gcloud alpha kms keys versions export-trusted-key-wrapped

NAME

gcloud alpha kms keys versions export-trusted-key-wrapped - export a trusted key wrapped CryptoKeyVersion

SYNOPSIS

gcloud alpha kms keys versions export-trusted-key-wrapped VERSION --wrapping-key-version=WRAPPING_KEY_VERSION [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--wrapped-key-file=WRAPPED_KEY_FILE] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) Exports a trusted key wrapped version.

EXAMPLES

The following command exports the trusted key wrapped version 1 of the key frodo wrapped by the key version 1 of samwise:

gcloud alpha kms keys versions export-trusted-key-wrapped 1 --key=frodo --keyring=fellowship --location=us-east1 --wrapping-key-version=projects/my-project/locations/us-east1/keyRings/fellowship/cryptoKeys/samwise/cryptoKeyVersions/1 --wrapped-key-file=/tmp/my/public_key.file

POSITIONAL ARGUMENTS

VERSION

Name of the version to export.

REQUIRED FLAGS

--wrapping-key-version=WRAPPING_KEY_VERSION

The resource name of the CryptoKeyVersion to use as a wrapping key.

OPTIONAL FLAGS

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--wrapped-key-file=WRAPPED_KEY_FILE

Path to the RSA/RSA+AES wrapped key file to store the wrapped key material.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:

gcloud kms keys versions export-trusted-key-wrapped

gcloud beta kms keys versions export-trusted-key-wrapped