gcloud beta kms keys versions create

gcloud beta kms keys versions create - create a new version

gcloud beta kms keys versions create [--ekm-connection-key-path=EKM_CONNECTION_KEY_PATH] [--external-key-uri=EXTERNAL_KEY_URI] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--primary] [GCLOUD_WIDE_FLAG …]

gcloud beta kms keys versions create --location=global --keyring=fellowship --key=frodo --primary

The following command creates a new version within the legolas key, fellowship keyring, us-central1 location, https://example.kms/v0/some/key/path as the address for its external key, and sets it as the key's primary version:

gcloud beta kms keys versions create --location=us-central1 --keyring=fellowship --key=legolas --external-key-uri=https://example.kms/v0/some/key/path --primary

The following command creates a new version within the bilbo key, fellowship keyring, us-central1 location, v0/some/key/path as the ekm connection key path for its external key, and sets it as the key's primary version:

gcloud beta kms keys versions create --location=us-central1 --keyring=fellowship --key=bilbo --ekm-connection-key-path=v0/some/key/path --primary

--ekm-connection-key-path=EKM_CONNECTION_KEY_PATH

The path to the external key material on the EKM for keys with protection level "external-vpc".

--external-key-uri=EXTERNAL_KEY_URI

The URI of the external key for keys with protection level "external".

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--primary

If specified, immediately makes the new version primary. This should only be used with the encryption purpose.

Run $ gcloud help for details.