gcloud: Wed Jun 12 09:25:04 UTC 2024

gcloud/secrets/create

@@ -4,6 +4,7 @@ NAME
 SYNOPSIS
     gcloud secrets create SECRET [--data-file=PATH] [--labels=[KEY=VALUE,...]]
         [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]]
+        [--version-destroy-ttl=VERSION-DESTROY-TTL]
         [--expire-time=EXPIRE-TIME | --ttl=TTL]
         [--next-rotation-time=NEXT_ROTATION_TIME
           --rotation-period=ROTATION_PERIOD]
@@ -61,6 +62,10 @@ EXAMPLES
             --next-rotation-time="2030-01-01T15:30:00-05:00" \
             --rotation-period="7200s"
 
+    Create a secret with delayed secret version destroy enabled:
+
+        $ gcloud secrets create my-secret --version-destroy-ttl="86400s"
+
 POSITIONAL ARGUMENTS
      Secret resource - The secret to create. This represents a Cloud resource.
      (NOTE) Some attributes are not given arguments in this group but can be
@@ -102,6 +107,13 @@ FLAGS
      --topics=[TOPICS,...]
         List of Pub/Sub topics to configure on the secret.
 
+     --version-destroy-ttl=VERSION-DESTROY-TTL
+        Secret Version Time To Live (TTL) after destruction request. For secret
+        with TTL>0, version destruction does not happen immediately on calling
+        destroy; instead, the version goes to a disabled state and destruction
+        happens after the TTL expires. See $ gcloud topic datetimes for
+        information on duration formats.
+
      Expiration.
 
      At most one of these can be specified: