gcloud_alpha_container_binauthz_attestors_create (1)

NAME

gcloud alpha container binauthz attestors create - create an Attestor

SYNOPSIS

gcloud alpha container binauthz attestors create ATTESTOR (--attestation-authority-note=ATTESTATION_AUTHORITY_NOTE : --attestation-authority-note-project=ATTESTATION_AUTHORITY_NOTE_PROJECT) [--description=DESCRIPTION] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

(ALPHA) Create an Attestor.

POSITIONAL ARGUMENTS

Attestor resource - The attestor to be created. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the [project] attribute: provide the argument [ATTESTOR] on the command line with a fully specified name; provide the argument [--project] on the command line; set the property [core/project]. This must be specified.

ATTESTOR

ID of the attestor or fully qualified identifier for the attestor.

REQUIRED FLAGS

Note resource - The Container Analysis ATTESTATION_AUTHORITY Note to which the created attestor will be bound.

For the attestor to be able to access and use the Note, the Note must exist and the active gcloud account (core/account) must have the containeranalysis.occurrences.viewer permission for the Note. This can be achieved by granting the containeranalysis.notes.viewer role to the active account for the Note resource in question.

The arguments in this group can be used to specify the attributes of this resource. This must be specified.

--attestation-authority-note=ATTESTATION_AUTHORITY_NOTE

ID of the note or fully qualified identifier for the note. This flag must be specified if any of the other arguments in this group are specified.

--attestation-authority-note-project=ATTESTATION_AUTHORITY_NOTE_PROJECT

The Container Analysis project for the note.

OPTIONAL FLAGS

--description=DESCRIPTION

A description for the attestor

GCLOUD WIDE FLAGS

These flags are available to all commands: --account, --configuration, --flags-file, --flatten, --format, --help, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity. Run $ gcloud help for details.

NOTES

This command is currently in ALPHA and may change without notice. If this command fails with API permission errors despite specifying the right project, you will have to apply for early access and have your projects registered on the API whitelist to use it. To do so, contact Support at cloud.google.com/support This variant is also available:

$ gcloud beta container binauthz attestors create