gcloud: Wed Mar 27 09:52:07 UTC 2024

gcloud/alpha/firestore/databases/create

@@ -5,8 +5,8 @@ NAME
 SYNOPSIS
     gcloud alpha firestore databases create --location=LOCATION
         [--database=DATABASE; default="(default)"] [--delete-protection]
-        [--enable-pitr] [--type=TYPE; default="firestore-native"]
-        [GCLOUD_WIDE_FLAG ...]
+        [--enable-pitr] [--kms-key-name=KMS_KEY_NAME]
+        [--type=TYPE; default="firestore-native"] [GCLOUD_WIDE_FLAG ...]
 
 EXAMPLES
     To create a Firestore Native database in nam5.
@@ -71,6 +71,22 @@ OPTIONAL FLAGS
             If set to true, PITR on the new database will be enabled. By default,
             this feature is not enabled.
 
+     --kms-key-name=KMS_KEY_NAME
+        The resource ID of a Cloud KMS key. If set, the database created will
+        be a Customer-managed Encryption Key (CMEK) database encrypted with
+        this key. This feature is allowlist only in initial launch.
+
+            Only the key in the same location as this database is allowed to be
+            used for encryption.
+
+            For Firestore's nam5 multi-region, this corresponds to Cloud KMS
+            location us. For Firestore's eur3 multi-region, this corresponds to
+            Cloud KMS location europe. See https://cloud.google.com/kms/docs/locations.
+
+            This value should be the KMS key resource ID in the format of
+            `projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
+            How to retrive this resource ID is listed at https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version.
+
      --type=TYPE; default="firestore-native"
         The type of the database. TYPE must be one of: firestore-native,
         datastore-mode.