gcloud alpha workload-identity service-agents generate

NAME

gcloud alpha workload-identity service-agents generate - generate service agents for a service producer

SYNOPSIS

gcloud alpha workload-identity service-agents generate --service=SERVICE (--folder=FOLDER     | --organization=ORGANIZATION     | --project=PROJECT) [--location=LOCATION; default="global"] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) It can be generated in a project, folder, or organization and location.

gcloud alpha workload-identity service-agents generate generates service agents for a given service producer in a specific project, folder, or organization and location.

EXAMPLES

To generate service agents for bigquery.googleapis.com in the global location for the project 123456, run:

gcloud alpha workload-identity service-agents generate --service="bigquery.googleapis.com" --location="global" --project="123456"

To generate service agents for bigquery.googleapis.com in the global location for the folder 123456, run:

gcloud alpha workload-identity service-agents generate --service="bigquery.googleapis.com" --location="global" --folder="123456"

To generate service agents for bigquery.googleapis.com in the global location for the organization 123456, run:

gcloud alpha workload-identity service-agents generate --service="bigquery.googleapis.com" --location="global" --organization="123456"

REQUIRED FLAGS

--service=SERVICE

The service producer to generate service agents for (e.g. bigquery.googleapis.com).

Exactly one of these must be specified:

--folder=FOLDER

The folder number to generate service agents for.

--organization=ORGANIZATION

The organization number to generate service agents for.

--project=PROJECT

The project number to generate service agents for.

OPTIONAL FLAGS

--location=LOCATION; default="global"

The location for which to generate the service agents. Defaults to global.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:

gcloud workload-identity service-agents generate

gcloud beta workload-identity service-agents generate