eSrSSKJr SSKJr SSKJr SSKJr SSKJr SSKJ r SSK J r \R\R"\RR5"S S \R 555rg ) zACommand for setting the default service account on a GCE project.)absolute_import)division)unicode_literals) base_classes)base) exceptions) propertiesc4\rSrSrSr\S5rSrSrSr g)SetDefaultServiceAccountaXSet the default service account on the project. *{command}* is used to configure the default service account on project. The project's default service account is used when a new instance is created unless a custom service account is set via --scopes or --no-scopes. Existing instances are not affected. For example, $ {command} --service-account=example@developers.gserviceaccount.com $ gcloud compute instances create instance-name will set the project's default service account as example@developers.gserviceaccount.com. The instance created will have example@developers.gserviceaccount.com as the service account associated with because no service account email was specified in the "instances create" command. To remove the default service account from the project, issue the command: $ {command} --no-service-account The required permission to execute this command is `compute.projects.setDefaultServiceAccount`. If needed, you can include this permission, or choose any of the following preexisting IAM roles that contain this particular permission: * Owner * Editor * Compute Admin cfUR5nURSSS9 URSSSS9 g)N--service-accountaR The email address of the service account that will be set as the default service account for all newly created instances in the project. To set the default service account to example@project.iam.gserviceaccount.com: $ {command} --service-account example@project.iam.gserviceaccount.com )helpz--no-service-account store_trueaA Sets the default service account on the project as no service account. This causes newly created instances to not run as a service account by default. To set the default service account as no service account, specify this flag: $ {command} --no-service-account )actionr)add_mutually_exclusive_group add_argument)parseraccounts_groups ?lib/surface/compute/project_info/set_default_service_account.pyArgsSetDefaultServiceAccount.Args?sK88:N       c[R"UR55nURnUR U5 UR (acUR R[RRRR5UR R5S9nOkUR R[RRRR5UR RURS9S9nURUR R"SU4/5$)N)project'projectsSetDefaultServiceAccountRequest)emailr )rComputeApiHolder ReleaseTrackclient validateFlagsno_service_accountmessages.ComputeProjectsSetDefaultServiceAccountRequestr VALUEScorer GetOrFail'ProjectsSetDefaultServiceAccountRequestservice_account MakeRequestsapitools_clientprojects)selfargsholderr requests rRunSetDefaultServiceAccount.Run[s  * *4+<+<+> ?F ]]Ft NN##((00::< // A A COEg NN##((00::< // A A(( B Og   !7!7!@!@!;W!F G HHrcxUR(d)UR(d[R"SS5egg)Nrzjmust be specified with a service account. To clear the default service account use [--no-service-account].)r"r)rRequiredArgumentException)r-r.s rr!&SetDefaultServiceAccount.validateFlagsrs:  " "4+?+?  0 0  J KK,@ "rN) __name__ __module__ __qualname____firstlineno____doc__ staticmethodrr1r!__static_attributes__r6rrr r s(B  6H.Krr N)r; __future__rrrgooglecloudsdk.api_lib.computergooglecloudsdk.callioperrgooglecloudsdk.corer UniverseCompatible ReleaseTracksrALPHA SilentCommandr r6rrrFslH&'7(.*D%%++,YKt11YK-YKr