>dZddlmZddlmZddlmZddlmZddlmZddl m Z ejejjejjejj ej"Gdd ej$Zy ) zAdd IAM Policy Binding.)absolute_import)division)unicode_literals)base)iam_util)utilc.eZdZdZddiZedZdZy)AddIamPolicyBindingzAdd IAM policy binding to an IAP TCP Tunnel Destination Group resource. Adds a policy binding to the IAM policy of an IAP TCP Tunnel Destination Group resource. One binding consists of a member, a role, and an optional condition. EXAMPLESa To add an IAM policy binding for the role of 'roles/iap.tunnelResourceAccessor' for the user 'test-user@gmail.com' in the group 'my-group' located in the region 'us-west1', run: $ {command} --member='user:test-user@gmail.com' --role='roles/iap.tunnelResourceAccessor' --dest-group='my-group' --region='us-west1' To add an IAM policy binding for the role of 'roles/iap.tunnelResourceAccessor' for all authenticated users in the group 'my-group' located in the region 'us-west1', run: $ {command} --member='allAuthenticatedUsers' --role='roles/iap.tunnelResourceAccessor' --dest-group='my-group' --region='us-west1' To add an IAM policy binding which expires at the end of the year 2018 for the role of 'roles/iap.tunnelResourceAccessor' and the user 'test-user@gmail.com' in the group 'my-group' located in the region 'us-west1', run: $ {command} --member='user:test-user@gmail.com' --role='roles/iap.tunnelResourceAccessor' --condition='expression=request.time < timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018, description=Expires at midnight on 2018-12-31' --dest-group='my-group' --region='us-west1' See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. ctj|tj|tjj |y)zRegister flags for this command. Args: parser: An argparse.ArgumentParser-like object. It is mocked out in order to capture some information, but behaves like an ArgumentParser. N)iap_utilAddAddIamPolicyBindingArgsAddIamDestGroupArgsrURI_FLAGRemoveFromParser)parsers 9lib/surface/iap/tcp/dest_groups/add_iam_policy_binding.pyArgszAddIamPolicyBinding.ArgsGs2 ''/   (MM""6*ctj|}tj|j |}|j |j |j|S)a This is what gets called when the user runs this command. Args: args: an argparse namespace. All the arguments that were provided to this command invocation. Returns: The specified function with its description and configured filter. )r$ValidateAndExtractConditionMutexRoler ParseIapDestGroupResource ReleaseTrackr memberrole)selfargs condition iap_iam_refs rRunzAddIamPolicyBinding.RunSsL==dCI44T5F5F5H$OK  * *4;; 9 MMrN)__name__ __module__ __qualname____doc__ detailed_help staticmethodrr rrr r s3  "-H + + Nrr N)r$ __future__rrrgooglecloudsdk.calliopergooglecloudsdk.command_lib.iamrgooglecloudsdk.command_lib.iaprr ReleaseTracksrALPHABETAGADefaultUniverseOnlyCommandr r'rrr2s&'(3;D%%++T->->-C-C%%((*BN$,,BN*BNr