!SrSSKJr SSKJr SSKJr SSKJr SSKJ r SSK J r SSK J r SSK Jr SS KJr SS KJr SS KJr SS KrS S0r\ R,"SS\ R.55rg )z#Command for updating a custom role.)absolute_import)division)unicode_literals) exceptions)util) http_retry)base)flags)iam_util) console_ioNEXAMPLESaD To update the role ``ProjectUpdater'' from a YAML file, run: $ {command} ProjectUpdater --organization=123 --file=role_file_path To update the role ``ProjectUpdater'' with flags, run: $ {command} ProjectUpdater --project=myproject --permissions=permission1,permission2 c\rSrSrSr\r\S5rSr \ R"\ RRR5S5rSrSrSrg ) Update0zFUpdate an IAM custom role. This command updates an IAM custom role. c~URS5nURSSS9 URSSS9 URSSS9 URS S S9 URS S S9 URS SS9 URSSS9 [R"US5 [R"S5R U5 g)NzThe following flags determine the fields need to be updated. You can update a role by specifying the following flags, or you can update a role from a YAML file by specifying the file flag.z--titlez)The title of the role you want to update.)helpz --descriptionz/The description of the role you want to update.z--stagez)The state of the role you want to update. --permissionszIThe permissions of the role you want to set. Use commas to separate them.z--add-permissionszIThe permissions you want to add to the role. Use commas to separate them.z--remove-permissionszNThe permissions you want to remove from the role. Use commas to separate them.z--filezeThe YAML file you want to use to update a role. Can not be specified with other flags except role-id.update)add_argument_group add_argumentr AddParentFlagsGetCustomRoleFlag AddToParser)parserupdateds lib/surface/iam/roles/update.pyArgs Update.Args:s'' NOG CE OQ CE '( '( -. @A * H%11&9c[R"5up#[R"URUR UR 5nUR5nUR(GaUUR(dUUR(dDUR(d3UR(d"UR(dUR(a[R "SS5e[R""URUR5nUR$(dSn[&R("USSS9 UR*(d2UR-X#UR.UR UR5 UR0R3UR5XES95n[R6"U5 U$URAXXRU5n[R6"U5 U$![8R:an[R<"USS 9eSnAf[8R>an[R<"U5eSnAff=f) NfileotherszThe specified role does not contain an "etag" field identifying a specific version to replace. Updating a role without an "etag" can overwrite concurrent role changes.zReplace existing roleT)message prompt_string cancel_on_no)namerolezStale "etag": Please use the etag from your latest describe response. Or new changes have been made since your latest describe operation. Please retry the whole describe-update process. Or you can leave the etag blank to overwrite concurrent role changes.) error_format)!rGetClientAndMessagesr GetRoleName organizationprojectr'Roler!title descriptionstage permissionsadd_permissionsremove_permissionsrConflictingArgumentsExceptionParseYamlToRoleetagr PromptContinuequietWarnPermissionsincludedPermissionsorganizations_rolesPatch!IamOrganizationsRolesPatchRequestSetRoleStageIfAlphaapitools_exceptionsHttpConflictError HttpException HttpErrorUpdateWithFlags) selfargsclientmessages role_namer'msgreses rRun Update.RunYs002F$$T%6%6 diiPI ==?D yyy **((DJJ$:J:J   $"9"966vxHH  % %dii ?d YY !!1 ZZ Vt/G/G!\\4+<+< >*((..  6 6 7 +, $$S)    th GC   % J! 2 2/&& -/ /! * **&&q))*s$?G00I HI 0II c URXUXE5up6URRURX#SR U5S95$)N,)r&r' updateMask)GetUpdatedRoler;r<r=join)rDrErHr' iam_clientrGchanged_fieldss rrCUpdate.UpdateWithFlagssZ..t/9ED  ) ) / /22#((>2J 3 L MMrcv/nURb"URS5 URUlURb"URS5 URUlUR(a6URS5 [R "UR5UlUR b9UR(dUR(a[R"SS5eUR bURS5 UR RS5Ul UR (d/Ul UR(d2URXEURURUR 5 UR"R%UR'US95nUR(dUR(GaU[)UR5nS n [)5n UR(aMURRS5H.n X;dM UR+U 5 U R+U 5 S n M0 UR(aRURRS5H3n X;aUR-U 5 S n X;dM"U R-U 5 M5 U (aURS5 [/[1U55Ul UR(d1URXE[/U 5URUR 5 UR2UlX64$) z!Gets the updated role from flags.r/r.r0rz(-add-permissions or --remove-permissionsr:rO)r&FT)r/appendr.r0r StageTypeFromStringr1r2r3rr4splitr:r8r9r,r+r;GetIamOrganizationsRolesGetRequestsetaddremovelistsortedr6) rDrErHr'rSrGrT origin_roler1changednewly_added_permissions permissions rrQUpdate.GetUpdatedRolesN #M*))d zzG$::dj zzG$// ;dj #)=)=)-)@)@  4 4 E GG #12!%!1!1!7!7!004400i0@BK t666 778kg #  ..44S9J  * OOJ ' # ' ' 3G :  1177 >?M@M3 j rsg *&'>+2(.032   Y