Console
Start free

gcloud iam workload-identity-pools update

NAME
gcloud iam workload-identity-pools update - update a workload identity pool
SYNOPSIS
gcloud iam workload-identity-pools update (WORKLOAD_IDENTITY_POOL : --location=LOCATION) [--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME] [--inline-trust-config-file=INLINE_TRUST_CONFIG_FILE] [--inline-certificate-issuance-config-file=INLINE_CERTIFICATE_ISSUANCE_CONFIG_FILE     | --certificate-lifetime=CERTIFICATE_LIFETIME --key-algorithm=KEY_ALGORITHM --rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE --[no-]use-default-shared-ca] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
Update a workload identity pool.
EXAMPLES
The following command updates the workload identity pool with the ID my-workload-identity-pool: 
gcloud iam workload-identity-pools update my-workload-identity-pool --location="global" --display-name="My workload pool" --description="My workload pool description" --disabled
POSITIONAL ARGUMENTS
Workload identity pool resource - The workload identity pool to update. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

This must be specified.
WORKLOAD_IDENTITY_POOL
ID of the workload identity pool or fully qualified identifier for the workload identity pool.

To set the workload_identity_pool attribute:

This positional argument must be specified if any of the other arguments in this group are specified.
--location=LOCATION
The location name. To set the location attribute:
FLAGS
--description=DESCRIPTION
A description of the pool. Cannot exceed 256 characters.
--disabled
Whether the pool is disabled. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again.
--display-name=DISPLAY_NAME
A display name for the pool. Cannot exceed 32 characters.
--inline-trust-config-file=INLINE_TRUST_CONFIG_FILE
YAML file with configuration for providing additional trust bundles. Example file format:
inlineTrustConfig:
  additionalTrustBundles:
    example.com:
      trustAnchors:
      - pemCertificate: "-----BEGIN CERTIFICATE-----
        <certificate>
        -----END CERTIFICATE-----"
      - pemCertificate: "-----BEGIN CERTIFICATE-----
        <certificate>
        -----END CERTIFICATE-----"
    myorg.com:
      trustAnchors:
      - pemCertificate: "-----BEGIN CERTIFICATE-----
        <certificate>
        -----END CERTIFICATE-----"
      - pemCertificate: "-----BEGIN CERTIFICATE-----
        <certificate>
        -----END CERTIFICATE-----"
At most one of these can be specified:
--inline-certificate-issuance-config-file=INLINE_CERTIFICATE_ISSUANCE_CONFIG_FILE
YAML file with configuration for certificate issuance. Example file format:
inlineCertificateIssuanceConfig:
  caPools:
    us-east1: projects/1234/locations/us-east1/caPools/capoolname
    us-west1: projects/1234/locations/us-west1/caPools/capoolname
  keyAlgorithm: ECDSA_P256
  lifetime: 86400s
  rotationWindowPercentage: 50
Or at least one of these can be specified:
--certificate-lifetime=CERTIFICATE_LIFETIME
Lifetime of the workload certificates issued by the CA pool.
--key-algorithm=KEY_ALGORITHM
Key algorithm to use when generating the key pair. This key pair will be used to create the certificate. KEY_ALGORITHM must be one of: ecdsa-p256, ecdsa-p384, key-algorithm-unspecified, rsa-2048, rsa-3072, rsa-4096.
--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE
Rotation window percentage indicating when certificate rotation should be initiated based on remaining lifetime.
--[no-]use-default-shared-ca
Use the default shared certificate authorities (CAs) to issue certificates. If enabled, Google Cloud automatically provisions certificates from a default shared CA in the same region as the workload. Enabling this flag clears any existing CA pools configuration. Use --use-default-shared-ca to enable and --no-use-default-shared-ca to disable.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE
This command uses the iam/v1 API. The full documentation for this API can be found at: https://cloud.google.com/iam/
NOTES
These variants are also available: 
gcloud alpha iam workload-identity-pools update
 
gcloud beta iam workload-identity-pools update