gcloud: Fri Mar 22 09:56:14 UTC 2024

gcloud/beta/secrets/create

@@ -4,7 +4,9 @@ NAME
 SYNOPSIS
     gcloud beta secrets create (SECRET : --location=LOCATION)
         [--data-file=PATH] [--labels=[KEY=VALUE,...]]
+        [--regional-kms-key-name=KMS-KEY-NAME]
         [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]]
+        [--version-destroy-ttl=VERSION-DESTROY-TTL]
         [--expire-time=EXPIRE-TIME | --ttl=TTL]
         [--next-rotation-time=NEXT_ROTATION_TIME
           --rotation-period=ROTATION_PERIOD]
@@ -73,6 +75,10 @@ EXAMPLES
             --next-rotation-time="2030-01-01T15:30:00-05:00" \
             --rotation-period="7200s"
 
+    Create a secret with delayed secret version destroy enabled:
+
+        $ gcloud beta secrets create my-secret --version-destroy-ttl="86400s"
+
 POSITIONAL ARGUMENTS
      Global or regional secret resource - create a secret The arguments in this
      group can be used to specify the attributes of this resource. (NOTE) Some
@@ -120,6 +126,10 @@ FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     --regional-kms-key-name=KMS-KEY-NAME
+        Regional KMS key with which to encrypt and decrypt the secret. Only
+        valid for regional secrets.
+
      Annotations
 
        --set-annotations=[KEY=VALUE,...]
@@ -129,6 +139,13 @@ FLAGS
      --topics=[TOPICS,...]
         List of Pub/Sub topics to configure on the secret.
 
+     --version-destroy-ttl=VERSION-DESTROY-TTL
+        Secret Version Time To Live (TTL) after destruction request. For secret
+        with TTL>0, version destruction does not happen immediately on calling
+        destroy; instead, the version goes to a disabled state and destruction
+        happens after the TTL expires. See $ gcloud topic datetimes for
+        information on duration formats.
+
      Expiration.
 
      At most one of these can be specified:

gcloud/beta/secrets/update

@@ -15,7 +15,8 @@ SYNOPSIS
         [--next-rotation-time=NEXT_ROTATION_TIME --remove-next-rotation-time
           --remove-rotation-period
           --remove-rotation-schedule --rotation-period=ROTATION_PERIOD]
-        [GCLOUD_WIDE_FLAG ...]
+        [--remove-version-destroy-ttl
+          | --version-destroy-ttl=VERSION-DESTROY-TTL] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (BETA) Update a secret's metadata (e.g. labels). This command will return
@@ -63,6 +64,14 @@ EXAMPLES
 
         $ gcloud beta secrets update my-secret --remove-rotation-schedule
 
+    Update version destroy ttl of a secret:
+
+        $ gcloud beta secrets update my-secret --version-destroy-ttl="86400s"
+
+    Disable delayed secret version destroy:
+
+        $ gcloud beta secrets update my-secret --remove-version-destroy-ttl
+
 POSITIONAL ARGUMENTS
      Global or regional secret resource - to update The arguments in this group
      can be used to specify the attributes of this resource. (NOTE) Some
@@ -203,6 +212,20 @@ FLAGS
        --rotation-period=ROTATION_PERIOD
           Duration of time (in seconds) between rotation notifications.
 
+     Version destroy ttl.
+
+     At most one of these can be specified:
+
+       --remove-version-destroy-ttl
+          If set, removes the version destroy TTL from the secret.
+
+       --version-destroy-ttl=VERSION-DESTROY-TTL
+          Secret Version TTL after destruction request. For secret with TTL>0,
+          version destruction does not happen immediately on calling destroy;
+          instead, the version goes to a disabled state and destruction happens
+          after the TTL expires. See $ gcloud topic datetimes for information
+          on duration formats.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,