gcloud alpha iap settings set

NAME
gcloud alpha iap settings set - set the setting for an IAP resource
SYNOPSIS
gcloud alpha iap settings set SETTING_FILE [--folder=FOLDER --organization=ORGANIZATION --project=PROJECT --region=REGION --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG]
DESCRIPTION
(ALPHA) Set the setting for an IAP resource.
EXAMPLES
To set the IAP setting for the resources within an organization, run:
gcloud alpha iap settings set iap_settings.yaml --organization=ORGANIZATION_ID

To set the IAP setting for the resources within a folder, run:

gcloud alpha iap settings set iap_settings.yaml --folder=FOLDER_ID

To set the IAP setting for the resources within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID

To set the IAP setting for web type resources within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=iap_web

To set the IAP setting for all app engine services within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=app-engine

To set the IAP setting for an app engine service within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=app-engine --service=SERVICE_ID

To set the IAP setting for an app engine service version within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=app-engine --service=SERVICE_ID --version=VERSION_ID

To set the IAP setting for all backend services within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=compute

To set the IAP setting for a backend service within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=compute --service=SERVICE_ID

To set the IAP setting for a region backend service within a project, run:

gcloud alpha iap settings set iap_settings.yaml --project=PROJECT_ID --resource-type=compute --service=SERVICE_ID --region=REGION_ID
POSITIONAL ARGUMENTS
SETTING_FILE
JSON or YAML file containing the IAP resource settings.
JSON example:
  {
    "access_settings" : {
      "oauth_settings" : {
         "login_hint" : {
            "value": "test_hint"
         }
      },
      "gcip_settings" : {
         "tenant_ids": ["tenant1-p9puj", "tenant2-y8rxc"],
         "login_page_uri" : {
            "value" : "https://test.com/?apiKey=abcd_efgh"
         }
      },
      "cors_settings": {
         "allow_http_options" : {
            "value": true
         }
      }
   },
   "application_settings" : {
      "csm_settings" : {
        "rctoken_aud" : {
           "value" : "test_aud"
        }
      }
   }
 }
YAML example:
accessSettings :
   oauthSettings:
     loginHint: test_hint
   gcipSettings:
     tenantIds:
     - tenant1-p9puj
     - tenant2-y8rxc
     loginPageUri: https://test.com/?apiKey=abcd_efgh
   corsSettings:
     allowHttpOptions: true
applicationSettings:
   csmSettings:
     rctokenAud: test_aud
FLAGS
--folder=FOLDER
Folder ID.
--organization=ORGANIZATION
Organization ID.
--project=PROJECT
Project ID.
--region=REGION
Region name. Not applicable for app-engine. Required when resource-type=compute and regional scoped. Not applicable for global scoped compute. Required when resource-type=cloud-run.
--resource-type=RESOURCE_TYPE
Resource type of the IAP resource. --resource-type=cloud-run is private priview feature and reach out to cloud-run team if you want to test it. RESOURCE_TYPE must be one of: app-engine, iap_web, compute, organization, folder, forwarding-rule, cloud-run.
--service=SERVICE
Service name. Optional when resource-type is compute or app-engine.
--version=VERSION
Version name. Not applicable for compute. Optional when resource-type=app-engine.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
gcloud iap settings set
gcloud beta iap settings set