imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-19 07:15:23 +00:00
Code Activity

gcloud: Wed Apr 6 08:36:53 UTC 2022

Browse source
This commit is contained in:
Automated 2022-04-06 08:36:53 +00:00
parent 9bf28f1efe
commit f88a614da8
221 changed files with 7174 additions and 449 deletions
Download patch file Download diff file Expand all files Collapse all files

62
gcloud/beta/spanner/instances/remove-iam-policy-binding
View file

@ -4,19 +4,33 @@ NAME
SYNOPSIS
gcloud beta spanner instances remove-iam-policy-binding [INSTANCE]
--member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...]
--member=PRINCIPAL --role=ROLE
[--all | --condition=[KEY=VALUE,...]
| --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Remove an IAM policy binding of a Cloud Spanner instance.
(BETA) Remove an IAM policy binding of a Cloud Spanner instance. One
binding consists of a member, a role, and an optional condition.
EXAMPLES
To Remove an IAM policy binding for the role of 'roles/editor' for the user
To remove an IAM policy binding for the role of 'roles/editor' for the user
'test-user@gmail.com' with instance 'my-instance', run:
$ gcloud beta spanner instances remove-iam-policy-binding \
my-instance --member='user:test-user@gmail.com' \
--role='roles/editor'
To remove an IAM policy binding which expires at the end of the year 2018
for the role of 'roles/spanner.admin' and the user 'test-user@gmail.com'
with instance 'my-instance', run:
$ gcloud beta spanner instances remove-iam-policy-binding \
my-instance --member='user:test-user@gmail.com' \
--role='roles/spanner.admin' \
--condition='expression=request.time <
timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
tion=Expires at midnight on 2018-12-31'
See https://cloud.google.com/iam/docs/managing-policies for details of
policy role and member types.
@ -59,6 +73,48 @@ REQUIRED FLAGS
--role=ROLE
The role to remove the principal from.
OPTIONAL FLAGS
At most one of these can be specified:
--all
Remove all bindings with this role and principal, irrespective of any
conditions.
--condition=[KEY=VALUE,...]
The condition of the binding that you want to remove. When the
condition is explicitly specified as None (--condition=None), a
binding without a condition is removed. Otherwise, only a binding
with a condition that exactly matches the specified condition
(including the optional description) is removed. For more on
conditions, refer to the conditions overview guide:
https://cloud.google.com/iam/docs/conditions-overview
When using the --condition flag, include the following key-value
pairs:
expression
(Required) Condition expression that evaluates to True or False.
This uses a subset of Common Expression Language syntax.
If the condition expression includes a comma, use a different
delimiter to separate the key-value pairs. Specify the delimiter
before listing the key-value pairs. For example, to specify a
colon (:) as the delimiter, do the following:
--condition=^:^title=TITLE:expression=EXPRESSION. For more
information, see
https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
title
(Required) A short string describing the purpose of the
expression.
description
(Optional) Additional description for the expression.
--condition-from-file=CONDITION_FROM_FILE
Path to a local JSON or YAML file that defines the condition. To see
available fields, see the help for --condition.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,