gcloud: Wed Apr 20 08:58:18 UTC 2022

gcloud/access-approval/settings/update

@@ -3,6 +3,7 @@ NAME
 
 SYNOPSIS
     gcloud access-approval settings update
+        [--active_key_version=ACTIVE_KEY_VERSION]
         [--enrolled_services=ENROLLED_SERVICES]
         [--notification_emails=NOTIFICATION_EMAILS]
         [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT]
@@ -14,17 +15,17 @@ DESCRIPTION
     the notification emails without modifying the enrolled services).
 
 EXAMPLES
-    Update notification emails associated with project 'p1', run:
+    Update notification emails associated with project p1, run:
 
         $ gcloud access-approval settings update --project=p1 \
           --notification_emails='foo@example.com, bar@example.com'
 
-    Enable Access Approval enforcement for folder 'f1':
+    Enable Access Approval enforcement for folder f1:
 
         $ gcloud access-approval settings update --folder=f1 \
           --enrolled_services=all
 
-    Enable Access Approval enforcement for organization 'org1' for only Cloud
+    Enable Access Approval enforcement for organization org1 for only Cloud
     Storage and Compute products and set the notification emails at the same
     time:
 
@@ -32,7 +33,17 @@ EXAMPLES
           --enrolled_services='storage.googleapis.com,compute.googleapis.c\
         om' --notification_emails='security_team@example.com'
 
+    Update active key version for project p1:
+
+        $ gcloud access-approval settings update --project=p1 \
+          --active_key_version='projects/p1/locations/global/keyRings/sign\
+        ing-keys/cryptoKeys/signing-key/cryptoKeyVersions/1'
+
 FLAGS
+     --active_key_version=ACTIVE_KEY_VERSION
+        The asymmetric crypto key version to use for signing approval requests.
+        Use '' to remove the custom signing key.
+
      --enrolled_services=ENROLLED_SERVICES
         Comma-separated list of services to enroll for Access Approval or 'all'
         for all supported services. Note for project and folder enrollments,