gcloud alpha access-context-manager levels replace-all - replace all existing access levels
gcloud alpha access-context-manager levels replace-all [POLICY] --source-file=SOURCE_FILE [--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
(ALPHA) Replace all existing access level in specified access policy with access levels specified in a file.
To replace all levels within a policy, using etag:
$ gcloud alpha access-context-manager levels replace-all \ my-policy-number \ --source-file=path-to-file-containing-all-replacement-access-lev\ els.yaml --etag=optional-latest-etag-of-policy
To replace all levels within a policy, without using etag:
$ gcloud alpha access-context-manager levels replace-all \ my-policy-number \ --source-file=path-to-file-containing-all-replacement-access-lev\ els.yaml
- Policy resource - The access policy that contains the levels you want to
replace. This represents a Cloud resource.
- [POLICY]
ID of the policy or fully qualified identifier for the policy. To set the policy attribute:
provide the argument policy on the command line;
set the property access_context_manager/policy;
automatically, if the current account belongs to an organization with exactly one access policy..
- --source-file=SOURCE_FILE
Path to a file containing a list of access levels.
An access level file is a YAML-formatted list of access levels, which are YAML objects representing a Basic or Custom level as described in the API reference. For example:
- name: accessPolicies/my_policy/accessLevels/my_level title: My Basic Level description: Basic level for foo. basic: combiningFunction: AND conditions: - ipSubnetworks: - 192.168.100.14/24 - 2001:db8::/48 - members - user1:user1@example.com - name: accessPolicies/my_policy/accessLevels/my_other_level title: My Other Custom Level description: Custom level for bar. custom: expr: expression: "origin.region_code in ['US', 'CA']"
For more information about the alpha version, see: https://cloud.google.com/access-context-manager/docs/reference/rest/v1alpha/accessPolicies.accessLevels For other versions, see: https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.accessLevels
- --etag=ETAG
An etag which specifies the version of the Access Policy. Only etags that represent the latest version of the Access Policy will be accepted.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command uses the accesscontextmanager/v1alpha API. The full documentation for this API can be found at: https://cloud.google.com/access-context-manager/docs/reference/rest/
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud access-context-manager levels replace-all
$ gcloud beta access-context-manager levels replace-all