gcloud beta iam workload-identity-pools create

NAME
gcloud beta iam workload-identity-pools create - create a new workload identity pool
SYNOPSIS
gcloud beta iam workload-identity-pools create(WORKLOAD_IDENTITY_POOL :--location=LOCATION)[--description=DESCRIPTION][--disabled][--display-name=DISPLAY_NAME][GCLOUD_WIDE_FLAG]
DESCRIPTION
(BETA) Create a new workload identity pool.
EXAMPLES
The following command creates a disabled workload identity pool in the defaultproject with the IDmy-workload-identity-pool. Explicit valuesfor all required and optional parameters are provided.
gcloudbetaiamworkload-identity-poolscreatemy-workload-identity-pool--location="global"--display-name="My workload pool"--description="My workload pool description"--disabled
POSITIONAL ARGUMENTS
Workload identity pool resource - The workload identity pool to create. Thearguments in this group can be used to specify the attributes of this resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.

To set theproject attribute:

  • provide the argumentworkload_identity_pool on the command linewith a fully specified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

WORKLOAD_IDENTITY_POOL
ID of the workload identity pool or fully qualified identifier for the workloadidentity pool.

To set theworkload_identity_pool attribute:

  • provide the argumentworkload_identity_pool on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION
The location name.

To set thelocation attribute:

  • provide the argumentworkload_identity_pool on the command linewith a fully specified name;
  • provide the argument--location on the command line.
FLAGS
--description=DESCRIPTION
A description of the pool. Cannot exceed 256 characters.
--disabled
Whether the pool is disabled. You cannot use a disabled pool to exchange tokens,or use existing tokens to access resources. If the pool is re-enabled, existingtokens grant access again.
--display-name=DISPLAY_NAME
A display name for the pool. Cannot exceed 32 characters.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses theiam/v1beta API. The full documentation forthis API can be found at:https://cloud.google.com/iam/
NOTES
This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudiamworkload-identity-poolscreate
gcloudalphaiamworkload-identity-poolscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.