gcloud iam workload-identity-pools get-iam-policy - get the IAM policy for a workload identity pool

gcloud iam workload-identity-pools get-iam-policy(WORKLOAD_IDENTITY_POOL :--location=LOCATION)[--filter=EXPRESSION][--limit=LIMIT][--page-size=PAGE_SIZE][--sort-by=[FIELD,…]][GCLOUD_WIDE_FLAG …]

gcloudiamworkload-identity-poolsget-iam-policymy-workload-identity-pool--location="global"

The following command gets the IAM policy for the workload identity pool with IDmy-workload-identity-pool and outputs as a JSON which can be editedand used as the policy file input forset-iam-policy command:

gcloudiamworkload-identity-poolsget-iam-policymy-workload-identity-pool--location="global"--format=json

Workload identity pool resource - The workload identity pool for which you wantto get IAM policy for. The arguments in this group can be used to specify theattributes of this resource. (NOTE) Some attributes are not given arguments inthis group but can be set in other ways.

To set theproject attribute:

• provide the argumentworkload_identity_pool on the command linewith a fully specified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

WORKLOAD_IDENTITY_POOL

ID of the workload identity pool or fully qualified identifier for the workloadidentity pool.

To set theworkload_identity_pool attribute:

• provide the argumentworkload_identity_pool on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION

The location name.

To set thelocation attribute:

• provide the argumentworkload_identity_pool on the command linewith a fully specified name;
• provide the argument--location on the command line.

--filter=EXPRESSION

Apply a Boolean filterEXPRESSION to each resource itemto be listed. If the expression evaluatesTrue, then that item islisted. For more details and examples of filter expressions, run $gcloud topic filters. This flaginteracts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit.

--limit=LIMIT

Maximum number of resources to list. The default isunlimited. Thisflag interacts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit.

--page-size=PAGE_SIZE

Some services group resource list output into pages. This flag specifies themaximum number of resources per page. The default is determined by the serviceif it supports paging, otherwise it isunlimited (no paging).Paging may be applied before or after--filter and--limit depending on the service.

--sort-by=[FIELD,…]

Comma-separated list of resource field key names to sort by. The default orderis ascending. Prefix a field with ``~´´ for descending order on thatfield. This flag interacts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit.

Run$gcloud help for details.