gcloud-help/gcloud/kms/keys/versions/create

NAME
    gcloud kms keys versions create - create a new version

SYNOPSIS
    gcloud kms keys versions create
        [--ekm-connection-key-path=EKM_CONNECTION_KEY_PATH]
        [--external-key-uri=EXTERNAL_KEY_URI] [--key=KEY] [--keyring=KEYRING]
        [--location=LOCATION] [--primary] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Creates a new version within the given key.

EXAMPLES
    The following command creates a new version within the frodo key,
    fellowship keyring, and global location and sets it as the primary version:

        $ gcloud kms keys versions create --location=global \
            --keyring=fellowship --key=frodo --primary

    The following command creates a new version within the legolas key,
    fellowship keyring, us-central1 location,
    https://example.kms/v0/some/key/path as the address for its external key,
    and sets it as the key's primary version:

        $ gcloud kms keys versions create --location=us-central1 \
            --keyring=fellowship --key=legolas \
            --external-key-uri=https://example.kms/v0/some/key/path \
            --primary

    The following command creates a new version within the bilbo key,
    fellowship keyring, us-central1 location, v0/some/key/path as the ekm
    connection key path for its external key, and sets it as the key's primary
    version:

        $ gcloud kms keys versions create --location=us-central1 \
            --keyring=fellowship --key=bilbo \
            --ekm-connection-key-path=v0/some/key/path --primary

FLAGS
     --ekm-connection-key-path=EKM_CONNECTION_KEY_PATH
        The path to the external key material on the EKM for keys with
        protection level "external-vpc".

     --external-key-uri=EXTERNAL_KEY_URI
        The URI of the external key for keys with protection level "external".

     --key=KEY
        The containing key.

     --keyring=KEYRING
        Key ring of the key.

     --location=LOCATION
        Location of the keyring.

     --primary
        If specified, immediately makes the new version primary. This should
        only be used with the encryption purpose.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    These variants are also available:

        $ gcloud alpha kms keys versions create

        $ gcloud beta kms keys versions create