1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-08 18:45:13 +00:00
gcloud-help/gcloud/alpha/sql/export/tde
2025-02-26 10:38:18 +00:00

94 lines
3.5 KiB
Text

NAME
gcloud alpha sql export tde - export a TDE certificate from a Cloud SQL for
SQL Server instance
SYNOPSIS
gcloud alpha sql export tde INSTANCE
(--cert-path=CERT_PATH --certificate=CERTIFICATE
--pvk-path=PVK_PATH (--prompt-for-pvk-password
| --pvk-password=PVK_PASSWORD)) [--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Exports a TDE certificate from a Cloud SQL instance to a Google
Cloud Storage bucket. This is only supported for SQL Server.
EXAMPLES
To export a TDE certificate with the name foo and private key password
my-pvk-password in the Cloud SQL instance my-instance to certificate path
my-bucket/my-cert.cert and private key path my-bucket/my-key.pvk, run:
$ gcloud alpha sql export tde my-instance --certificate=foo \
--cert-path=gs://my-bucket/my-cert.cert \
--pvk-path=gs://my-bucket/my-key.pvk \
--pvk-password=my-pvk-password
To export a TDE certificate with the name foo and private key password
my-pvk-password in the Cloud SQL instance my-instance and prompting for the
private key password, run:
$ gcloud alpha sql export tde my-instance --certificate=foo \
--cert-path=gs://my-bucket/my-cert.cert \
--pvk-path=gs://my-bucket/my-key.pvk --prompt-for-pvk-password
POSITIONAL ARGUMENTS
INSTANCE
Cloud SQL instance ID.
REQUIRED FLAGS
Encryption info to support importing a TDE certificate file
This must be specified.
--cert-path=CERT_PATH
Path to the encryption certificate file in Google Cloud Storage. The
URI is in the form gs://bucketName/fileName.
This flag argument must be specified if any of the other arguments in
this group are specified.
--certificate=CERTIFICATE
Name of the encryption certificate.
This flag argument must be specified if any of the other arguments in
this group are specified.
--pvk-path=PVK_PATH
Path to the encryption private key file in Google Cloud Storage. The
URI is in the form gs://bucketName/fileName.
This flag argument must be specified if any of the other arguments in
this group are specified.
Exactly one of these must be specified:
--prompt-for-pvk-password
Prompt for the private key password associated with the certificate
file with character echo disabled. The password is all typed
characters up to but not including the RETURN or ENTER key.
--pvk-password=PVK_PASSWORD
The private key password associated with the certificate file.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. These variants are also available:
$ gcloud sql export tde
$ gcloud beta sql export tde