NAME gcloud alpha tasks cmek-config update - enable, disable, or edit CMEK configuration for Cloud Tasks in the specified location SYNOPSIS gcloud alpha tasks cmek-config update [--location=LOCATION] [--clear-kms-key | [--kms-key-name=KMS_KEY_NAME : --kms-keyring=KMS_KEYRING --kms-project=KMS_PROJECT]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Enable, disable, or edit CMEK configuration for Cloud Tasks in the specified location. EXAMPLES To update a CMEK config: $ gcloud alpha tasks cmek-config update \ --kms-key-name=projects/my-project/locations/my-location/\ keyRings/my-keyring/cryptoKeys/key FLAGS --location=LOCATION Google Cloud location for the KMS key. Flags for Clearing or Updating CMEK Resource At most one of these can be specified: Flags for clearing CMEK Resource key. --clear-kms-key Disables CMEK for Cloud Tasks in the specified location by clearing the Cloud KMS cryptokey from the Cloud Tasks project and CMEK configuration. Flags for Updating CMEK Resource key --kms-key-name=KMS_KEY_NAME Fully qualified identifier for the key or just the key ID. The latter requires that the --kms-keyring and --kms-project flags be provided too. This flag argument must be specified if any of the other arguments in this group are specified. --kms-keyring=KMS_KEYRING KMS keyring of the KMS key. --kms-project=KMS_PROJECT Google Cloud project for the KMS key. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity. Run $ gcloud help for details. NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available: $ gcloud tasks cmek-config update $ gcloud beta tasks cmek-config update