HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_certificate-manager_trust-configs_update.1
.TH "GCLOUD_CERTIFICATE\-MANAGER_TRUST\-CONFIGS_UPDATE" 1



.SH "NAME"
.HP
gcloud certificate\-manager trust\-configs update \- update TrustConfig



.SH "SYNOPSIS"
.HP
\f5gcloud certificate\-manager trust\-configs update\fR (\fITRUST_CONFIG\fR\ :\ \fB\-\-location\fR=\fILOCATION\fR) [\fB\-\-add\-allowlisted\-certificates\fR=[\fIADD_ALLOWLISTED_CERTIFICATES\fR,...]] [\fB\-\-async\fR] [\fB\-\-description\fR=\fIDESCRIPTION\fR] [\fB\-\-trust\-store\fR=[\fIintermediate\-cas\fR=\fIINTERMEDIATE\-CAS\fR],[\fItrust\-anchors\fR=\fITRUST\-ANCHORS\fR]] [\fB\-\-update\-labels\fR=[\fIKEY\fR=\fIVALUE\fR,...]] [\fB\-\-clear\-allowlisted\-certificates\fR\ |\ \fB\-\-remove\-allowlisted\-certificates\fR=[\fIREMOVE_ALLOWLISTED_CERTIFICATES\fR,...]] [\fB\-\-clear\-labels\fR\ |\ \fB\-\-remove\-labels\fR=[\fIKEY\fR,...]] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Update a TrustConfig.



.SH "EXAMPLES"

To update a TrustConfig, run:

.RS 2m
$ gcloud certificate\-manager trust\-configs update my\-trust\-config \e
    \-\-description="updated description" \e
    \-\-trust\-store=trust\-anchors=ta.pem,\e
intermediate\-cas="ica1.pem;ica2.pem" \e
    \-\-update\-labels=my\-key1=my\-updated\-value1 \e
    \-\-remove\-labels=my\-key2
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

TrustConfig resource \- Name of the TrustConfig to update. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5trust_config\fR on the command line with a fully
specified name;
.IP "\(em" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fITRUST_CONFIG\fR

ID of the trustConfig or fully qualified identifier for the trustConfig.

To set the \f5trust_config\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5trust_config\fR on the command line.
.RE
.sp

This positional argument must be specified if any of the other arguments in this
group are specified.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Certificate Manager location.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5trust_config\fR on the command line with a fully
specified name;
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line;
.IP "\(bu" 2m
default value of location is [global].
.RE
.sp


.RE
.RE
.sp

.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-add\-allowlisted\-certificates\fR=[\fIADD_ALLOWLISTED_CERTIFICATES\fR,...]

Add allowlisted PEM\-encoded certificates. Certificates should be provided in
files. For multiple file names, separate them by a comma (','). One file can
contain multiple certificates.

Examples:

.RS 2m
Single file: \-\-add\-allowlisted\-certificates=ac.pem
.RE

.RS 2m
Multiple files: \-\-add\-allowlisted\-certificates=ac1.pem,ac2.pem
.RE

.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.

.TP 2m
\fB\-\-description\fR=\fIDESCRIPTION\fR

Human\-readable description of the resource.

.TP 2m
\fB\-\-trust\-store\fR=[\fIintermediate\-cas\fR=\fIINTERMEDIATE\-CAS\fR],[\fItrust\-anchors\fR=\fITRUST\-ANCHORS\fR]

Trust Store with the given trust anchor and intermediate CA PEM\-encoded
certificates. Certificates should be provided in files. For multiple file names,
separate them by a semicolon (';') and quote them ('"'). One file can contain
multiple certificates. Intermediate CAs are optional.

Examples:

.RS 2m
Single files: \-\-trust\-store trust\-anchors=ta.pem,intermediate\-cas=ica.pem
.RE

.RS 2m
No intermediate CAs: \-\-trust\-store trust\-anchors=ta.pem
.RE

.RS 2m
Multiple files: \-\-trust\-store trust\-anchors="ta1.pem;ta2.pem",intermediate\-cas="ica1.pem;ica2.pem"
.RE

.TP 2m
\fB\-\-update\-labels\fR=[\fIKEY\fR=\fIVALUE\fR,...]

List of label KEY=VALUE pairs to update. If a label exists, its value is
modified. Otherwise, a new label is created.

Keys must start with a lowercase character and contain only hyphens (\f5\-\fR),
underscores (\f5_\fR), lowercase characters, and numbers. Values must contain
only hyphens (\f5\-\fR), underscores (\f5_\fR), lowercase characters, and
numbers.

.TP 2m

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-clear\-allowlisted\-certificates\fR

Clear all allowlisted certificates.

.TP 2m
\fB\-\-remove\-allowlisted\-certificates\fR=[\fIREMOVE_ALLOWLISTED_CERTIFICATES\fR,...]

Remove allowlisted PEM\-encoded certificates. Certificates should be provided in
files. For multiple file names, separate them by a comma (','). One file can
contain multiple certificates.

Examples:

.RS 2m
Single file: \-\-remove\-allowlisted\-certificates=ac.pem
.RE

.RS 2m
Multiple files: \-\-remove\-allowlisted\-certificates=ac1.pem,ac2.pem
.RE

.RE
.sp
.TP 2m

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-clear\-labels\fR

Remove all labels. If \f5\-\-update\-labels\fR is also specified then
\f5\-\-clear\-labels\fR is applied first.

For example, to remove all labels:

.RS 2m
$ gcloud certificate\-manager trust\-configs update \-\-clear\-labels
.RE

To remove all existing labels and create two new labels, \f5\fIfoo\fR\fR and
\f5\fIbaz\fR\fR:

.RS 2m
$ gcloud certificate\-manager trust\-configs update \-\-clear\-labels \e
  \-\-update\-labels foo=bar,baz=qux
.RE

.TP 2m
\fB\-\-remove\-labels\fR=[\fIKEY\fR,...]

List of label keys to remove. If a label does not exist it is silently ignored.
If \f5\-\-update\-labels\fR is also specified then \f5\-\-update\-labels\fR is
applied first.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "API REFERENCE"

This command uses the \fBcertificatemanager/v1\fR API. The full documentation
for this API can be found at: https://cloud.google.com/certificate\-manager



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha certificate\-manager trust\-configs update
.RE

.RS 2m
$ gcloud beta certificate\-manager trust\-configs update
.RE