imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-20 13:10:18 +00:00
Code Activity

gcloud: Wed Dec 10 10:54:29 UTC 2025

Browse source
This commit is contained in:
Automated 2025-12-10 10:54:29 +00:00
parent 7b14250313
commit 6d07e70b12
313 changed files with 11521 additions and 1088 deletions
Download patch file Download diff file Expand all files Collapse all files

48
gcloud/iam/policy-bindings/create
View file

@ -31,8 +31,8 @@ POSITIONAL ARGUMENTS
PolicyBinding resource - Identifier. The name of the policy binding, in
the format
{binding_parent/locations/{location}/policyBindings/{policy_binding_id}.
The binding parent is the closest Resource Manager resource (i.e.,
Project, Folder or Organization) to the binding target.
The binding parent is the closest Resource Manager resource (project,
folder, or organization) to the binding target.
Format:
@ -96,35 +96,43 @@ POSITIONAL ARGUMENTS
REQUIRED FLAGS
--policy=POLICY
The resource name of the policy to be bound. The binding parent and
policy must belong to the same Organization (or Project).
policy must belong to the same organization.
Target is the full resource name of the resource to which the policy will
be bound. Immutable once set.
The full resource name of the resource to which the policy will be bound.
Immutable once set.
This must be specified.
Arguments for the target.
--target-principal-set=TARGET_PRINCIPAL_SET
Full Resource Name used for principal access boundary policy
bindings Examples:
The full resource name that's used for principal access boundary
policy bindings. The principal set must be directly parented by the
policy binding's parent or same as the parent if the target is a
project, folder, or organization.
▫ Organization:
//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID
▫ Folder: //cloudresourcemanager.googleapis.com/folders/FOLDER_ID
▫ Project:
◇ //cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER
◇ //cloudresourcemanager.googleapis.com/projects/PROJECT_ID
▫ Workload Identity Pool:
//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID
▫ Workforce Identity:
//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID
▫ Workspace Identity:
//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID
Examples:
▫ For bindings parented by an organization:
◇ Organization:
//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID
◇ Workforce Identity:
//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID
◇ Workspace Identity:
//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID
▫ For bindings parented by a folder:
◇ Folder:
//cloudresourcemanager.googleapis.com/folders/FOLDER_ID
▫ For bindings parented by a project:
◇ Project:
▹ //cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER
▹ //cloudresourcemanager.googleapis.com/projects/PROJECT_ID
◇ Workload Identity Pool:
//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID
OPTIONAL FLAGS
--annotations=[ANNOTATIONS,...]
User defined annotations. See https://google.aip.dev/148#annotations
User-defined annotations. See https://google.aip.dev/148#annotations
for more details such as format and size limitations.
KEY

13
gcloud/iam/policy-bindings/update
View file

@ -9,7 +9,7 @@ SYNOPSIS
[--annotations=[ANNOTATIONS,...]
| --update-annotations=[UPDATE_ANNOTATIONS,...] --clear-annotations
| --remove-annotations=REMOVE_ANNOTATIONS]
[--condition-description=CONDITION_DESCRIPTION
[--clear-condition --condition-description=CONDITION_DESCRIPTION
--condition-expression=CONDITION_EXPRESSION
--condition-location=CONDITION_LOCATION
--condition-title=CONDITION_TITLE] [GCLOUD_WIDE_FLAG ...]
@ -27,8 +27,8 @@ POSITIONAL ARGUMENTS
PolicyBinding resource - Identifier. The name of the policy binding, in
the format
{binding_parent/locations/{location}/policyBindings/{policy_binding_id}.
The binding parent is the closest Resource Manager resource (i.e.,
Project, Folder or Organization) to the binding target.
The binding parent is the closest Resource Manager resource (project,
folder, or organization) to the binding target.
Format:
@ -107,7 +107,7 @@ FLAGS
At most one of these can be specified:
--annotations=[ANNOTATIONS,...]
Set annotations to new value. User defined annotations. See
Set annotations to new value. User-defined annotations. See
https://google.aip.dev/148#annotations for more details such as
format and size limitations.
@ -130,7 +130,7 @@ FLAGS
--annotations=path_to_file.(yaml|json)
--update-annotations=[UPDATE_ANNOTATIONS,...]
Update annotations value or add key value pair. User defined
Update annotations value or add key value pair. User-defined
annotations. See https://google.aip.dev/148#annotations for more
details such as format and size limitations.
@ -205,6 +205,9 @@ FLAGS
expression are determined by the service that evaluates it. See the
service documentation for additional information.
--clear-condition
Set googleIamV3PolicyBinding.condition back to default value.
--condition-description=CONDITION_DESCRIPTION
Description of the expression. This is a longer text which describes
the expression, e.g. when hovered over it in a UI.

15
gcloud/iam/principal-access-boundary-policies/create
View file

@ -110,9 +110,10 @@ FLAGS
rule.
resources
A list of Cloud Resource Manager resources. The resource and all
the descendants are included. The number of resources in a policy
is limited to 500 across all rules.
A list of Resource Manager resources. If a resource is listed in
the rule, then the rule applies for that resource and its
descendants. The number of resources in a policy is limited to
500 across all rules in the policy.
The following resource types are supported:
@ -140,10 +141,10 @@ FLAGS
this group are specified.
--details-enforcement-version=DETAILS_ENFORCEMENT_VERSION
The version number that indicates which Google Cloud services are
included in the enforcement (e.g. "latest", "1", ...). If empty, the
PAB policy version will be set to the current latest version, and
this version won't get updated when new versions are released.
The version number (for example, 1 or latest) that indicates which
permissions are able to be blocked by the policy. If empty, the PAB
policy version will be set to the most recent version number at the
time of the policy's creation.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,

4
gcloud/iam/principal-access-boundary-policies/delete
View file

@ -65,8 +65,8 @@ FLAGS
it must match the server's etag.
--force
If set to true, the request will force the deletion of the Policy even
if the Policy references PolicyBindings.
If set to true, the request will force the deletion of the policy even
if the policy is referenced in policy bindings.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,

36
gcloud/iam/principal-access-boundary-policies/update
View file

@ -10,7 +10,8 @@ SYNOPSIS
[--annotations=[ANNOTATIONS,...]
| --update-annotations=[UPDATE_ANNOTATIONS,...] --clear-annotations
| --remove-annotations=REMOVE_ANNOTATIONS]
[--details-enforcement-version=DETAILS_ENFORCEMENT_VERSION
[--clear-details
--details-enforcement-version=DETAILS_ENFORCEMENT_VERSION
--details-rules=[description=DESCRIPTION],
[effect=EFFECT],[resources=RESOURCES]
| --add-details-rules=[description=DESCRIPTION],
@ -152,11 +153,15 @@ FLAGS
Principal access boundary policy details
--clear-details
Set googleIamV3PrincipalAccessBoundaryPolicy.details back to default
value.
--details-enforcement-version=DETAILS_ENFORCEMENT_VERSION
The version number that indicates which Google Cloud services are
included in the enforcement (e.g. "latest", "1", ...). If empty, the
PAB policy version will be set to the current latest version, and
this version won't get updated when new versions are released.
The version number (for example, 1 or latest) that indicates which
permissions are able to be blocked by the policy. If empty, the PAB
policy version will be set to the most recent version number at the
time of the policy's creation.
Update details_rules.
@ -175,9 +180,10 @@ FLAGS
rule.
resources
A list of Cloud Resource Manager resources. The resource and
all the descendants are included. The number of resources in a
policy is limited to 500 across all rules.
A list of Resource Manager resources. If a resource is listed
in the rule, then the rule applies for that resource and its
descendants. The number of resources in a policy is limited to
500 across all rules in the policy.
The following resource types are supported:
@ -215,9 +221,10 @@ FLAGS
rule.
resources
A list of Cloud Resource Manager resources. The resource and
all the descendants are included. The number of resources in a
policy is limited to 500 across all rules.
A list of Resource Manager resources. If a resource is listed
in the rule, then the rule applies for that resource and its
descendants. The number of resources in a policy is limited to
500 across all rules in the policy.
The following resource types are supported:
@ -260,9 +267,10 @@ FLAGS
this rule.
resources
A list of Cloud Resource Manager resources. The resource and
all the descendants are included. The number of resources in
a policy is limited to 500 across all rules.
A list of Resource Manager resources. If a resource is listed
in the rule, then the rule applies for that resource and its
descendants. The number of resources in a policy is limited
to 500 across all rules in the policy.
The following resource types are supported: