gcloud dns policies create

NAME
gcloud dns policies create - creates a new Cloud DNS policy
SYNOPSIS
gcloud dns policies createPOLICY--description=DESCRIPTION--networks=[NETWORKS,…][--alternative-name-servers=[NAME_SERVERS,…]][--enable-dns64-all-queries][--enable-inbound-forwarding][--enable-logging][--private-alternative-name-servers=[NAME_SERVERS,…]][GCLOUD_WIDE_FLAG]
DESCRIPTION
This command creates a new Cloud DNS policy.
EXAMPLES
To create a new policy with minimal arguments, run:
gclouddnspoliciescreatemypolicy--description='My new policy test policy 5'--networks=''

To create a new policy with all optional arguments, run:

gclouddnspoliciescreatemypolicy--description='My new policy test policy 5'--networks=network1,network2--alternative-name-servers=192.168.1.1,192.168.1.2--enable-inbound-forwarding--enable-logging--enable-dns64-all-queries
POSITIONAL ARGUMENTS
Policy resource - The policy to create. This represents a Cloud resource. (NOTE)Some attributes are not given arguments in this group but can be set in otherways.

To set theproject attribute:

  • provide the argumentpolicy on the command line with a fullyspecified name;
  • set the propertycore/project.

This must be specified.

POLICY
ID of the policy or fully qualified identifier for the policy.

To set thepolicy attribute:

  • provide the argumentpolicy on the command line.
REQUIRED FLAGS
--description=DESCRIPTION
A description of the policy.
--networks=[NETWORKS,…]
The comma separated list of network names to associate with the policy.
OPTIONAL FLAGS
--alternative-name-servers=[NAME_SERVERS,…]
List of alternative name servers to forward to. Non-RFC1918 addresses willforward to the target through the Internet.RFC1918 addresses will forwardthrough the VPC.
--enable-dns64-all-queries
Specifies whether to allow networks bound to this policy to use DNS64 forIPv6-only VM instances.
--enable-inbound-forwarding
Specifies whether to allow networks bound to this policy to receive DNS queriessent by VMs or applications over VPN connections. Defaults to False.
--enable-logging
Specifies whether to enable query logging. Defaults to False.
--private-alternative-name-servers=[NAME_SERVERS,…]
List of alternative name servers to forward to. All addresses specified for thisparameter will be reached through the VPC.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
These variants are also available:
gcloudalphadnspoliciescreate
gcloudbetadnspoliciescreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-06-10 UTC.