NAME
    gcloud privateca certificates update - update an existing certificate

SYNOPSIS
    gcloud privateca certificates update
        (CERTIFICATE
          : --issuer-location=ISSUER_LOCATION --issuer-pool=ISSUER_POOL)
        [--update-labels=[KEY=VALUE,...]]
        [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]

EXAMPLES
    To update labels on a certificate:

        $ gcloud privateca certificates update frontend-server-tls \
           --issuer-pool=my-pool --issuer-location=us-west1 \
           --update-labels=in_use=true

POSITIONAL ARGUMENTS
     CERTIFICATE resource - The certificate to update. The arguments in this
     group can be used to specify the attributes of this resource. (NOTE) Some
     attributes are not given arguments in this group but can be set in other
     ways.

     To set the project attribute:
      ◆ provide the argument CERTIFICATE on the command line with a fully
        specified name;
      ◆ provide the argument --project on the command line;
      ◆ set the property core/project.

     This must be specified.

       CERTIFICATE
          ID of the CERTIFICATE or fully qualified identifier for the
          CERTIFICATE.

          To set the certificate attribute:
          ▸ provide the argument CERTIFICATE on the command line.

          This positional argument must be specified if any of the other
          arguments in this group are specified.

       --issuer-location=ISSUER_LOCATION
          The location of the CERTIFICATE.

          To set the issuer-location attribute:
          ▸ provide the argument CERTIFICATE on the command line with a fully
            specified name;
          ▸ provide the argument --issuer-location on the command line;
          ▸ set the property privateca/location.

       --issuer-pool=ISSUER_POOL
          The parent CA Pool of the CERTIFICATE.

          To set the issuer-pool attribute:
          ▸ provide the argument CERTIFICATE on the command line with a fully
            specified name;
          ▸ provide the argument --issuer-pool on the command line.

FLAGS
     --update-labels=[KEY=VALUE,...]
        List of label KEY=VALUE pairs to update. If a label exists, its value
        is modified. Otherwise, a new label is created.

        Keys must start with a lowercase character and contain only hyphens
        (-), underscores (_), lowercase characters, and numbers. Values must
        contain only hyphens (-), underscores (_), lowercase characters, and
        numbers.

     At most one of these can be specified:

       --clear-labels
          Remove all labels. If --update-labels is also specified then
          --clear-labels is applied first.

          For example, to remove all labels:

              $ gcloud privateca certificates update --clear-labels

          To remove all existing labels and create two new labels, foo and baz:

              $ gcloud privateca certificates update --clear-labels \
                --update-labels foo=bar,baz=qux

       --remove-labels=[KEY,...]
          List of label keys to remove. If a label does not exist it is
          silently ignored. If --update-labels is also specified then
          --update-labels is applied first.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.
