# Copyright 2021 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- release_tracks: [GA]

  command_type: CREATE

  help_text:
    brief: Create a new SAML workload identity pool provider.
    description: Create a new SAML workload identity pool provider.
    examples: |
      The following command creates a disabled SAML workload identity pool provider in the default
      project with the ID ``my-workload-identity-pool-provider''. Explicit values for all required
      and optional parameters are provided.

        $ {command} my-workload-identity-pool-provider \
            --location="global" \
            --workload-identity-pool="my-workload-identity-pool" \
            --display-name="My workload pool provider" \
            --description="My workload pool provider description" \
            --disabled \
            --attribute-mapping="google.subject=assertion.sub" \
            --attribute-condition="true" \
            --idp-metadata-path="path/to/metadata/file.xml"

  request:
    collection: iam.projects.locations.workloadIdentityPools.providers

  arguments:
    resource:
      help_text: |-
        The workload identity pool provider to create.
      spec: !REF googlecloudsdk.command_lib.iam.resources:workload_identity_pool_provider
      is_positional: true

    params:
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.display_name
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.description
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.disabled
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.attribute_condition
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.attribute_mapping
      required: true
    - _REF_: googlecloudsdk.command_lib.iam.flags:workload_identity_pool_provider.saml_idp_metadata_path
      required: true