1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 14:56:05 +00:00

gcloud: Wed Aug 14 09:38:18 UTC 2024

This commit is contained in:
Automated 2024-08-14 09:38:18 +00:00
parent 7fe34c472b
commit d35819d273
105 changed files with 5241 additions and 346 deletions

View file

@ -56,22 +56,22 @@ OPTIONAL FLAGS
The encryption configuration of the restored database. If not specified,
the same encryption settings as the backup will be used.
To restore to a CMEK-enabled database:
To restore to a CMEK-enabled database:
$ gcloud alpha firestore databases restore \
--encryption-type=customer-managed-encryption \
--kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\
--encryption-type=customer-managed-encryption \
--kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\
keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID
To restore to a Google-default-encrypted database:
To restore to a Google-default-encrypted database:
$ gcloud alpha firestore databases restore \
--encryption-type=google-default-encryption
--encryption-type=google-default-encryption
To restore to a database using the same encryption settings as the backup:
To restore to a database using the same encryption settings as the backup:
$ gcloud alpha firestore databases restore \
--encryption-type=backup-encryption
--encryption-type=backup-encryption
--encryption-type=ENCRYPTION_TYPE
The encryption type of the destination database. ENCRYPTION_TYPE must
@ -86,13 +86,16 @@ OPTIONAL FLAGS
be a Customer-Managed Encryption Key (CMEK) database encrypted with
this key. This feature is allowlist only in initial launch.
Only a key in the same location as this database is allowed to be used for encryption.
For Firestore's nam5 multi-region, this corresponds to Cloud KMS location us.
For Firestore's eur3 multi-region, this corresponds to Cloud KMS location europe.
See https://cloud.google.com/kms/docs/locations.
Only a key in the same location as this database is allowed to be
used for encryption. For Firestore's nam5 multi-region, this
corresponds to Cloud KMS location us. For Firestore's eur3
multi-region, this corresponds to Cloud KMS location europe. See
https://cloud.google.com/kms/docs/locations.
This value should be the KMS key resource ID in the format of `projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
How to retrieve this resource ID is listed at https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version.
This value should be the KMS key resource ID in the format of
projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}.
How to retrieve this resource ID is listed at
https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version.
This flag must only be specified when encryption-type is
customer-managed-encryption.