gcloud beta container hub scopes rbacrolebindings update Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud beta container hub scopes rbacrolebindings update - update a fleet scope RBAC RoleBinding
- SYNOPSIS
gcloud beta container hub scopes rbacrolebindings update(NAME:--location=LOCATION--scope=SCOPE)[--update-labels=[KEY=VALUE,…]][--clear-labels|--remove-labels=[KEY,…]][--custom-role=CUSTOM_ROLE|--role=ROLE][--group=GROUP|--user=USER][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
(BETA)This command can fail for the following reasons:- The RoleBinding does not exist in the project.
- The caller does not have permission to access the RoleBinding.
- EXAMPLES
- To update the RBAC RoleBinding
RBRBin scopeSCOPEinthe active project to theviewerrole:gcloudbetacontainerhubscopesrbacrolebindingsupdateRBRB--scope=SCOPE--role=viewerTo update the RBAC RoleBinding
RBRBin scopeSCOPEinthe active project to the custom rolecustom-role:gcloudbetacontainerhubscopesrbacrolebindingsupdateRBRB--scope=SCOPE--custom-role=custom-roleTo update the RBAC RoleBinding
RBRBin scopeSCOPEinthe active project to the usersomeone@google.com:gcloudbetacontainerhubscopesrbacrolebindingsupdateRBRB--scope=SCOPE--user=someone@google.com - POSITIONAL ARGUMENTS
- Rbacrolebinding resource - The group of arguments defining an RBACRoleBinding.The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.
To set the
projectattribute:- provide the argument
NAMEon the command line with a fullyspecified name; - provide the argument
--projecton the command line; - set the property
core/project.
This must be specified.
NAME- ID of the rbacrolebinding or fully qualified identifier for the rbacrolebinding.
To set the
rbacrolebindingattribute:- provide the argument
NAMEon the command line.
This positional argument must be specified if any of the other arguments in thisgroup are specified.
- provide the argument
--location=LOCATION- Location for the rbacrolebinding.
To set the
locationattribute:- provide the argument
NAMEon the command line with a fullyspecified name; - provide the argument
--locationon the command line; - set the property
gkehub/location.
- provide the argument
--scope=SCOPE- Name of the rbacrolebinding.
To set the
scopeattribute:- provide the argument
NAMEon the command line with a fullyspecified name; - provide the argument
--scopeon the command line.
- provide the argument
- provide the argument
- Rbacrolebinding resource - The group of arguments defining an RBACRoleBinding.The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.
- FLAGS
--update-labels=[KEY=VALUE,…]- List of label KEY=VALUE pairs to update. If a label exists, its value ismodified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens(
-), underscores (_), lowercase characters, andnumbers. Values must contain only hyphens (-), underscores(_), lowercase characters, and numbers. - At most one of these can be specified:
--clear-labels- Remove all labels. If
--update-labelsis also specified then--clear-labelsis applied first.For example, to remove all labels:
gcloudbetacontainerhubscopesrbacrolebindingsupdate--clear-labelsTo remove all existing labels and create two new labels,
andfoo:bazgcloudbetacontainerhubscopesrbacrolebindingsupdate--clear-labels--update-labelsfoo=bar,baz=qux --remove-labels=[KEY,…]- List of label keys to remove. If a label does not exist it is silently ignored.If
--update-labelsis also specified then--update-labelsis applied first.
- At most one of these can be specified:
--custom-role=CUSTOM_ROLE- Custom role to assign to principal.
--role=ROLE- Predefined role to assign to principal (admin, edit, view).
ROLEmust be one of:admin,edit,view.
- At most one of these can be specified:
--group=GROUP- Group for the RBACRoleBinding to update to.
--user=USER- User for the RBACRoleBinding to update to.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudcontainerhubscopesrbacrolebindingsupdategcloudalphacontainerhubscopesrbacrolebindingsupdate
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-06-03 UTC.