gcloud: Wed Jun 12 09:25:04 UTC 2024

gcloud/secrets/update

@@ -15,7 +15,8 @@ SYNOPSIS
         [--next-rotation-time=NEXT_ROTATION_TIME --remove-next-rotation-time
           --remove-rotation-period
           --remove-rotation-schedule --rotation-period=ROTATION_PERIOD]
-        [GCLOUD_WIDE_FLAG ...]
+        [--remove-version-destroy-ttl
+          | --version-destroy-ttl=VERSION-DESTROY-TTL] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Update a secret's metadata (e.g. labels). This command will return an error
@@ -50,6 +51,14 @@ EXAMPLES
 
         $ gcloud secrets update my-secret --remove-rotation-schedule
 
+    Update version destroy ttl of a secret:
+
+        $ gcloud secrets update my-secret --version-destroy-ttl="86400s"
+
+    Disable delayed secret version destroy:
+
+        $ gcloud secrets update my-secret --remove-version-destroy-ttl
+
 POSITIONAL ARGUMENTS
      Secret resource - The secret to update. This represents a Cloud resource.
      (NOTE) Some attributes are not given arguments in this group but can be
@@ -175,6 +184,20 @@ FLAGS
        --rotation-period=ROTATION_PERIOD
           Duration of time (in seconds) between rotation notifications.
 
+     Version destroy ttl.
+
+     At most one of these can be specified:
+
+       --remove-version-destroy-ttl
+          If set, removes the version destroy TTL from the secret.
+
+       --version-destroy-ttl=VERSION-DESTROY-TTL
+          Secret Version TTL after destruction request. For secret with TTL>0,
+          version destruction does not happen immediately on calling destroy;
+          instead, the version goes to a disabled state and destruction happens
+          after the TTL expires. See $ gcloud topic datetimes for information
+          on duration formats.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,