- NAME
-
- gcloud alpha run worker-pools set-iam-policy - set the IAM policy for a worker pool
- SYNOPSIS
-
-
gcloud alpha run worker-pools set-iam-policy(WORKERPOOL:--region=REGION)POLICY_FILE[GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(ALPHA)This command replaces the existing IAM policy for a worker pool, given a worker pool and a file encoded in JSON or YAML that contains the IAM policy. If the given policy file specifies an "etag" value, then the replacement will succeed only if the policy already in place matches that etag. (An etag obtain viaget-iam-policywill prevent the replacement if the policy for the worker pool has been subsequently updated.) A policy file that does not contain an etag value will replace any existing policy for the worker pool. - EXAMPLES
-
The following command will read an IAM policy defined in a JSON file
'policy.json' and set it for a worker pool with identifier 'my-worker-pool'
gcloud alpha run worker-pools set-iam-policy --region=us-central1 my-worker-pool policy.jsonSee https://cloud.google.com/iam/docs/managing-policies for details of the policy file format and contents.
- POSITIONAL ARGUMENTS
-
-
Workerpool resource - The service for which to set the IAM policy. The arguments
in this group can be used to specify the attributes of this resource. (NOTE)
Some attributes are not given arguments in this group but can be set in other
ways.
To set the
projectattribute:-
provide the argument
workerpoolon the command line with a fully specified name; -
provide the argument
--projecton the command line; -
set the property
core/project.
This must be specified.
WORKERPOOL-
ID of the workerpool or fully qualified identifier for the workerpool.
To set the
workerpoolattribute:-
provide the argument
workerpoolon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--region=REGION-
The Cloud Run region.
To set the
regionattribute:-
provide the argument
workerpoolon the command line with a fully specified name; -
provide the argument
--regionon the command line; -
set the property
run/region; - specify from a list of available regions in a prompt.
-
provide the argument
-
provide the argument
POLICY_FILE-
Path to a local JSON or YAML formatted file containing a valid policy.
The output of the
get-iam-policycommand is a valid file, as is any JSON or YAML file conforming to the structure of a Policy.
-
Workerpool resource - The service for which to set the IAM policy. The arguments
in this group can be used to specify the attributes of this resource. (NOTE)
Some attributes are not given arguments in this group but can be set in other
ways.
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
-
This command uses the
run/v1API. The full documentation for this API can be found at: https://cloud.google.com/run/ - NOTES
- This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist.
gcloud alpha run worker-pools set-iam-policy
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-07-22 UTC.