gcloud: Wed Apr 6 08:36:53 UTC 2022

gcloud/beta/spanner/databases/remove-iam-policy-binding

@@ -5,13 +5,14 @@ NAME
 SYNOPSIS
     gcloud beta spanner databases remove-iam-policy-binding
         (DATABASE : --instance=INSTANCE) --member=PRINCIPAL --role=ROLE
-        [GCLOUD_WIDE_FLAG ...]
+        [--all | --condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (BETA) Remove an IAM policy binding of a Cloud Spanner database.
 
 EXAMPLES
-    To Remove an IAM policy binding for the role of 'roles/editor' for the user
+    To remove an IAM policy binding for the role of 'roles/editor' for the user
     'test-user@gmail.com' with database 'my-database' and instance
     'my-instance', run:
 
@@ -19,6 +20,19 @@ EXAMPLES
             my-database --instance='my-instance' \
             --member='user:test-user@gmail.com' --role='roles/editor'
 
+    To remove an IAM policy binding which expires at the end of the year 2018
+    for the role of 'roles/spanner.databaseAdmin' and the user
+    'test-user@gmail.com' with database 'my-database' and instance
+    'my-instance', run:
+
+        $ gcloud beta spanner databases remove-iam-policy-binding \
+            my-database --instance='my-instance' \
+            --member='user:test-user@gmail.com' \
+            --role='roles/spanner.databaseAdmin' \
+            --condition='expression=request.time <
+         timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
+        tion=Expires at midnight on 2018-12-31'
+
     See https://cloud.google.com/iam/docs/managing-policies for details of
     policy role and member types.
 
@@ -74,6 +88,48 @@ REQUIRED FLAGS
      --role=ROLE
         The role to remove the principal from.
 
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --all
+          Remove all bindings with this role and principal, irrespective of any
+          conditions.
+
+       --condition=[KEY=VALUE,...]
+          The condition of the binding that you want to remove. When the
+          condition is explicitly specified as None (--condition=None), a
+          binding without a condition is removed. Otherwise, only a binding
+          with a condition that exactly matches the specified condition
+          (including the optional description) is removed. For more on
+          conditions, refer to the conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,