in the declaration to the specified value. Empty string is not allowed. rrrNzE Sets permission to run container to the specified value. rrzk Sets configuration whether to keep container `STDIN` always open to the specified value. rzp Sets configuration whether to allocate a pseudo-TTY for the container to the specified value. rrrc"UR5$rFrrs r<r#_AddContainerArgs..rrLzB Sets container restart policy to the specified value. )rrrrrr\rs r<_AddContainerArgsrs  - .               "/ "  rLc[RUSS9 [U5 [U5 [ U5 [ XS9 [ U5 [USSSS9 [U5 g)z1Add all args to update the container environment.r)r)rFT)rrqr N) INSTANCE_ARG AddArgumentrrrrrr(r,)rrs r<AddUpdateContainerArgsrs[6(;F# IF $dL(0rLc8SnSSS.nURSUSSUS9 g ) z5Helper to add --post-key-revocation-action-type flag.zuSpecifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is noop.No operation is performed.zSThe instance is shut down when the KMS key of one of its attached disks is revoked.)noopshutdownz!--post-key-revocation-action-typerFrrr(rNrrr choices_texts r<"AddPostKeyRevocationActionTypeArgsrs?H) '4,  )  rLcBURS[RSS9 g)Nz--enable-nested-virtualizationzL If set to true, enables nested virtualization for the instance. rrrs r<AddNestedVirtualizationArgsrs&&  - -  rLc.URS[SS9 g)Nz--threads-per-corea/ The number of visible threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. Valid values are: 1 or 2. For more information about configuring SMT, see: https://cloud.google.com/compute/docs/instances/configuring-simultaneous-multithreading. rrrKrs r<AddThreadsPerCoreArgsrs     rLcBURS[RSS9 g)Nz--enable-uefi-networkingzO If set to true, enables UEFI networking for the instance creation. rrrs r<AddEnableUefiNetworkingArgsr,s&  - -  rLc8URSSSSS.[SS9 g)Nz--performance-monitoring-unitzGThis enables architecturally defined non-last level cache (LLC) events.z,This enables most documented core/L2 events.z4This enables most documented core/L2 and LLC events.) architecturalstandardenhancedzMThe type of performance monitoring counters (PMCs) to enable in the instance.rrrrs r< AddPerformanceMonitoringUnitArgsr5s5%EL   rLc.URS[SS9 g)Nz--numa-node-countz The number of virtual NUMA nodes for the instance. Valid values are: 0, 1, 2, 4 or 8. Setting NUMA node count to 0 means using the default setting. rrrs r<AddNumaNodeCountArgsrHs    rLc.URS[SS9 g)Nz--visible-core-counta The number of physical cores to expose to the instance's guest operating system. The number of virtual CPUs visible to the instance's guest operating system is this number of cores multiplied by the instance's count of visible threads per physical core. rrrs r<AddVisibleCoreCountArgsrSs    rLcfSSS.nU(aSUS'URSU[RSS9 g ) z'Adds stack type arguments for instance.z5The network interface will be assigned IPv4 addressesz;The network interface can have both IPv4 and IPv6 addresses) IPV4_ONLY IPV4_IPV6z5The network interface will be assigned IPv6 addresses IPV6_ONLYz --stack-typezmSpecifies whether IPv6 is enabled on the default network interface. If not specified, IPV4_ONLY will be used.rNr)rrrs r<AddStackTypeArgsr_sNK G ' ? K   % % A rLcHURSSS0[RSS9 g)z@Adds IPv6 network tier for network interface IPv6 access config.z--ipv6-network-tierPREMIUMz(High quality, Google-grade network tier.zqSpecifies the IPv6 network tier that will be used to configure the instance network interface IPv6 access config.rNrrs r<AddIpv6NetworkTierArgsrvs5 @  % % A CrLc8URS[S5SS9 g)Nz--external-ipv6-address Assigns the given external IPv6 address to the instance that is created. The address must be the first IP address in the range. This option can be used only when creating a single instance. rrrs r<AddIPv6AddressArgsrs& 3 4  rLc8URS[S5SS9 g)Nz--ipv6-addressrrrrs r<AddIPv6AddressAlphaArgsrs& * +  rLc.URS[SS9 g)Nz--external-ipv6-prefix-lengthz The prefix length of the external IPv6 address range. This field should be used together with `--external-ipv6-address`. Only the /96 IP address range is supported, and the default value is 96. rrrs r<AddIPv6PrefixLengthArgsrs %   rLc.URS[SS9 g)Nz--ipv6-prefix-lengthz The prefix length of the external IPv6 address range. This field should be used together with `--ipv6-address`. Only the /96 IP address range is supported, and the default value is 96. rrrs r<AddIPv6PrefixLengthAlphaArgsrs    rLc8URS[S5SS9 g)Nz--internal-ipv6-addressa Assigns the given internal IPv6 address or range to the instance that is created. The address must be the first IP address in the range or from a /96 IP address range. This option can be used only when creating a single instance. rrrs r<AddInternalIPv6AddressArgsrs& 3 4  rLc.URS[SS9 g)Nz--internal-ipv6-prefix-lengthap Optional field that indicates the prefix length of the internal IPv6 address range. It should be used together with --internal-ipv6-address. Only /96 IP address range is supported and the default value is 96. If not set, either the prefix length from --internal-ipv6-address will be used or the default value of 96 will be assigned. rrrs r<AddInternalIPv6PrefixLengthArgsrs %   rLc  SRSR[RVs/sHn[R "U5PM sn5S9nS[ 0nURS[R"US9SSUS 9 g s snf) z:Adds config flags for advanced networking bandwidth tiers.a Configures network performance settings for the instance. If this flag is not specified, the instance will be created with its default network performance configuration. *total-egress-bandwidth-tier*::: Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: [{tier_values}] ,) tier_valuestotal-egress-bandwidth-tier--network-performance-configsrrkrHrIN) r_r7rADV_NETWORK_TIER_CHOICESrmrnrrrr)rtier_valnetwork_perf_config_helprs r< AddNetworkPerformanceConfigsArgsrs   &SXX#<<'DDFJ z)K)KK  / / ) FFLf  XX%.%G%G'%G]]8,%G'GMG G's Cc$URSSS9 g)zAdds node project argument.z--node-projectza The name of the project with shared sole tenant node groups to create an instance in.rNrrs r<AddNodeProjectArgsrs rLc8SnSSS.nURSUSSUS9 g ) z0Helper to add --key-revocation-action-type flag.zuSpecifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is none.rzQThe instance is stopped when the KMS key of one of its attached disks is revoked.)rAstopz--key-revocation-action-typerFrNrrs r<AddKeyRevocationActionTypeArgsrs?H)+",  $  rLcPSnSS0nURSU[RUS9 g)z1Adds maintenance interval arguments for instance.z6Specifies the frequency of planned maintenance events.rz+PERIODIC means the VM is a Stable Fleet VM.rrNrrs r<AddMaintenanceIntervalArgsrs7F)KL,  % %  rLcLURS[R"SSS9SS9 g)Nz--availability-domainr;rap Specifies the availability domain that this VM instance should be scheduled on. The number of availability domains that a VM can be scheduled on is specified when you create the spread placement policy. Specify a value from 1 to the number of domains that are available in your placement policy. r)rrr+rs r<AddAvailabilityDomainAgrsrs-  ! !aQ ?  rLc.URS[SS9 g)Nz --turbo-modea4 Turbo mode to use for the instance. Supported modes include: * ALL_CORE_MAX To achieve all-core-turbo frequency for more consistent CPU performance, set the field to ALL_CORE_MAX. The field is unset by default, which results in maximum performance single-core boosting. rrrs r<AddTurboModeArgsr,s    rLcBURS[RSS9 g)Nz--skip-guest-os-shutdownz If enabled, then, when the instance is stopped or deleted, the instance is immediately stopped without giving time to the guest OS to cleanly shut down. rrrs r<AddSkipGuestOsShutdownArgsr;s&  - -  rLcLURS[R"5SS9 g)Nz--request-valid-for-durationa{ When you create an instance by using the FLEX_START provisioning model, you can specify the duration to wait for available resources. If the instance creation request is still pending after this duration, then the request fails. You specify a duration by using numbers followed by `h`, `m`, and `s` for hours, minutes, and seconds, respectively. For example, specify `30m` for a duration of 30 minutes, or `1h2m3s` for 1 hour, 2 minutes, and 3 seconds. Longer durations give you higher chances that your instance creation request succeeds when resources are in high demand. rr0rs r<AddRequestValidForDurationArgsrFs)$    ! rLclURS[SS9 URS[RSS9 g)Nz --identityz; The workload identity to use for the instance. rz--identity-certificatezE Enables or disables managed workload identities on a VM. r)rrrrrs r<AddWorkloadIdentityConfigArgsrXsF     - - rL)T)Fadded)FFFF)F)FFF) FFFFFTFFTFFFF)FFFFF)FFFTF) TFFFFTFFF)FN)r,Creater )TF)TFF)returnNrF)__doc__ __future__rrrr}rGrkr4googlecloudsdk.api_lib.computerrrr r r r $googlecloudsdk.api_lib.compute.zonesr regooglecloudsdk.api_lib.utilrgooglecloudsdk.callioperrrr"googlecloudsdk.command_lib.computerr{rrryrrngooglecloudsdk.command_lib.kmsrr-$googlecloudsdk.command_lib.util.apisr$googlecloudsdk.command_lib.util.argsrgooglecloudsdk.corerrrrgrmr}rrrrDISK_METAVAR_ZONAL_OR_REGIONALDEFAULT_LIST_FORMATIPV6_INFO_LIST_FORMATDEFAULT_LIST_FORMAT_WITH_IPV6rzr|rINSTANCE_ARG_NOT_REQUIRED INSTANCES_ARGINSTANCES_ARG_FOR_CREATEINSTANCES_ARG_FOR_IMPORTResourceResolverFromMaprorpSSH_INSTANCE_RESOLVERr=rDrKrIr~rrrrrrrrrrrrrrrrrrr rrr2rXr^rirqrpr}rxryrrzr{rrrrrrrrrrr r rrrr(r,r1r8r:r@rErNrPrRrgrkrsrxrzrrrrrrrrrrrrrrrrrrr r rrrr(r,r<r>rKrPrSrYr`rprvr{rr\rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrLr<r sz?&' 4;55640I,+/(.OOEEM:<#*; 4 H6 ' E   U$ ! --  33(. 0 *::   33(. 0..  33(.   )99  33("<<  )99  33("<<  &66>>((--/BCE:*:"D!/H2 2 D @0'6$"#( K\F <N5 B/ B 2 (%P,$', (-FREBPD!$) %#(qh ! H4@  %#( *: )xMz %#( MC`#; ;9P IM %"'Q4h  :>* $ M4 FRj%P 8  <~3. ( 57,4+5 DQN  J: A<;:| D* GF$K$ : .     > ,=*l ^K! HcL  %2H N 59-205_D&',*/ P  $ P f  +\ )8P F8,;*/4*. AH0 f 6 2%P  *4- ` 1$    &   . C      %8""    $rL