gcloud: Wed Aug 31 09:34:57 UTC 2022

gcloud/secrets/create

@@ -3,7 +3,8 @@ NAME
 
 SYNOPSIS
     gcloud secrets create SECRET [--data-file=PATH] [--labels=[KEY=VALUE,...]]
-        [--topics=[TOPICS,...]] [--expire-time=EXPIRE-TIME | --ttl=TTL]
+        [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]]
+        [--expire-time=EXPIRE-TIME | --ttl=TTL]
         [--next-rotation-time=NEXT_ROTATION_TIME
           --rotation-period=ROTATION_PERIOD]
         [--replication-policy-file=REPLICATION-POLICY-FILE
@@ -89,6 +90,12 @@ FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     Annotations
+
+       --set-annotations=[KEY=VALUE,...]
+          List of key-value pairs to set as Annotations. All existing
+          Annotations will be removed first.
+
      --topics=[TOPICS,...]
         List of Pub/Sub topics to configure on the secret.
 

gcloud/secrets/update

@@ -6,6 +6,8 @@ SYNOPSIS
         [--update-labels=[KEY=VALUE,...]]
         [--add-topics=[ADD-TOPICS,...] | --clear-topics
           | --remove-topics=[REMOVE-TOPICS,...]]
+        [--clear-annotations | --remove-annotations=[KEY,...]
+          | --update-annotations=[KEY=VALUE,...]]
         [--clear-labels | --remove-labels=[KEY,...]]
         [--clear-version-aliases | --remove-version-aliases=[KEY,...]
           | --update-version-aliases=[KEY=VALUE,...]]
@@ -92,6 +94,19 @@ FLAGS
        --remove-topics=[REMOVE-TOPICS,...]
           List of Pub/Sub topics to remove from the secret.
 
+     Annotations
+
+     At most one of these can be specified:
+
+       --clear-annotations
+          Remove all Annotations.
+
+       --remove-annotations=[KEY,...]
+          List of Annotations to be removed.
+
+       --update-annotations=[KEY=VALUE,...]
+          List of key-value pairs to set as Annotations.
+
      At most one of these can be specified:
 
        --clear-labels

gcloud/secrets/versions/access

@@ -3,7 +3,7 @@ NAME
 
 SYNOPSIS
     gcloud secrets versions access (VERSION : --secret=SECRET)
-        [GCLOUD_WIDE_FLAG ...]
+        [--out-file=OUT-FILE-PATH] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Access the data for the specified secret version.
@@ -14,7 +14,14 @@ EXAMPLES
         $ gcloud secrets versions access 123 --secret=my-secret
 
     Note: The output will be formatted as UTF-8 which can corrupt binary
-    secrets. To get the raw bytes, have Google Cloud CLI print the response as
+    secrets.
+
+    To write raw bytes to a file use --out-file flag:
+
+        $ gcloud secrets versions access 123 --secret=my-secret \
+            --out-file=/tmp/secret
+
+    To get the raw bytes, have Google Cloud CLI print the response as
     base64-encoded and decode:
 
         $ gcloud secrets versions access 123 --secret=my-secret \
@@ -47,6 +54,10 @@ POSITIONAL ARGUMENTS
             specified name;
           ▸ provide the argument --secret on the command line.
 
+FLAGS
+     --out-file=OUT-FILE-PATH
+        File path to which secret data is written.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,