mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-08 02:25:19 +00:00
99 lines
3.7 KiB
Text
99 lines
3.7 KiB
Text
NAME
|
|
gcloud kms keys get-iam-policy - get the IAM policy for a key
|
|
|
|
SYNOPSIS
|
|
gcloud kms keys get-iam-policy
|
|
(KEY : --keyring=KEYRING --location=LOCATION) [--filter=EXPRESSION]
|
|
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
|
|
[GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
Gets the IAM policy for the given key.
|
|
|
|
Returns an empty policy if the resource does not have a policy set.
|
|
|
|
EXAMPLES
|
|
The following command gets the IAM policy for the key frodo within the
|
|
keyring fellowship and location global:
|
|
|
|
$ gcloud kms keys get-iam-policy frodo --keyring=fellowship \
|
|
--location=global
|
|
|
|
POSITIONAL ARGUMENTS
|
|
Key resource - The KMS key resource. The arguments in this group can be
|
|
used to specify the attributes of this resource. (NOTE) Some attributes
|
|
are not given arguments in this group but can be set in other ways.
|
|
|
|
To set the project attribute:
|
|
◆ provide the argument key on the command line with a fully specified
|
|
name;
|
|
◆ set the property core/project.
|
|
|
|
This must be specified.
|
|
|
|
KEY
|
|
ID of the key or fully qualified identifier for the key.
|
|
|
|
To set the key attribute:
|
|
▸ provide the argument key on the command line.
|
|
|
|
This positional argument must be specified if any of the other
|
|
arguments in this group are specified.
|
|
|
|
--keyring=KEYRING
|
|
The KMS keyring of the key.
|
|
|
|
To set the keyring attribute:
|
|
▸ provide the argument key on the command line with a fully
|
|
specified name;
|
|
▸ provide the argument --keyring on the command line.
|
|
|
|
--location=LOCATION
|
|
The Google Cloud location for the key.
|
|
|
|
To set the location attribute:
|
|
▸ provide the argument key on the command line with a fully
|
|
specified name;
|
|
▸ provide the argument --location on the command line.
|
|
|
|
LIST COMMAND FLAGS
|
|
--filter=EXPRESSION
|
|
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
|
If the expression evaluates True, then that item is listed. For more
|
|
details and examples of filter expressions, run $ gcloud topic filters.
|
|
This flag interacts with other flags that are applied in this order:
|
|
--flatten, --sort-by, --filter, --limit.
|
|
|
|
--limit=LIMIT
|
|
Maximum number of resources to list. The default is unlimited. This
|
|
flag interacts with other flags that are applied in this order:
|
|
--flatten, --sort-by, --filter, --limit.
|
|
|
|
--page-size=PAGE_SIZE
|
|
Some services group resource list output into pages. This flag
|
|
specifies the maximum number of resources per page. The default is
|
|
determined by the service if it supports paging, otherwise it is
|
|
unlimited (no paging). Paging may be applied before or after --filter
|
|
and --limit depending on the service.
|
|
|
|
--sort-by=[FIELD,...]
|
|
Comma-separated list of resource field key names to sort by. The
|
|
default order is ascending. Prefix a field with ``~'' for descending
|
|
order on that field. This flag interacts with other flags that are
|
|
applied in this order: --flatten, --sort-by, --filter, --limit.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
NOTES
|
|
These variants are also available:
|
|
|
|
$ gcloud alpha kms keys get-iam-policy
|
|
|
|
$ gcloud beta kms keys get-iam-policy
|
|
|