gcloud: Wed Jun 19 09:33:28 UTC 2024

gcloud/alpha/iap/settings/get

@@ -56,6 +56,12 @@ EXAMPLES
         $ gcloud alpha iap settings get --project=PROJECT_ID \
             --resource-type=compute --service=SERVICE_ID
 
+    To get the IAP setting for a regional backend service within a project,
+    run:
+
+        $ gcloud alpha iap settings get --project=PROJECT_ID \
+            --resource-type=compute --service=SERVICE_ID --region=REGION_ID
+
 FLAGS
      --folder=FOLDER
         Folder ID.
@@ -67,8 +73,9 @@ FLAGS
         Project ID.
 
      --region=REGION
-        Region name. Not applicable for app-engine. Optional when resource-type
-        is compute.
+        Region name. Not applicable for app-engine. Required when resource-type
+        is compute and regional scoped. Not applicable for compute when global
+        scoped.
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. RESOURCE_TYPE must be one of:

gcloud/alpha/iap/settings/set

@@ -60,6 +60,12 @@ EXAMPLES
             --project=PROJECT_ID --resource-type=compute \
             --service=SERVICE_ID
 
+    To set the IAP setting for a region backend service within a project, run:
+
+        $ gcloud alpha iap settings set iap_settings.yaml \
+            --project=PROJECT_ID --resource-type=compute \
+            --service=SERVICE_ID --region=REGION_ID
+
 POSITIONAL ARGUMENTS
      SETTING_FILE
         JSON or YAML file containing the IAP resource settings.
@@ -119,8 +125,9 @@ FLAGS
         Project ID.
 
      --region=REGION
-        Region name. Not applicable for app-engine. Optional when resource-type
-        is compute.
+        Region name. Not applicable for app-engine. Required when resource-type
+        is compute and regional scoped. Not applicable for compute when global
+        scoped.
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. RESOURCE_TYPE must be one of:

gcloud/alpha/iap/web/add-iam-policy-binding

@@ -27,6 +27,14 @@ EXAMPLES
             --resource-type=IAP_IAM_RESOURCE \
             --member='user:test-user@gmail.com' --role='roles/editor'
 
+    To add an IAM policy binding for the role of 'roles/editor' for the user
+    'test-user@gmail.com' on regional IAP IAM resource IAP_IAM_RESOURCE, run:
+
+        $ gcloud alpha iap web add-iam-policy-binding \
+            --resource-type=IAP_IAM_RESOURCE \
+            --member='user:test-user@gmail.com' --role='roles/editor' \
+            --region=REGION
+
     To add an IAM policy binding for the role of 'roles/editor' for all
     authenticated users on IAP IAM resource IAP_IAM_RESOURCE, run:
 
@@ -113,7 +121,8 @@ OPTIONAL FLAGS
 
      --region=REGION
         Region name. Should only be specified with
-        --resource-type=backend-services.
+        --resource-type=backend-services if it is a regional scoped. Not
+        applicable for global scoped backend services.
 
      --service=SERVICE
         Service name.

gcloud/alpha/iap/web/get-iam-policy

@@ -57,6 +57,13 @@ EXAMPLES
         $ gcloud alpha iap web get-iam-policy \
             --resource-type=backend-services --service=SERVICE_ID
 
+    To get the IAM policy for the web accesses to the IAP protected resources
+    within a regional backend service, run:
+
+        $ gcloud alpha iap web get-iam-policy \
+            --resource-type=backend-services --service=SERVICE_ID \
+            --region=REGION
+
 FLAGS
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. RESOURCE_TYPE must be one of:
@@ -64,7 +71,8 @@ FLAGS
 
      --region=REGION
         Region name. Should only be specified with
-        --resource-type=backend-services.
+        --resource-type=backend-services if it is a regional scoped. Not
+        applicable for global scoped backend services.
 
      --service=SERVICE
         Service name.

gcloud/alpha/iap/web/remove-iam-policy-binding

@@ -28,6 +28,14 @@ EXAMPLES
             --resource-type=IAP_IAM_RESOURCE \
             --member='user:test-user@gmail.com' --role='roles/editor'
 
+    To remove an IAM policy binding for the role of 'roles/editor' for the user
+    'test-user@gmail.com' on regional IAP IAM resource IAP_IAM_RESOURCE, run:
+
+        $ gcloud alpha iap web remove-iam-policy-binding \
+            --resource-type=IAP_IAM_RESOURCE \
+            --member='user:test-user@gmail.com' --role='roles/editor' \
+            --region=REGION
+
     To remove an IAM policy binding for the role of 'roles/editor' from all
     authenticated users on IAP IAM resource IAP_IAM_RESOURCE,run:
 
@@ -129,7 +137,8 @@ OPTIONAL FLAGS
 
      --region=REGION
         Region name. Should only be specified with
-        --resource-type=backend-services.
+        --resource-type=backend-services if it is a regional scoped. Not
+        applicable for global scoped backend services.
 
      --service=SERVICE
         Service name.

gcloud/alpha/iap/web/set-iam-policy

@@ -61,6 +61,13 @@ EXAMPLES
         $ gcloud alpha iap web set-iam-policy POLICY_FILE \
             --resource-type=backend-services --service=SERVICE_ID
 
+    To set the IAM policy for the web accesses to the IAP protected resources
+    within a regional backend service, run:
+
+        $ gcloud alpha iap web set-iam-policy POLICY_FILE \
+            --resource-type=backend-services --service=SERVICE_ID \
+            --region=REGION
+
 POSITIONAL ARGUMENTS
      POLICY_FILE
         JSON or YAML file containing the IAM policy.
@@ -72,7 +79,8 @@ FLAGS
 
      --region=REGION
         Region name. Should only be specified with
-        --resource-type=backend-services.
+        --resource-type=backend-services if it is a regional scoped. Not
+        applicable for global scoped backend services.
 
      --service=SERVICE
         Service name.