REQUIRED FLAGS

Exactly one of these must be specified:

--condition-from-file=CONDITION_FROM_FILE

The path to a JSON or YAML file containing the condition. See cloud.google.com/iam/docs/conditions-overview for schema of the condition.

condition to lint.

--expression=EXPRESSION

The expression of the condition which evaluates to True or False. This uses a subset of Common Expression Language syntax. This flag must be specified if any of the other arguments in this group are specified.

--title=TITLE

A title for the expression, i.e. a short string describing its purpose. This flag must be specified if any of the other arguments in this group are specified.

--description=DESCRIPTION

A description of the expression. This is a longer text which describes the expression.

OPTIONAL FLAGS

--resource-name=RESOURCE_NAME

The full resource name of the policy containing the condition to lint. See cloud.google.com/apis/design/resource_names for details.
To get a URI from most list commands in gcloud, pass the --uri flag. For example:

$ gcloud compute instances list --project prj --uri

www.googleapis.com/compute/v1/projects/prj/zones/us-east1-c/instances/i1 www.googleapis.com/compute/v1/projects/prj/zones/us-east1-d/instances/i2

GCLOUD WIDE FLAGS

API REFERENCE

EXAMPLES

$ gcloud alpha iam policies lint-condition \
    --resource-name='//cloudresourcemanager.googleapis.com/v1/projec\ ts/example-project' --expression='true' --title='title' \
    --description='description'

$ gcloud alpha iam policies lint-condition \
    --resource-name='//cloudresourcemanager.googleapis.com/v1/projec\ ts/example-project' --condition-from-file='condition.yaml'

NOTES