feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/__init__.py

@@ -0,0 +1,28 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""The gcloud colab runtime-templates command group."""
+
+from googlecloudsdk.calliope import base
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class RuntimeTemplates(base.Group):
+  # pylint: disable=g-doc - this is required for help text.
+  """Manage Colab Enterprise runtime templates.
+
+  For more information about runtime templates, see
+  https://cloud.google.com/colab/docs/runtimes#runtime-templates
+  """

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/add_iam_policy_binding.py

@@ -0,0 +1,78 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to add an IAM policy binding to a Colab Enterprise runtime template."""
+
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+from googlecloudsdk.command_lib.iam import iam_util
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Add an IAM policy binding to a Colab Enterprise runtime template.
+    """,
+    'EXAMPLES': """
+        To set `someone@example.com` to have the `roles/aiplatform.notebookRuntimeUser` role for a runtime template with id `my-runtime-template` in region `us-central1`, run:
+
+        $ {command} my-runtime-template --region=us-central1 --member=user:someone@example.com --role=roles/aiplatform.notebookRuntimeUser
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class AddIamPolicyBinding(base.Command):
+  """Add an IAM policy binding to a Colab Enterprise runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddFlagsToAddIamPolicyBinding(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version='BETA', region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      iam_policy = runtime_templates_service.GetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateGetIamPolicyRequest(
+              args, messages
+          )
+      )
+      iam_util.AddBindingToIamPolicy(
+          messages.GoogleIamV1Binding,
+          iam_policy,
+          args.member,
+          args.role,
+      )
+      return runtime_templates_service.SetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateSetIamPolicyRequest(
+              iam_policy, args, messages
+          )
+      )
+
+AddIamPolicyBinding.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/create.py

@@ -0,0 +1,88 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Create command for Colab Enterprise Runtime Templates."""
+
+from googlecloudsdk.api_lib.ai import operations
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Create a Colab Enterprise runtime template, a VM configuration for your notebook runtimes.
+    """,
+    'EXAMPLES': """
+        To create a runtime template in region 'us-central1' with the display name 'my-runtime-template', run:
+
+        $ {command} --region=us-central1 --display-name=my-runtime-template
+
+        To create a runtime template for a VM with machine type n1-standard-2 and one NVIDIA_TESLA_V100 accelerator, run:
+
+        $ {command} --machine-type=n1-standard-2 --accelerator-type=NVIDIA_TESLA_V100 --accelerator-count=1 --region=us-central1 --display-name=my-runtime-template
+
+        To create a runtime template that disables end user credential access, run:
+
+        $ {command} --no-enable-euc --region=us-central1 --display-name=my-runtime-template
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class Create(base.CreateCommand):
+  """Create a runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddCreateRuntimeTemplateFlags(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    region_ref = args.CONCEPTS.region.Parse()
+    region = region_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version='BETA', region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      operation = runtime_templates_service.Create(
+          runtime_templates_util.CreateRuntimeTemplateCreateRequest(
+              args, messages
+          )
+      )
+      return util.WaitForOpMaybe(
+          operations_client=operations.OperationsClient(client=api_client),
+          op=operation,
+          op_ref=runtime_templates_util.ParseRuntimeTemplateOperation(
+              operation.name
+          ),
+          asynchronous=util.GetAsyncConfig(args),
+          kind='runtime template',
+          log_method='create',
+          message='Waiting for runtime template to be created...',
+      )
+
+
+Create.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/delete.py

@@ -0,0 +1,81 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Delete command for Colab Enterprise Runtime Templates."""
+
+from googlecloudsdk.api_lib.ai import operations
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Delete a Colab Enterprise notebook runtime template.
+    """,
+    'EXAMPLES': """
+        To delete a runtime template with id 'my-runtime-template' in region 'us-central1', run:
+
+        $ {command} my-runtime-template --region=us-central1
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class Delete(base.DeleteCommand):
+  """Delete a runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddDeleteRuntimeTemplateFlags(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version='BETA', region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      operation = runtime_templates_service.Delete(
+          runtime_templates_util.CreateRuntimeTemplateDeleteRequest(
+              args, messages
+          )
+      )
+      return util.WaitForOpMaybe(
+          operations_client=operations.OperationsClient(client=api_client),
+          op=operation,
+          op_ref=runtime_templates_util.ParseRuntimeTemplateOperation(
+              operation.name
+          ),
+          log_method='delete',
+          kind='runtime template',
+          asynchronous=util.GetAsyncConfig(args),
+          message='Waiting for runtime template to be deleted...',
+          resource=args.CONCEPTS.runtime_template.Parse().RelativeName(),
+      )
+
+
+Delete.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/describe.py

@@ -0,0 +1,68 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Describe command for Colab Enterprise Runtime Templates."""
+
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Describe a Colab Enterprise notebook runtime template.
+    """,
+    'EXAMPLES': """
+        To describe a runtime template with id 'my-runtime-template' in region 'us-central1', run:
+
+        $ {command} my-runtime-template --region=us-central1
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class Describe(base.DescribeCommand):
+  """Describe a runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddDescribeRuntimeTemplateFlags(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version='BETA', region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      return runtime_templates_service.Get(
+          runtime_templates_util.CreateRuntimeTemplateGetRequest(
+              args, messages
+          )
+      )
+
+
+Describe.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/get_iam_policy.py

@@ -0,0 +1,71 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to get the IAM policy for a Colab Enterprise runtime template."""
+
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import constants
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Get the IAM policy for a Colab Enterprise runtime template.
+    """,
+    'EXAMPLES': """
+        To get the IAM policy for a runtime template with id `my-runtime-template` in region `us-central1`, run:
+
+        $ {command} my-runtime-template --location=us-central1 \
+            --member=user:someone@example.com --role=roles/aiplatform.notebookRuntimeUser
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class GetIamPolicy(base.ListCommand):
+  """Get IAM policy for a Colab Enterprise runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddGetIamPolicyFlags(parser)
+    # Inherited URI flag from list command does not apply for listing IAM
+    # policies.
+    base.URI_FLAG.RemoveFromParser(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version=constants.BETA_VERSION, region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      return runtime_templates_service.GetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateGetIamPolicyRequest(
+              args, messages
+          )
+      )
+
+GetIamPolicy.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/list.py

@@ -0,0 +1,79 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""List command for Colab Enterprise Runtime Templates."""
+
+from apitools.base.py import list_pager
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        List your project's Colab Enterprise notebook runtime templates in a given region.
+    """,
+    'EXAMPLES': """
+        To list your runtime templates in region 'us-central1', run:
+
+        $ {command} --region=us-central1
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class List(base.ListCommand):
+  """List your runtime templates."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddListRuntimeTemplatesFlags(parser)
+    parser.display_info.AddFormat("""
+        table(name.segment(-1):label=ID,
+        displayName.segment(-1),
+        name.segment(-3):label=REGION,
+        machineSpec.machineType.segment(-1))
+    """)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    region_ref = args.CONCEPTS.region.Parse()
+    region = region_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version='BETA', region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      return list_pager.YieldFromList(
+          service=runtime_templates_service,
+          request=runtime_templates_util.CreateRuntimeTemplateListRequest(
+              args, messages
+          ),
+          field='notebookRuntimeTemplates',
+          limit=args.limit,
+          batch_size_attribute='pageSize',
+          batch_size=args.page_size,
+      )
+
+List.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/remove_iam_policy_binding.py

@@ -0,0 +1,77 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to remove an IAM policy binding from a Colab Enterprise runtime template."""
+
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import constants
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+from googlecloudsdk.command_lib.iam import iam_util
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Remove an IAM policy binding from a Colab Enterprise runtime template.
+    """,
+    'EXAMPLES': """
+        To remove an IAM policy binding of `roles/aiplatform.notebookRuntimeUser` for `someone@example.com`, from the runtime template with id `my-runtime-template` in region `us-central1`, run:
+
+        $ {command} my-runtime-template --region=us-central1 --member=user:someone@example.com --role=roles/aiplatform.notebookRuntimeUser
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class RemoveIamPolicyBinding(base.Command):
+  """Remove an IAM policy binding from a Colab Enterprise runtime template."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddRemoveIamPolicyBindingFlags(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version=constants.BETA_VERSION, region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      iam_policy = runtime_templates_service.GetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateGetIamPolicyRequest(
+              args, messages
+          )
+      )
+      iam_util.RemoveBindingFromIamPolicy(
+          iam_policy,
+          args.member,
+          args.role,
+      )
+      return runtime_templates_service.SetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateSetIamPolicyRequest(
+              iam_policy, args, messages
+          )
+      )
+
+RemoveIamPolicyBinding.detailed_help = _DETAILED_HELP

gcloud auth application-default login/google-cloud-sdk/lib/surface/colab/runtime_templates/set_iam_policy.py

@@ -0,0 +1,69 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to set an IAM policy binding on a Colab Enterprise runtime template."""
+
+from googlecloudsdk.api_lib.colab_enterprise import runtime_templates as runtime_templates_util
+from googlecloudsdk.api_lib.colab_enterprise import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.ai import constants
+from googlecloudsdk.command_lib.ai import endpoint_util
+from googlecloudsdk.command_lib.colab_enterprise import flags
+
+_DETAILED_HELP = {
+    'DESCRIPTION': """
+        Set the IAM policy for a Colab Enterprise runtime template as defined in a JSON or YAML file.
+
+        See https://cloud.google.com/iam/docs/managing-policies for details of
+        the policy file format and contents.
+    """,
+    'EXAMPLES': """
+        To set the IAM policy for a runtime template with id `my-runtime-template` in region `us-central1` to the policy defined in `policy.json`, run:
+
+        $ {command} my-runtime-template policy.json --region=us-central1
+    """,
+}
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA)
+class SetIamPolicy(base.Command):
+  """Set IAM policy for a Colab Enterprise runtime template as defined in a JSON or YAML file."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    flags.AddSetIamPolicyBindingFlags(parser)
+
+  def Run(self, args):
+    """This is what gets called when the user runs this command."""
+    release_track = self.ReleaseTrack()
+    messages = util.GetMessages(self.ReleaseTrack())
+    runtime_template_ref = args.CONCEPTS.runtime_template.Parse()
+    region = runtime_template_ref.AsDict()['locationsId']
+    # Override to regionalize domain as used by the AIPlatform API.
+    with endpoint_util.AiplatformEndpointOverrides(
+        version=constants.BETA_VERSION, region=region
+    ):
+      api_client = util.GetClient(release_track)
+      runtime_templates_service = (
+          api_client.projects_locations_notebookRuntimeTemplates
+      )
+      return runtime_templates_service.SetIamPolicy(
+          runtime_templates_util.CreateRuntimeTemplateSetIamPolicyRequestFromFile(
+              args, messages
+          )
+      )
+
+SetIamPolicy.detailed_help = _DETAILED_HELP