- release_tracks: [GA]
  help_text:
    brief: |
      Set the IAM policy for a certificate template.
    description: |
      Sets the IAM policy for the given certificate template as defined in a JSON or YAML file.

      See https://cloud.google.com/iam/docs/managing-policies for details of
      the policy file format and contents.
    examples: |
      The following command will read an IAM policy defined in a JSON file
      'policy.json' and set it for the certificate template 'my-template' with the location
      'us-west1':

        $ {command} my-template --location=us-west1 policy.json

  request:
    collection: privateca.projects.locations.certificateTemplates
    api_version: v1

  arguments:
    resource:
      help_text: The certificate template for which to update the IAM policy.
      spec: !REF googlecloudsdk.command_lib.privateca.resources:certificate_template

  iam:
    enable_condition: true
    policy_version: 3
    get_iam_policy_version_path: options_requestedPolicyVersion