d pdZddlmZddlmZddlmZddlmZddlm Z ddl m Z e je je jj Gdd e j"Ze je je jj&Gd d eZy ) z"Fetch the IAM policy for a secret.)absolute_import)division)unicode_literals)api)base)argsc.eZdZdZddiZedZdZy) GetIamPolicyauGet the IAM policy for the secret. Displays the IAM policy associated with the secret. If formatted as JSON, the output can be edited and used as a policy file for set-iam-policy. The output includes an "etag" field identifying the version emitted and allowing detection of concurrent policy updates. Run gcloud secrets set-iam-policy for additional details. EXAMPLESzp To print the IAM policy for secret named 'my-secret', run: $ {command} my-secret ctj|ddddtj|ddtjj |y)NTz0Name of the secret from which to get IAM policy.)purpose positionalrequired help_textzto get iam policyF)rhidden) secrets_args AddSecret AddLocationrURI_FLAGRemoveFromParser)parsers %lib/surface/secrets/get_iam_policy.pyArgszGetIamPolicy.Args/sFD V-@OMM""6*ctj|j}|jjj }tj |j||jS)N) api_version)secret_location) secrets_apiGetApiFromTrack ReleaseTrackCONCEPTSsecretParseSecretsr location)selfrr multi_refs rRunzGetIamPolicy.Run;s`--d.?.?.ABK $$**,I   ; 7 D D4== E rN)__name__ __module__ __qualname____doc__ detailed_help staticmethodrr)rrr r s1- + +rr ceZdZdZddiZy)GetIamPolicyBetazGet the IAM policy of a secret. Gets the IAM policy for the given secret. Returns an empty policy if the resource does not have a policy set. r z~ To print the IAM policy for secret named 'my-secret', run: $ {command} my-secret [--location=] N)r*r+r,r-r.r0rrr2r2Cs-rr2N)r- __future__rrrgooglecloudsdk.api_lib.secretsrrgooglecloudsdk.callioper"googlecloudsdk.command_lib.secretsrrDefaultUniverseOnly ReleaseTracksr!GA ListCommandr BETAr2r0rrr<s)&'=(CD%%(()$4##$*$ND%%**+|,r