def Run(self, args):
"""This is what gets called when the user runs this command.
Args:
args: an argparse namespace. All the arguments that were provided to this
command invocation.
Returns:
A IAM policy message.
"""
instance_ref = util.GetInstanceRef(args.instance)
return instances.GetIamPolicy(instance_ref)
def RemoveInstanceIamPolicyBinding(instance_ref, member, role):
"""Removes a policy binding from an instance IAM policy."""
policy = instances.GetIamPolicy(instance_ref)
iam_util.RemoveBindingFromIamPolicy(policy, member, role)
return instances.SetPolicy(instance_ref, policy)
def AddInstanceIamPolicyBinding(instance_ref, member, role):
"""Adds a policy binding to an instance IAM policy."""
msgs = util.GetAdminMessages()
policy = instances.GetIamPolicy(instance_ref)
iam_util.AddBindingToIamPolicy(msgs.Binding, policy, member, role)
return instances.SetPolicy(instance_ref, policy)