How to use

addBindings

method

in

com.google.iam.v1.Policy$Builder

@Test
public void testGetIamPolicy() {
 // Setup
 com.google.iam.v1.GetIamPolicyRequest expectedRequest =
   com.google.iam.v1.GetIamPolicyRequest.newBuilder()
     .setResource(NameUtil.formatInstanceName(PROJECT_ID, INSTANCE_ID))
     .build();
 com.google.iam.v1.Policy expectedResponse =
   com.google.iam.v1.Policy.newBuilder()
     .addBindings(
       com.google.iam.v1.Binding.newBuilder()
         .setRole("roles/bigtable.user")
         .addMembers("user:someone@example.com"))
     .setEtag(ByteString.copyFromUtf8("my-etag"))
     .build();
 Mockito.when(mockGetIamPolicyCallable.futureCall(expectedRequest))
   .thenReturn(ApiFutures.immediateFuture(expectedResponse));
 // Execute
 Policy actualResult = adminClient.getIamPolicy(INSTANCE_ID);
 // Verify
 assertThat(actualResult)
   .isEqualTo(
     Policy.newBuilder()
       .addIdentity(Role.of("bigtable.user"), Identity.user("someone@example.com"))
       .setEtag(BaseEncoding.base64().encode("my-etag".getBytes()))
       .build());
}

.setPolicy(
  com.google.iam.v1.Policy.newBuilder()
    .addBindings(
      com.google.iam.v1.Binding.newBuilder()
        .setRole("roles/bigtable.user")
.addBindings(
  com.google.iam.v1.Binding.newBuilder()
    .setRole("roles/bigtable.user")

@Test
public void testTopicPolicy() {
 ProjectTopicName topicName =
   ProjectTopicName.of(projectId, formatForTest("testing-topic-policy"));
 topicAdminClient.createTopic(topicName);
 Policy policy = topicAdminClient.getIamPolicy(topicName.toString());
 Binding binding =
   Binding.newBuilder().setRole("roles/viewer").addMembers("allAuthenticatedUsers").build();
 Policy newPolicy =
   topicAdminClient.setIamPolicy(
     topicName.toString(), policy.toBuilder().addBindings(binding).build());
 assertThat(newPolicy.getBindingsList()).contains(binding);
 String permissionName = "pubsub.topics.get";
 List<String> permissions =
   topicAdminClient
     .testIamPermissions(topicName.toString(), Collections.singletonList(permissionName))
     .getPermissionsList();
 assertThat(permissions).contains(permissionName);
 topicAdminClient.deleteTopic(topicName);
}

/** Example of replacing a topic policy. */
public Policy replaceTopicPolicy(String topicId) throws Exception {
 // [START pubsub_set_topic_policy]
 try (TopicAdminClient topicAdminClient = TopicAdminClient.create()) {
  String topicName = ProjectTopicName.format(projectId, topicId);
  Policy policy = topicAdminClient.getIamPolicy(topicName);
  // add role -> members binding
  Binding binding =
    Binding.newBuilder()
      .setRole(Role.viewer().toString())
      .addMembers(Identity.allAuthenticatedUsers().toString())
      .build();
  // create updated policy
  Policy updatedPolicy = Policy.newBuilder(policy).addBindings(binding).build();
  updatedPolicy = topicAdminClient.setIamPolicy(topicName, updatedPolicy);
  return updatedPolicy;
 }
 // [END pubsub_set_topic_policy]
}

/** Example of replacing a subscription policy. */
public Policy replaceSubscriptionPolicy(String subscriptionId) throws Exception {
 // [START pubsub_set_subscription_policy]
 try (SubscriptionAdminClient subscriptionAdminClient = SubscriptionAdminClient.create()) {
  ProjectSubscriptionName subscriptionName =
    ProjectSubscriptionName.of(projectId, subscriptionId);
  Policy policy = subscriptionAdminClient.getIamPolicy(subscriptionName.toString());
  // Create a role => members binding
  Binding binding =
    Binding.newBuilder()
      .setRole(Role.viewer().toString())
      .addMembers(Identity.allAuthenticatedUsers().toString())
      .build();
  // Update policy
  Policy updatedPolicy = policy.toBuilder().addBindings(binding).build();
  updatedPolicy =
    subscriptionAdminClient.setIamPolicy(subscriptionName.toString(), updatedPolicy);
  return updatedPolicy;
 }
 // [END pubsub_set_subscription_policy]
}

private static void ensureKmsKeyRingIamPermissionsForTests(
  IAMPolicyGrpc.IAMPolicyBlockingStub iamStub,
  String projectId,
  String location,
  String keyRingName)
  throws StatusRuntimeException {
 ServiceAccount serviceAccount = storage.getServiceAccount(projectId);
 String kmsKeyRingResourcePath = KeyRingName.of(projectId, location, keyRingName).toString();
 Binding binding =
   Binding.newBuilder()
     .setRole("roles/cloudkms.cryptoKeyEncrypterDecrypter")
     .addMembers("serviceAccount:" + serviceAccount.getEmail())
     .build();
 com.google.iam.v1.Policy policy =
   com.google.iam.v1.Policy.newBuilder().addBindings(binding).build();
 SetIamPolicyRequest setIamPolicyRequest =
   SetIamPolicyRequest.newBuilder()
     .setResource(kmsKeyRingResourcePath)
     .setPolicy(policy)
     .build();
 requestParamsHeader.put(requestParamsKey, "parent=" + kmsKeyRingResourcePath);
 iamStub = MetadataUtils.attachHeaders(iamStub, requestParamsHeader);
 iamStub.setIamPolicy(setIamPolicyRequest);
}

Policy newPolicy =
  topicAdminClient.setIamPolicy(
    topic.toString(), policy.toBuilder().addBindings(binding).build());
assertTrue(newPolicy.getBindingsList().contains(binding));
String permissionName = "pubsub.topics.get";

.addBindings(newBinding)
.build();

.addBindings(newBinding)
.build();