gcloud alpha sql import tde

NAME: gcloud alpha sql import tde - import TDE certificate into a Cloud SQL for SQL Server instance
SYNOPSIS: gcloud alpha sql import tde INSTANCE (--cert-path=CERT_PATH --certificate=CERTIFICATE --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)) [--async] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: (ALPHA) gcloud alpha sql import tde imports a TDE certificate into a Cloud SQL instance from a certificate file in Google Cloud Storage.
For detailed help on importing data into Cloud SQL, refer to this guide: https://cloud.google.com/sql/docs/sqlserver/import-export/importing
EXAMPLES: To import a TDE certificate with the name foo and certificate path my-bucket/my-cert.cert and private key path my-bucket/my-key.pvk and pvk password my-pvk-password into the Cloud SQL instance my-instance, run:
gcloud alpha sql import tde my-instance --certificate=foo --cert-path=gs://my-bucket/my-cert.cert --pvk-path=gs://my-bucket/my-key.pvk --pvk-password=my-pvk-password

To import a TDE certificate with the name foo and certificate path my-bucket/my-cert.cert and private key path my-bucket/my-key.pvk into the Cloud SQL instance my-instance and prompting for the private key password, run:
gcloud alpha sql import tde my-instance --certificate=foo --cert-path=gs://my-bucket/my-cert.cert --pvk-path=gs://my-bucket/my-key.pvk --prompt-for-pvk-password
POSITIONAL ARGUMENTS: INSTANCE

Cloud SQL instance ID.
REQUIRED FLAGS: Encryption info to support importing a TDE certificate file
This must be specified.

--cert-path=CERT_PATH

Path to the encryption certificate file in Google Cloud Storage. The URI is in the form gs://bucketName/fileName.
This flag argument must be specified if any of the other arguments in this group are specified.

--certificate=CERTIFICATE

Name of the encryption certificate.
This flag argument must be specified if any of the other arguments in this group are specified.

--pvk-path=PVK_PATH

Path to the encryption private key file in Google Cloud Storage. The URI is in the form gs://bucketName/fileName.
This flag argument must be specified if any of the other arguments in this group are specified.

Exactly one of these must be specified:

--prompt-for-pvk-password

Prompt for the private key password associated with the certificate file with character echo disabled. The password is all typed characters up to but not including the RETURN or ENTER key.

--pvk-password=PVK_PASSWORD

The private key password associated with the certificate file.
OPTIONAL FLAGS: --async

Return immediately, without waiting for the operation in progress to complete.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES: This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
gcloud sql import tde

gcloud beta sql import tde