Gecko [ v3.cesa.co.za ]

Linux cesa-www-main 6.1.0-49-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
Apache/2.4.68 (Debian)
Server IP : 10.218.0.2 & Your IP : 216.73.216.28
Domains : Cant Read [ /etc/named.conf ]
User : www-data

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
config	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
versions	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
__init__.py	1.16 KB	-rw-r--r--	1980-01-01 08:00
add_iam_policy_binding.yaml	1.48 KB	-rw-r--r--	1980-01-01 08:00
create.py	10.01 KB	-rw-r--r--	1980-01-01 08:00
delete.py	1.78 KB	-rw-r--r--	1980-01-01 08:00
describe.py	2.01 KB	-rw-r--r--	1980-01-01 08:00
get_iam_policy.py	1.52 KB	-rw-r--r--	1980-01-01 08:00
get_iam_policy.yaml	940 B	-rw-r--r--	1980-01-01 08:00
list.py	2.19 KB	-rw-r--r--	1980-01-01 08:00
remove_iam_policy_binding.yaml	1.98 KB	-rw-r--r--	1980-01-01 08:00
remove_rotation_schedule.py	1.78 KB	-rw-r--r--	1980-01-01 08:00
set_iam_policy.py	2.36 KB	-rw-r--r--	1980-01-01 08:00
set_iam_policy.yaml	1.19 KB	-rw-r--r--	1980-01-01 08:00
set_primary_version.py	2.12 KB	-rw-r--r--	1980-01-01 08:00
set_rotation_schedule.py	2.98 KB	-rw-r--r--	1980-01-01 08:00
update.py	12.85 KB	-rw-r--r--	1980-01-01 08:00

Rename

release_tracks: [ALPHA, BETA, GA]

help_text:
  brief: Add IAM policy binding for a kms key.
  description: |
    Adds a policy binding to the IAM policy of a kms key. A binding consists of at least one
    member, a role, and an optional condition.

examples: |
    To add an IAM policy binding for the role of 'roles/editor' for the user 'test-user@gmail.com'
    on the key frodo with the keyring fellowship and location global, run:

$ {command} frodo --keyring='fellowship' --location='global' --member='user:test-user@gmail.com' --role='roles/editor'

To add an IAM policy binding which expires at the end of the year 2018 for the role of
    'roles/cloudkms.signer' and the user 'test-user@gmail.com' on a the key frodo with the keyring
    fellowship and location global, run:

$ {command} frodo --keyring='fellowship' --location='global' --member='user:test-user@gmail.com' --role='roles/cloudkms.signer' --condition='expression=request.time < timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,description=Expires at midnight on 2018-12-31'

See https://cloud.google.com/iam/docs/managing-policies for details of
    policy role and member types.

request:
  collection: cloudkms.projects.locations.keyRings.cryptoKeys

arguments:
  resource:
    help_text: The key to add the IAM policy binding.
    spec: !REF googlecloudsdk.command_lib.kms.resources:key

iam:
  enable_condition: true
  policy_version: 3
  get_iam_policy_version_path: options_requestedPolicyVersion