1- release_tracks: [ALPHA, BETA, GA]
2
3  help_text:
4    brief: Set the IAM policy binding for a KMS import job.
5    description: |
6      Sets the IAM policy for the given import job as defined in a JSON or YAML file.
7
8      See https://cloud.google.com/iam/docs/managing-policies for details of
9      the policy file format and contents.
10    examples: |
11      The following command will read an IAM policy defined in a JSON file
12      'policy.json' and set it for the import job 'frodo' with the keyring
13      'fellowship' and location 'global':
14
15        $ {command} frodo policy.json --keyring=fellowship --location=global
16
17      See https://cloud.google.com/iam/docs/managing-policies for details of the
18      policy file format and contents.
19  request:
20    collection: cloudkms.projects.locations.keyRings.importJobs
21    modify_request_hooks:
22    - googlecloudsdk.command_lib.iam.hooks:UseMaxRequestedPolicyVersion:api_field=setIamPolicyRequest.policy.version
23    - googlecloudsdk.command_lib.iam.hooks:AddVersionToUpdateMaskIfNotPresent:update_mask_path=setIamPolicyRequest.updateMask
24
25  arguments:
26    resource:
27      help_text: The import job for which to set the IAM policy binding.
28      spec: !REF googlecloudsdk.command_lib.kms.resources:import_job
29
30  iam:
31    policy_version: 3
32