gcloud iap settings set

gcloud iap settings set - set the setting for an IAP resource

gcloud iap settings set SETTING_FILE [--folder =FOLDER --organization =ORGANIZATION --project =PROJECT --region =REGION --resource-type =RESOURCE_TYPE --service =SERVICE --version =VERSION] [GCLOUD_WIDE_FLAG …]

gcloudiapsettingssetiap_settings.yaml--organization=ORGANIZATION_ID

To set the IAP setting for the resources within a folder, run:

gcloudiapsettingssetiap_settings.yaml--folder=FOLDER_ID

To set the IAP setting for the resources within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID

To set the IAP setting for web type resources within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=iap_web

To set the IAP setting for all app engine services within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=app-engine

To set the IAP setting for an app engine service within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=app-engine--service=SERVICE_ID

To set the IAP setting for an app engine service version within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=app-engine--service=SERVICE_ID--version=VERSION_ID

To set the IAP setting for all backend services within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=backend-services

To set the IAP setting for a backend service within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=backend-services--service=SERVICE_ID

To set the IAP setting for a region backend service within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=backend-services--service=SERVICE_ID--region=REGION_ID

To set the IAP setting for all forwarding rule within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=forwarding-rule

To set the IAP setting for a forwarding rule within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=forwarding-rule--service=SERVICE_ID

To set the IAP setting for a region forwarding rule within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=forwarding-rule--service=SERVICE_ID--region=REGION_ID

To set the IAP setting for the all cloud run services within a region of a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=cloud-run--region=REGION_ID

To set the IAP setting for a cloud run service within a project, run:

gcloudiapsettingssetiap_settings.yaml--project=PROJECT_ID--resource-type=cloud-run--region=REGION_ID--service=SERVICE_ID

SETTING_FILE

JSON or YAML file containing the IAP resource settings.

JSON example:

{
"access_settings":{
"oauth_settings":{
"login_hint":{
"value":"test_hint"
}
},
"gcip_settings":{
"tenant_ids":[
"tenant1-p9puj",
"tenant2-y8rxc"
],
"login_page_uri":{
"value":"https://test.com/?apiKey=abcd_efgh"
}
},
"cors_settings":{
"allow_http_options":{
"value":true
}
}
},
"application_settings":{
"csm_settings":{
"rctoken_aud":{
"value":"test_aud"
}
}
}
}

YAML example:

accessSettings:
oauthSettings:
loginHint:test_hint
gcipSettings:
tenantIds:
-tenant1-p9puj
-tenant2-y8rxc
loginPageUri:https://test.com/?apiKey=abcd_efgh
corsSettings:
allowHttpOptions:true
applicationSettings:
csmSettings:
rctokenAud:test_aud

--folder=FOLDER

Folder ID.

--organization=ORGANIZATION

Organization ID.

--project=PROJECT

Project ID.

--region=REGION

Region name. Not applicable for app-engine. Required when resource-type=compute and regional scoped. Not applicable for global scoped compute. Required when resource-type=cloud-run.

--resource-type=RESOURCE_TYPE

Resource type of the IAP resource. For Backend Services, you can use both compute and backend-services as resource type. RESOURCE_TYPE must be one of: app-engine, iap_web, compute, organization, folder, backend-services, forwarding-rule, cloud-run.

--service=SERVICE

Service name. Optional when resource-type is compute or app-engine.

--version=VERSION

Version name. Not applicable for compute. Optional when resource-type=app-engine.

Run $ gcloud help for details.