.TH "GCLOUD_ALPHA_KMS_KEYS_VERSIONS_CREATE" 1



.SH "NAME"
.HP
gcloud alpha kms keys versions create \- create a new version



.SH "SYNOPSIS"
.HP
\f5gcloud alpha kms keys versions create\fR [\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR] [\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR] [\fB\-\-key\fR=\fIKEY\fR] [\fB\-\-keyring\fR=\fIKEYRING\fR] [\fB\-\-location\fR=\fILOCATION\fR] [\fB\-\-primary\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR Creates a new version within the given key.



.SH "EXAMPLES"

The following command creates a new version within the \f5frodo\fR key,
\f5fellowship\fR keyring, and \f5global\fR location and sets it as the primary
version:

.RS 2m
$ gcloud alpha kms keys versions create \-\-location=global \e
    \-\-keyring=fellowship \-\-key=frodo \-\-primary
.RE

The following command creates a new version within the \f5legolas\fR key,
\f5fellowship\fR keyring, \f5us\-central1\fR location,
\f5https://example.kms/v0/some/key/path\fR as the address for its external key,
and sets it as the key's primary version:

.RS 2m
$ gcloud alpha kms keys versions create \-\-location=us\-central1 \e
    \-\-keyring=fellowship \-\-key=legolas \e
    \-\-external\-key\-uri=https://example.kms/v0/some/key/path \e
    \-\-primary
.RE

The following command creates a new version within the \f5bilbo\fR key,
\f5fellowship\fR keyring, \f5us\-central1\fR location, \f5v0/some/key/path\fR as
the ekm connection key path for its external key, and sets it as the key's
primary version:

.RS 2m
$ gcloud alpha kms keys versions create \-\-location=us\-central1 \e
    \-\-keyring=fellowship \-\-key=bilbo \e
    \-\-ekm\-connection\-key\-path=v0/some/key/path \-\-primary
.RE



.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR

The path to the external key material on the EKM for keys with protection level
"external\-vpc".

.TP 2m
\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR

The URI of the external key for keys with protection level "external".

.TP 2m
\fB\-\-key\fR=\fIKEY\fR

The containing key.

.TP 2m
\fB\-\-keyring\fR=\fIKEYRING\fR

Key ring of the key.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Location of the keyring.

.TP 2m
\fB\-\-primary\fR

If specified, immediately makes the new version primary. This should only be
used with the \f5encryption\fR purpose.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud kms keys versions create
.RE

.RS 2m
$ gcloud beta kms keys versions create
.RE