title: How to specify a shielded VM and secure boot for a dataflow job?
body: <p>The <a href="https://cloud.google.com/sdk/gcloud/reference/dataflow/jobs/run" rel="nofollow noreferrer">dataflow job run</a> command has several parameters for workers such as <code>worker-machine-type</code>. But I don't see a specification for Shielded VM and Secure Boot. Is there a way to designate these parameters to the dataflow job?
  The issue is that the <a href="https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints" rel="nofollow noreferrer">&quot;Shielded VM&quot; policy</a> has been set at the organization level so the job fails with</p>
  <pre><code>Startup of the worker pool in zone us-west1-a failed to bring up any of the desired 2 workers. The project quota may have been exceeded or access control policies may be preventing the operation; review the Stackdriver Logging \&quot;GCE VM Instance\&quot; log for diagnostics
  </code></pre>