gcloud dns managed-zones update

Stay organized with collections Save and categorize content based on your preferences.

gcloud dns managed-zones update - update an existing Cloud DNS managed-zone

gcloud dns managed-zones update ZONE [--async] [--denial-of-existence=DENIAL_OF_EXISTENCE] [--description=DESCRIPTION] [--dnssec-state=DNSSEC_STATE] [--forwarding-targets=[IP_ADDRESSES,…]] [--gkeclusters=[GKECLUSTERS,…]] [--ksk-algorithm=KSK_ALGORITHM] [--ksk-key-length=KSK_KEY_LENGTH] [--location=LOCATION] [--[no-]log-dns-queries] [--managed-reverse-lookup] [--networks=[NETWORK,…]] [--private-forwarding-targets=[IP_ADDRESSES,…]] [--update-labels=[KEY=VALUE,…]] [--zsk-algorithm=ZSK_ALGORITHM] [--zsk-key-length=ZSK_KEY_LENGTH] [--clear-labels     | --remove-labels=[KEY,…]] [--target-network=TARGET_NETWORK --target-project=TARGET_PROJECT] [GCLOUD_WIDE_FLAG …]

gcloud dns managed-zones update my-zone --description="Hello, world!"

To change the description of a zonal managed-zone in us-east1-a, run:

gcloud dns managed-zones update my-zone --description="Hello, world!" --location=us-east1-a

Zone resource - The name of the managed-zone to be updated. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

• provide the argument zone on the command line with a fully specified name;
• provide the argument --project on the command line;
• set the property core/project.

This must be specified.

ZONE

ID of the zone or fully qualified identifier for the zone.

To set the zone attribute:

• provide the argument zone on the command line.

--async

Return immediately, without waiting for the operation in progress to complete.

--denial-of-existence=DENIAL_OF_EXISTENCE

Requires DNSSEC enabled. DENIAL_OF_EXISTENCE must be one of: nsec, nsec3.

--description=DESCRIPTION

Short description for the managed zone.

--dnssec-state=DNSSEC_STATE

The DNSSEC state for this managed zone. DNSSEC_STATE must be one of:

off

Disable DNSSEC for the managed zone.

on

Enable DNSSEC for the managed zone.

transfer

Enable DNSSEC and allow transferring a signed zone in or out.

--forwarding-targets=[IP_ADDRESSES,…]

List of IPv4 addresses that the zone will forward queries to. Ignored for public visibility. Non-RFC1918 addresses will forward to the target through the Internet. RFC1918 addresses will forward through the VPC.

--gkeclusters=[GKECLUSTERS,…]

List of GKE clusters that the zone should be visible in if the zone visibility is [private].

--ksk-algorithm=KSK_ALGORITHM

String mnemonic specifying the DNSSEC algorithm of the key-signing key. Requires DNSSEC enabled. KSK_ALGORITHM must be one of: ecdsap256sha256, ecdsap384sha384, rsasha1, rsasha256, rsasha512.

--ksk-key-length=KSK_KEY_LENGTH

Length of the key-signing key in bits. Requires DNSSEC enabled.

--location=LOCATION

Specifies the desired service location the request is sent to. Defaults to Cloud DNS global service. Use --location=global if you want to target the global service.

--[no-]log-dns-queries

Specifies whether to enable query logging. Defaults to False. Use --log-dns-queries to enable and --no-log-dns-queries to disable.

--managed-reverse-lookup

Specifies whether this zone is a managed reverse lookup zone, required for Cloud DNS to correctly resolve Non-RFC1918 PTR records.

--networks=[NETWORK,…]

List of networks that the zone should be visible in if the zone visibility is [private].

--private-forwarding-targets=[IP_ADDRESSES,…]

List of IPv4 addresses that the zone will forward queries to. Ignored for public visibility. All addresses specified for this parameter will be reached through the VPC.

--update-labels=[KEY=VALUE,…]

List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created.

Keys must start with a lowercase character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers.

--zsk-algorithm=ZSK_ALGORITHM

String mnemonic specifying the DNSSEC algorithm of the key-signing key. Requires DNSSEC enabled. ZSK_ALGORITHM must be one of: ecdsap256sha256, ecdsap384sha384, rsasha1, rsasha256, rsasha512.

--zsk-key-length=ZSK_KEY_LENGTH

Length of the zone-signing key in bits. Requires DNSSEC enabled.

At most one of these can be specified:

--clear-labels

Remove all labels. If --update-labels is also specified then --clear-labels is applied first.

For example, to remove all labels:

gcloud dns managed-zones update --clear-labels

To remove all existing labels and create two new labels, foo and baz:

gcloud dns managed-zones update --clear-labels --update-labels foo=bar,baz=qux

--remove-labels=[KEY,…]

List of label keys to remove. If a label does not exist it is silently ignored. If --update-labels is also specified then --update-labels is applied first.

--target-network=TARGET_NETWORK

Network ID of the Google Compute Engine private network to forward queries to.

--target-project=TARGET_PROJECT

Project ID of the Google Compute Engine private network to forward queries to.

Run $ gcloud help for details.