yc kms
Manage Key Management Service resources (compatible command tree)
Command tree v0 is the default. Run yc kms <command> or yc kms v0 <command>.
Command Usage
Syntax:
yc kms <group>
Command Tree
-
yc kms v0 — Manage Key Management Service resources (compatible command tree)
-
yc kms asymmetric-encryption-crypto — Perform asymmetric encryption crypto operations
-
yc kms asymmetric-encryption-crypto decrypt — Decrypt data with specified asymmetric encryption key
-
yc kms asymmetric-encryption-crypto get-public-key — Get public key
-
-
yc kms asymmetric-encryption-key — Manage asymmetric encryption keys
-
yc kms asymmetric-encryption-key add-access-binding — Add access binding for the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key create — Create asymmetric encryption key
-
yc kms asymmetric-encryption-key delete — Delete the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key get — Show information about the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key list — List asymmetric encryption keys of the specified folder
-
yc kms asymmetric-encryption-key list-access-bindings — List access bindings for the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key list-operations — List operations for the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key remove-access-binding — Remove access binding for the specified asymmetric encryption key
-
yc kms asymmetric-encryption-key set-access-bindings — Set access bindings for the specified asymmetric encryption key and delete all existing access bindings if there were any
-
yc kms asymmetric-encryption-key update — Update the specified asymmetric encryption key
-
-
yc kms asymmetric-signature-crypto — Perform asymmetric signature crypto operations
-
yc kms asymmetric-signature-crypto get-public-key — Get public key
-
yc kms asymmetric-signature-crypto sign — Sign data with specified asymmetric signature key
-
yc kms asymmetric-signature-crypto sign-hash — Sign hash value with specified asymmetric signature key
-
-
yc kms asymmetric-signature-key — Manage asymmetric signature keys
-
yc kms asymmetric-signature-key add-access-binding — Add access binding for the specified asymmetric signature key
-
yc kms asymmetric-signature-key create — Create asymmetric signature key
-
yc kms asymmetric-signature-key delete — Delete the specified asymmetric signature key
-
yc kms asymmetric-signature-key get — Show information about the specified asymmetric signature key
-
yc kms asymmetric-signature-key list — List asymmetric signature keys of the specified folder
-
yc kms asymmetric-signature-key list-access-bindings — List access bindings for the specified asymmetric signature key
-
yc kms asymmetric-signature-key list-operations — List operations for the specified asymmetric signature key
-
yc kms asymmetric-signature-key remove-access-binding — Remove access binding for the specified asymmetric signature key
-
yc kms asymmetric-signature-key set-access-bindings — Set access bindings for the specified asymmetric signature key and delete all existing access bindings if there were any
-
yc kms asymmetric-signature-key update — Update the specified asymmetric signature key
-
-
yc kms symmetric-crypto — Perform symmetric crypto operations
-
yc kms symmetric-crypto decrypt — Decrypt data with specified symmetric key
-
yc kms symmetric-crypto encrypt — Encrypt data with specified symmetric key
-
yc kms symmetric-crypto generate-data-key — Generate data key and encrypt it with specified symmetric key
-
yc kms symmetric-crypto re-encrypt — Re-encrypt a ciphertext with the specified symmetric key
-
-
yc kms symmetric-key — Manage symmetric keys
-
yc kms symmetric-key add-access-binding — Add access binding for the specified symmetric key
-
yc kms symmetric-key cancel-version-destruction — Cancel destruction of the scheduled for destruction symmetric key version
-
yc kms symmetric-key create — Create symmetric key
-
yc kms symmetric-key delete — Delete the specified symmetric key
-
yc kms symmetric-key get — Show information about the specified symmetric key
-
yc kms symmetric-key list — List symmetric keys of the specified folder
-
yc kms symmetric-key list-access-bindings — List access bindings for the specified symmetric key
-
yc kms symmetric-key list-operations — List operations for the specified symmetric key
-
yc kms symmetric-key list-versions — List versions of the specified symmetric key
-
yc kms symmetric-key remove-access-binding — Remove access binding for the specified symmetric key
-
yc kms symmetric-key rotate — Rotate the specified symmetric key: creates a new key version and makes it the primary version
-
yc kms symmetric-key schedule-version-destruction — Schedule destruction of the specified symmetric key version
-
yc kms symmetric-key set-access-bindings — Set access bindings for the specified symmetric key and delete all existing access bindings if there were any
-
yc kms symmetric-key set-primary-version — Set primary version of the specified symmetric key
-
yc kms symmetric-key update — Update the specified symmetric key
-
Global Flags
|
Flag |
Description |
|
|
Set the custom profile. |
|
|
Set the region. |
|
|
Set the ID of the cloud to use. |
|
|
Set the ID of the folder to use. |
|
|
Set the name of the folder to use (will be resolved to id). |
|
|
Debug logging. |
|
|
Debug gRPC logging. Very verbose, used for debugging connection problems. |
|
|
Disable printing user intended output to stderr. |
|
|
Set the custom pager. |
|
|
Do not pipe help output through a pager. |
|
|
Set the output format: text (default), yaml, json, json-rest. |
|
|
Enable gRPC retries. By default, retries are enabled with maximum 5 attempts. |
|
|
Set the timeout. |
|
|
Set the OAuth token to use. |
|
|
Query to select values from the response using jq syntax |
|
|
Set the Cloud API endpoint (host:port). |
|
|
Set the ID of the service account to impersonate. |
|
|
Disable opening browser for authentication. |
|
|
Query to select values from the response using jq syntax |
|
|
Print operation metadata along with result. |
|
|
Choose syntax option. |
|
|
Enable interactive auto-prompt mode. Values: on, partial, off. Bare --cli-auto-prompt is equivalent to --cli-auto-prompt=on. |
|
|
Disable interactive auto-prompt mode (overrides --cli-auto-prompt, env and profile). |
|
|
Display help for the command. |