gcloud iam workload-identity-pools update - update a workload identity pool

gcloud iam workload-identity-pools update(WORKLOAD_IDENTITY_POOL :--location=LOCATION)[--description=DESCRIPTION][--disabled][--display-name=DISPLAY_NAME][--inline-trust-config-file=INLINE_TRUST_CONFIG_FILE][--inline-certificate-issuance-config-file=INLINE_CERTIFICATE_ISSUANCE_CONFIG_FILE    |--certificate-lifetime=CERTIFICATE_LIFETIME--key-algorithm=KEY_ALGORITHM--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE][GCLOUD_WIDE_FLAG …]

Workload identity pool resource - The workload identity pool to update. Thearguments in this group can be used to specify the attributes of this resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.

To set theproject attribute:

• provide the argumentworkload_identity_pool on the command linewith a fully specified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

WORKLOAD_IDENTITY_POOL

ID of the workload identity pool or fully qualified identifier for the workloadidentity pool.

To set theworkload_identity_pool attribute:

• provide the argumentworkload_identity_pool on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION

The location name.

To set thelocation attribute:

• provide the argumentworkload_identity_pool on the command linewith a fully specified name;
• provide the argument--location on the command line.

--description=DESCRIPTION

A description of the pool. Cannot exceed 256 characters.

--disabled

Whether the pool is disabled. You cannot use a disabled pool to exchange tokens,or use existing tokens to access resources. If the pool is re-enabled, existingtokens grant access again.

--display-name=DISPLAY_NAME

A display name for the pool. Cannot exceed 32 characters.

--inline-trust-config-file=INLINE_TRUST_CONFIG_FILE

YAML file with configuration for providing additional trust bundles. Examplefile format:

inlineTrustConfig:additionalTrustBundles:example.com:trustAnchors:-pemCertificate:"-----BEGINCERTIFICATE-----<certificate>-----ENDCERTIFICATE-----"-pemCertificate:"-----BEGINCERTIFICATE-----<certificate>-----ENDCERTIFICATE-----"myorg.com:trustAnchors:-pemCertificate:"-----BEGINCERTIFICATE-----<certificate>-----ENDCERTIFICATE-----"-pemCertificate:"-----BEGINCERTIFICATE-----<certificate>-----ENDCERTIFICATE-----"

At most one of these can be specified:

--inline-certificate-issuance-config-file=INLINE_CERTIFICATE_ISSUANCE_CONFIG_FILE

YAML file with configuration for certificate issuance. Example file format:

inlineCertificateIssuanceConfig:caPools:us-east1:projects/1234/locations/us-east1/caPools/capoolnameus-west1:projects/1234/locations/us-west1/caPools/capoolnamekeyAlgorithm:ECDSA_P256lifetime:86400srotationWindowPercentage:50

Or at least one of these can be specified:

--certificate-lifetime=CERTIFICATE_LIFETIME

Lifetime of the workload certificates issued by the CA pool.

--key-algorithm=KEY_ALGORITHM

Key algorithm to use when generating the key pair. This key pair will be used tocreate the certificate.KEY_ALGORITHM must be one of:ecdsa-p256,ecdsa-p384,key-algorithm-unspecified,rsa-2048,rsa-3072,rsa-4096.

--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE

Rotation window percentage indicating when certificate rotation should beinitiated based on remaining lifetime.

Run$gcloud help for details.