gcloud beta kms keys versions get-certificate-chain

NAME

gcloud beta kms keys versions get-certificate-chain - get a certificate chain for a given version

SYNOPSIS

gcloud beta kms keys versions get-certificate-chain VERSION [--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(BETA) Returns the PEM-format certificate chain for the specified key version. The optional flag output-file indicates the path to store the PEM. If not specified, the PEM will be printed to stdout.

EXAMPLES

The following command saves the Cavium certificate chain for CryptoKey frodo Version 2 to /tmp/my/cavium.pem:

gcloud beta kms keys versions get-certificate-chain 2 --key=frodo --keyring=fellowship --location=us-east1 --certificate-chain-type=cavium --output-file=/tmp/my/cavium.pem

POSITIONAL ARGUMENTS

VERSION

Name of the version from which to get the certificate chain.

FLAGS

--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"

Certificate chain to retrieve. CERTIFICATE_CHAIN_TYPE must be one of: all, cavium, google-card, google-partition.

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--output-file=OUTPUT_FILE

Path to the output file to store PEM.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in beta and might change without notice. These variants are also available:

gcloud kms keys versions get-certificate-chain

gcloud alpha kms keys versions get-certificate-chain