gcloud: Fri Mar 22 09:56:14 UTC 2024

gcloud/beta/secrets/create

@@ -4,7 +4,9 @@ NAME
 SYNOPSIS
     gcloud beta secrets create (SECRET : --location=LOCATION)
         [--data-file=PATH] [--labels=[KEY=VALUE,...]]
+        [--regional-kms-key-name=KMS-KEY-NAME]
         [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]]
+        [--version-destroy-ttl=VERSION-DESTROY-TTL]
         [--expire-time=EXPIRE-TIME | --ttl=TTL]
         [--next-rotation-time=NEXT_ROTATION_TIME
           --rotation-period=ROTATION_PERIOD]
@@ -73,6 +75,10 @@ EXAMPLES
             --next-rotation-time="2030-01-01T15:30:00-05:00" \
             --rotation-period="7200s"
 
+    Create a secret with delayed secret version destroy enabled:
+
+        $ gcloud beta secrets create my-secret --version-destroy-ttl="86400s"
+
 POSITIONAL ARGUMENTS
      Global or regional secret resource - create a secret The arguments in this
      group can be used to specify the attributes of this resource. (NOTE) Some
@@ -120,6 +126,10 @@ FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     --regional-kms-key-name=KMS-KEY-NAME
+        Regional KMS key with which to encrypt and decrypt the secret. Only
+        valid for regional secrets.
+
      Annotations
 
        --set-annotations=[KEY=VALUE,...]
@@ -129,6 +139,13 @@ FLAGS
      --topics=[TOPICS,...]
         List of Pub/Sub topics to configure on the secret.
 
+     --version-destroy-ttl=VERSION-DESTROY-TTL
+        Secret Version Time To Live (TTL) after destruction request. For secret
+        with TTL>0, version destruction does not happen immediately on calling
+        destroy; instead, the version goes to a disabled state and destruction
+        happens after the TTL expires. See $ gcloud topic datetimes for
+        information on duration formats.
+
      Expiration.
 
      At most one of these can be specified: