gcloud: Wed Feb 26 10:38:18 UTC 2025

gcloud/sql/import/bak

@@ -4,9 +4,9 @@ NAME
 
 SYNOPSIS
     gcloud sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE
-        [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery]
-        [--recovery-only] [--stop-at=STOP_AT] [--stop-at-mark=STOP_AT_MARK]
-        [--[no-]striped]
+        [--async] [--bak-type=BAK_TYPE; default="FULL"] [--keep-encrypted]
+        [--no-recovery] [--recovery-only] [--stop-at=STOP_AT]
+        [--stop-at-mark=STOP_AT_MARK] [--[no-]striped]
         [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password
           | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...]
 
@@ -55,6 +55,9 @@ OPTIONAL FLAGS
         Type of bak file that will be imported. Applicable to SQL Server only.
         BAK_TYPE must be one of: FULL, DIFF, TLOG.
 
+     --keep-encrypted
+        Whether or not to decrypt the imported encrypted BAK file.
+
      --no-recovery
         Whether or not the SQL Server import is execueted with NORECOVERY
         keyword.

gcloud/sql/import/help

@@ -24,6 +24,9 @@ COMMANDS
      sql
         Imports data into a Cloud SQL instance from a SQL dump file.
 
+     tde
+        Import TDE certificate into a Cloud SQL for SQL Server instance.
+
 NOTES
     These variants are also available:
 

gcloud/sql/import/tde

@@ -0,0 +1,95 @@
+NAME
+    gcloud sql import tde - import TDE certificate into a Cloud SQL for SQL
+        Server instance
+
+SYNOPSIS
+    gcloud sql import tde INSTANCE
+        (--cert-path=CERT_PATH --certificate=CERTIFICATE
+          --pvk-path=PVK_PATH (--prompt-for-pvk-password
+          | --pvk-password=PVK_PASSWORD)) [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    gcloud sql import tde imports a TDE certificate into a Cloud SQL instance
+    from a certificate file in Google Cloud Storage.
+
+    For detailed help on importing data into Cloud SQL, refer to this guide:
+    https://cloud.google.com/sql/docs/sqlserver/import-export/importing
+
+EXAMPLES
+    To import a TDE certificate with the name foo and certificate path
+    my-bucket/my-cert.cert and private key path my-bucket/my-key.pvk and pvk
+    password my-pvk-password into the Cloud SQL instance my-instance, run:
+
+        $ gcloud sql import tde my-instance --certificate=foo \
+            --cert-path=gs://my-bucket/my-cert.cert \
+            --pvk-path=gs://my-bucket/my-key.pvk \
+            --pvk-password=my-pvk-password
+
+    To import a TDE certificate with the name foo and certificate path
+    my-bucket/my-cert.cert and private key path my-bucket/my-key.pvk into the
+    Cloud SQL instance my-instance and prompting for the private key password,
+    run:
+
+        $ gcloud sql import tde my-instance --certificate=foo \
+            --cert-path=gs://my-bucket/my-cert.cert \
+            --pvk-path=gs://my-bucket/my-key.pvk --prompt-for-pvk-password
+
+POSITIONAL ARGUMENTS
+     INSTANCE
+        Cloud SQL instance ID.
+
+REQUIRED FLAGS
+     Encryption info to support importing a TDE certificate file
+
+     This must be specified.
+
+       --cert-path=CERT_PATH
+          Path to the encryption certificate file in Google Cloud Storage. The
+          URI is in the form gs://bucketName/fileName.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --certificate=CERTIFICATE
+          Name of the encryption certificate.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --pvk-path=PVK_PATH
+          Path to the encryption private key file in Google Cloud Storage. The
+          URI is in the form gs://bucketName/fileName.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       Exactly one of these must be specified:
+
+         --prompt-for-pvk-password
+            Prompt for the private key password associated with the certificate
+            file with character echo disabled. The password is all typed
+            characters up to but not including the RETURN or ENTER key.
+
+         --pvk-password=PVK_PASSWORD
+            The private key password associated with the certificate file.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha sql import tde
+
+        $ gcloud beta sql import tde
+