1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-16 12:22:03 +00:00

gcloud: Thu Apr 20 10:38:56 UTC 2023

This commit is contained in:
Automated 2023-04-20 10:38:56 +00:00
parent b155beb241
commit b33a8a3e6e
169 changed files with 3258 additions and 576 deletions

View file

@ -1,6 +1,6 @@
NAME
gcloud dataplex lakes authorize - authorize a project service account to
manage given resource
gcloud dataplex lakes authorize - authorize a service agent to manage
resources
SYNOPSIS
gcloud dataplex lakes authorize
@ -10,23 +10,23 @@ SYNOPSIS
--secondary-project=SECONDARY_PROJECT) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
IAM Bindings for the service account of the primary project will be added
to a secondary project, a storage bucket, or BigQuery dataset.
The service agent for the primary project will be granted an IAM role on a
secondary project, a Cloud Storage bucket, or a BigQuery dataset.
EXAMPLES
To authorize the service account in project test-project to manage another
project test-project2, run:
To authorize the service agent in project test-project to manage resources
in the project test-project2, run:
$ gcloud dataplex lakes authorize --project=test-project \
--project-resource=test-project2
To authorize the service account in project test-project to manage the
storage bucket dataplex-storage-bucket, run:
To authorize the service agent in project test-project to manage the Cloud
Storage bucket dataplex-storage-bucket, run:
$ gcloud dataplex lakes authorize --project=test-project \
--storage-bucket-resource=dataplex-storage-bucket
To authorize the service account in project test-project to manage the
To authorize the service agent in project test-project to manage the
BigQuery dataset test-dataset in project test-project2, run:
$ gcloud dataplex lakes authorize --project=test-project \
@ -34,27 +34,30 @@ EXAMPLES
--secondary-project=test-project2
REQUIRED FLAGS
Container or Object to bind P4SA.
The resource on which to grant a role to the service agent.
Exactly one of these must be specified:
--project-resource=PROJECT_RESOURCE
The identifier of the project to authorize.
The identifier of the project whose resources the service agent will
manage.
--storage-bucket-resource=STORAGE_BUCKET_RESOURCE
The identifier of the Cloud Storage bucket to authorize the project
on.
The identifier of the Cloud Storage bucket that the service agent
will manage.
Fields to help identify the BigQuery Dataset.
Fields to identify the BigQuery dataset.
--bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
The identifier of the BigQuery dataset to authorize.
The identifier of the BigQuery dataset that the service agent will
manage.
This flag argument must be specified if any of the other arguments
in this group are specified.
--secondary-project=SECONDARY_PROJECT
The identifier of the Project where BigQuery dataset resides.
The identifier of the project where the BigQuery dataset is
located.
This flag argument must be specified if any of the other arguments
in this group are specified.

View file

@ -1,6 +1,6 @@
NAME
gcloud dataplex lakes deauthorize - deauthorize a project service account
from managing given resource
gcloud dataplex lakes deauthorize - deauthorize a service agent from
managing resources
SYNOPSIS
gcloud dataplex lakes deauthorize
@ -10,52 +10,54 @@ SYNOPSIS
--secondary-project=SECONDARY_PROJECT) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Remove IAM Bindings for the service account of the primary project from a
secondary project, a storage bucket, or BigQuery dataset.
The service agent for the primary project will have its IAM role revoked
from a secondary project, a Cloud Storage bucket, or a BigQuery dataset.
EXAMPLES
To deauthorize the service account in project test-project from managing
another project test-project2, run:
To deauthorize the service agent in project test-project from managing
resources in the project test-project2, run:
$ gcloud dataplex lakes deauthorize --project=test-project \
--project-resource=test-project2
To deauthorize the service account in project test-project from managing
the storage bucket dataplex-storage-bucket, run:
To deauthorize the service agent in project test-project from managing the
Cloud Storage bucket dataplex-storage-bucket, run:
$ gcloud dataplex lakes deauthorize --project=test-project \
--storage-bucket-resource=dataplex-storage-bucket
To deauthorize the service account in project test-project from managing
the BigQuery dataset test-dataset in project test-project2, run:
To deauthorize the service agent in project test-project from managing the
BigQuery dataset test-dataset in project test-project2, run:
$ gcloud dataplex lakes deauthorize --project=test-project \
--bigquery-dataset-resource=test-dataset \
--secondary-project=test-project2
REQUIRED FLAGS
Container or Object to unbind p4sa
The resource for which the service agent's role will be revoked.
Exactly one of these must be specified:
--project-resource=PROJECT_RESOURCE
The identifier of the project to deauthorize.
The identifier of the project whose resources the service agent will
no longer manage.
--storage-bucket-resource=STORAGE_BUCKET_RESOURCE
The identifier of the Cloud Storage bucket to deauthorize the project
from.
The identifier of the Cloud Storage bucket that the service agent
will no longer manage.
Fields to help identify the BigQuery Dataset.
Fields to identify the BigQuery dataset.
--bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
The identifier of the BigQuery dataset to deauthorize the project
from.
The identifier of the BigQuery dataset that the service agent will
no longer manage.
This flag argument must be specified if any of the other arguments
in this group are specified.
--secondary-project=SECONDARY_PROJECT
The identifier of the Project where BigQuery dataset resides
The identifier of the project where the BigQuery dataset is
located.
This flag argument must be specified if any of the other arguments
in this group are specified.

View file

@ -25,13 +25,13 @@ COMMANDS
Add IAM policy binding to a Dataplex lake resource.
authorize
Authorize a project service account to manage given resource.
Authorize a service agent to manage resources.
create
Create a Dataplex lake resource.
deauthorize
Deauthorize a project service account from managing given resource.
Deauthorize a service agent from managing resources.
delete
Delete a Dataplex lake resource.