gcloud: Tue Mar 1 04:29:52 UTC 2022

2026-07-21 06:27:15 +00:00 · 2022-03-01 04:29:52 +00:00 · 2022-03-01 04:29:52 +00:00 · 1456dab6c7
commit 1456dab6c7
parent aab53307a8
9791 changed files with 814712 additions and 0 deletions
--- a/gcloud/beta/secrets/remove-iam-policy-binding
+++ b/gcloud/beta/secrets/remove-iam-policy-binding
@ -0,0 +1,123 @@
+NAME
+    gcloud beta secrets remove-iam-policy-binding - remove IAM policy binding
+        for a secret
+
+SYNOPSIS
+    gcloud beta secrets remove-iam-policy-binding SECRET --member=PRINCIPAL
+        --role=ROLE
+        [--all | --condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Removes a policy binding from the IAM policy of a secret. One
+    binding consists of a member and a role.
+
+    See https://cloud.google.com/iam/docs/managing-policies for details of
+    policy role and member types.
+
+EXAMPLES
+    To remove an IAM policy binding for the role of 'roles/viewer' for the user
+    'test-user@gmail.com' on the my-secret, run:
+
+        $ gcloud beta secrets remove-iam-policy-binding my-secret \
+            --member='user:test-user@gmail.com' --role='roles/viewer'
+
+POSITIONAL ARGUMENTS
+     Secret resource - Name of the secret from which to remove IAM policy
+     binding. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways. To set the
+     project attribute:
+      ◆ provide the argument secret on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       SECRET
+          ID of the secret or fully qualified identifier for the secret. To set
+          the secret attribute:
+          ▸ provide the argument secret on the command line.
+
+REQUIRED FLAGS
+     --member=PRINCIPAL
+        The principal to remove the binding for. Should be of the form
+        user|group|serviceAccount:email or domain:domain.
+
+        Examples: user:test-user@gmail.com, group:admins@example.com,
+        serviceAccount:test123@example.domain.com, or
+        domain:example.domain.com.
+
+        Deleted principals have an additional deleted: prefix and a ?uid=UID
+        suffix, where UID is a unique identifier for the principal. Example:
+        deleted:user:test-user@gmail.com?uid=123456789012345678901.
+
+        Some resources also accept the following special values:
+        ◆ allUsers - Special identifier that represents anyone who is on the
+          internet, with or without a Google account.
+        ◆ allAuthenticatedUsers - Special identifier that represents anyone
+          who is authenticated with a Google account or a service account.
+
+     --role=ROLE
+        The role to remove the principal from.
+
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --all
+          Remove all bindings with this role and principal, irrespective of any
+          conditions.
+
+       --condition=[KEY=VALUE,...]
+          The condition of the binding that you want to remove. When the
+          condition is explicitly specified as None (--condition=None), a
+          binding without a condition is removed. Otherwise, only a binding
+          with a condition that exactly matches the specified condition
+          (including the optional description) is removed. For more on
+          conditions, refer to the conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the secretmanager/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/secret-manager/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud secrets remove-iam-policy-binding
+