gcloud: Wed Apr 20 08:58:18 UTC 2022

gcloud/beta/access-approval/settings/update

@@ -4,6 +4,7 @@ NAME
 
 SYNOPSIS
     gcloud beta access-approval settings update
+        [--active_key_version=ACTIVE_KEY_VERSION]
         [--enrolled_services=ENROLLED_SERVICES]
         [--notification_emails=NOTIFICATION_EMAILS]
         [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT]
@@ -16,17 +17,17 @@ DESCRIPTION
     services).
 
 EXAMPLES
-    Update notification emails associated with project 'p1', run:
+    Update notification emails associated with project p1, run:
 
         $ gcloud beta access-approval settings update --project=p1 \
           --notification_emails='foo@example.com, bar@example.com'
 
-    Enable Access Approval enforcement for folder 'f1':
+    Enable Access Approval enforcement for folder f1:
 
         $ gcloud beta access-approval settings update --folder=f1 \
           --enrolled_services=all
 
-    Enable Access Approval enforcement for organization 'org1' for only Cloud
+    Enable Access Approval enforcement for organization org1 for only Cloud
     Storage and Compute products and set the notification emails at the same
     time:
 
@@ -34,7 +35,17 @@ EXAMPLES
           --enrolled_services='storage.googleapis.com,compute.googleapis.c\
         om' --notification_emails='security_team@example.com'
 
+    Update active key version for project p1:
+
+        $ gcloud beta access-approval settings update --project=p1 \
+          --active_key_version='projects/p1/locations/global/keyRings/sign\
+        ing-keys/cryptoKeys/signing-key/cryptoKeyVersions/1'
+
 FLAGS
+     --active_key_version=ACTIVE_KEY_VERSION
+        The asymmetric crypto key version to use for signing approval requests.
+        Use '' to remove the custom signing key.
+
      --enrolled_services=ENROLLED_SERVICES
         Comma-separated list of services to enroll for Access Approval or 'all'
         for all supported services. Note for project and folder enrollments,