gcloud: Wed Jun 28 10:42:37 UTC 2023

gcloud/alpha/sql/instances/help

@@ -58,6 +58,9 @@ COMMANDS
      promote-replica
         (ALPHA) Promotes Cloud SQL read replica to a stand-alone instance.
 
+     reencrypt
+        (ALPHA) Reencrypts a Cloud SQL CMEK instance.
+
      reset-ssl-config
         (ALPHA) Deletes all client certificates and generates a new server
         certificate.

gcloud/alpha/sql/instances/reencrypt

@@ -0,0 +1,40 @@
+NAME
+    gcloud alpha sql instances reencrypt - reencrypts a Cloud SQL CMEK instance
+
+SYNOPSIS
+    gcloud alpha sql instances reencrypt INSTANCE [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Reencrypt a Cloud SQL CMEK instance with the primary key version.
+
+EXAMPLES
+    To reencrypt a Cloud SQL CMEK instance with the primary key version:
+
+        $ gcloud alpha sql instances reencrypt instance-foo
+
+POSITIONAL ARGUMENTS
+     INSTANCE
+        Cloud SQL instance ID.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta sql instances reencrypt
+