mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-17 06:11:59 +00:00
93 lines
3.6 KiB
Text
93 lines
3.6 KiB
Text
NAME
|
|
gcloud alpha iam policies lint-condition - lint an IAM condition
|
|
|
|
SYNOPSIS
|
|
gcloud alpha iam policies lint-condition
|
|
(--condition-from-file=CONDITION_FROM_FILE
|
|
| [--expression=EXPRESSION --title=TITLE
|
|
: --description=DESCRIPTION]) [--resource-name=RESOURCE_NAME]
|
|
[GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
(ALPHA) Lint an IAM condition. The problems found by linter will not be
|
|
fixed. Instead, it will show the problems.
|
|
|
|
EXAMPLES
|
|
To lint an IAM condition of resource
|
|
//cloudresourcemanager.googleapis.com/v1/projects/example-project, and the
|
|
condtion to lint is expression='true', title='title',
|
|
description='description', run:
|
|
|
|
$ gcloud alpha iam policies lint-condition \
|
|
--resource-name='//cloudresourcemanager.googleapis.com/v1/projec\
|
|
ts/example-project' --expression='true' --title='title' \
|
|
--description='description'
|
|
|
|
To lint an IAM condition of resource
|
|
//cloudresourcemanager.googleapis.com/v1/projects/example-project, and the
|
|
condition is read from a local YAML file condition.yaml, run:
|
|
|
|
$ gcloud alpha iam policies lint-condition \
|
|
--resource-name='//cloudresourcemanager.googleapis.com/v1/projec\
|
|
ts/example-project' --condition-from-file='condition.yaml'
|
|
|
|
REQUIRED FLAGS
|
|
Exactly one of these must be specified:
|
|
|
|
--condition-from-file=CONDITION_FROM_FILE
|
|
The path to a JSON or YAML file containing the condition. See
|
|
https://cloud.google.com/iam/docs/conditions-overview for schema of
|
|
the condition.
|
|
|
|
The condition to lint. It must have an expression property and a title
|
|
property. The description property is optional.
|
|
|
|
--expression=EXPRESSION
|
|
The expression of the condition which evaluates to True or False.
|
|
This uses a subset of Common Expression Language syntax.
|
|
|
|
This flag argument must be specified if any of the other arguments
|
|
in this group are specified.
|
|
|
|
--title=TITLE
|
|
A title for the expression, i.e. a short string describing its
|
|
purpose.
|
|
|
|
This flag argument must be specified if any of the other arguments
|
|
in this group are specified.
|
|
|
|
--description=DESCRIPTION
|
|
A description of the expression. This is a longer text which
|
|
describes the expression.
|
|
|
|
OPTIONAL FLAGS
|
|
--resource-name=RESOURCE_NAME
|
|
The full resource name of the policy containing the condition to lint.
|
|
See https://cloud.google.com/apis/design/resource_names for details.
|
|
|
|
To get a URI from most list commands in gcloud, pass the --uri flag.
|
|
For example:
|
|
|
|
$ gcloud compute instances list --project prj --uri
|
|
|
|
https://www.googleapis.com/compute/v1/projects/prj/zones/us-east1-c/instances/i1
|
|
https://www.googleapis.com/compute/v1/projects/prj/zones/us-east1-d/instances/i2
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
API REFERENCE
|
|
This command uses the iam/v1 API. The full documentation for this API can
|
|
be found at: https://cloud.google.com/iam/
|
|
|
|
NOTES
|
|
This command is currently in alpha and might change without notice. If this
|
|
command fails with API permission errors despite specifying the correct
|
|
project, you might be trying to access an API with an invitation-only early
|
|
access allowlist.
|
|
|