gcloud-help/gcloud/certificate-manager/trust-configs/update

NAME
    gcloud certificate-manager trust-configs update - update TrustConfig

SYNOPSIS
    gcloud certificate-manager trust-configs update
        (TRUST_CONFIG : --location=LOCATION)
        [--add-allowlisted-certificates=[ADD_ALLOWLISTED_CERTIFICATES,...]]
        [--async] [--description=DESCRIPTION]
        [--trust-store=[intermediate-cas=INTERMEDIATE-CAS],
          [trust-anchors=TRUST-ANCHORS]] [--update-labels=[KEY=VALUE,...]]
        [--clear-allowlisted-certificates
          | --remove-allowlisted-certificates=[REMOVE_ALLOWLISTED_CERTIFICATES,
          ...]] [--clear-labels | --remove-labels=[KEY,...]]
        [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Update a TrustConfig.

EXAMPLES
    To update a TrustConfig, run:

        $ gcloud certificate-manager trust-configs update my-trust-config \
            --description="updated description" \
            --trust-store=trust-anchors=ta.pem,\
        intermediate-cas="ica1.pem;ica2.pem" \
            --update-labels=my-key1=my-updated-value1 \
            --remove-labels=my-key2

POSITIONAL ARGUMENTS
     TrustConfig resource - Name of the TrustConfig to update. The arguments in
     this group can be used to specify the attributes of this resource. (NOTE)
     Some attributes are not given arguments in this group but can be set in
     other ways.

     To set the project attribute:
      ◆ provide the argument trust_config on the command line with a fully
        specified name;
      ◆ provide the argument --project on the command line;
      ◆ set the property core/project.

     This must be specified.

       TRUST_CONFIG
          ID of the trustConfig or fully qualified identifier for the
          trustConfig.

          To set the trust_config attribute:
          ▸ provide the argument trust_config on the command line.

          This positional argument must be specified if any of the other
          arguments in this group are specified.

       --location=LOCATION
          Certificate Manager location.

          To set the location attribute:
          ▸ provide the argument trust_config on the command line with a
            fully specified name;
          ▸ provide the argument --location on the command line;
          ▸ default value of location is [global].

FLAGS
     --add-allowlisted-certificates=[ADD_ALLOWLISTED_CERTIFICATES,...]
        Add allowlisted PEM-encoded certificates. Certificates should be
        provided in files. For multiple file names, separate them by a comma
        (','). One file can contain multiple certificates.

        Examples:

            Single file: --add-allowlisted-certificates=ac.pem

            Multiple files: --add-allowlisted-certificates=ac1.pem,ac2.pem

     --async
        Return immediately, without waiting for the operation in progress to
        complete.

     --description=DESCRIPTION
        Human-readable description of the resource.

     --trust-store=[intermediate-cas=INTERMEDIATE-CAS],[trust-anchors=TRUST-ANCHORS]
        Trust Store with the given trust anchor and intermediate CA PEM-encoded
        certificates. Certificates should be provided in files. For multiple
        file names, separate them by a semicolon (';') and quote them ('"').
        One file can contain multiple certificates. Intermediate CAs are
        optional.

        Examples:

            Single files: --trust-store trust-anchors=ta.pem,intermediate-cas=ica.pem

            No intermediate CAs: --trust-store trust-anchors=ta.pem

            Multiple files: --trust-store trust-anchors="ta1.pem;ta2.pem",intermediate-cas="ica1.pem;ica2.pem"

     --update-labels=[KEY=VALUE,...]
        List of label KEY=VALUE pairs to update. If a label exists, its value
        is modified. Otherwise, a new label is created.

        Keys must start with a lowercase character and contain only hyphens
        (-), underscores (_), lowercase characters, and numbers. Values must
        contain only hyphens (-), underscores (_), lowercase characters, and
        numbers.

     At most one of these can be specified:

       --clear-allowlisted-certificates
          Clear all allowlisted certificates.

       --remove-allowlisted-certificates=[REMOVE_ALLOWLISTED_CERTIFICATES,...]
          Remove allowlisted PEM-encoded certificates. Certificates should be
          provided in files. For multiple file names, separate them by a comma
          (','). One file can contain multiple certificates.

          Examples:

              Single file: --remove-allowlisted-certificates=ac.pem

              Multiple files: --remove-allowlisted-certificates=ac1.pem,ac2.pem

     At most one of these can be specified:

       --clear-labels
          Remove all labels. If --update-labels is also specified then
          --clear-labels is applied first.

          For example, to remove all labels:

              $ gcloud certificate-manager trust-configs update --clear-labels

          To remove all existing labels and create two new labels, foo and baz:

              $ gcloud certificate-manager trust-configs update --clear-labels \
                --update-labels foo=bar,baz=qux

       --remove-labels=[KEY,...]
          List of label keys to remove. If a label does not exist it is
          silently ignored. If --update-labels is also specified then
          --update-labels is applied first.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

API REFERENCE
    This command uses the certificatemanager/v1 API. The full documentation for
    this API can be found at: https://cloud.google.com/certificate-manager

NOTES
    These variants are also available:

        $ gcloud alpha certificate-manager trust-configs update

        $ gcloud beta certificate-manager trust-configs update