gcloud secrets versions add

NAME
gcloud secrets versions add - create a new version of an existing secret
SYNOPSIS
gcloud secrets versions addSECRET--data-file=PATH[--location=LOCATION][GCLOUD_WIDE_FLAG]
DESCRIPTION
Create a new version of an existing secret with the provided data. The commandwill return an error if no such secret exists.
EXAMPLES
Create a new version of an existing secret named 'my-secret' with secret data"s3cr3t":
printf"s3cr3t"|gcloudsecretsversionsaddmy-secret--data-file=-

Create a new version of an existing secret named 'my-secret' with secret data"s3cr3t" using PowerShell (Note: PowerShell will add a newline to the resultingsecret):

Write-Output"s3cr3t"|gcloudsecretsversionsaddmy-secret--data-file=-

Create a new version of an existing secret named 'my-secret' with secret datafrom a file:

gcloudsecretsversionsaddmy-secret--data-file=/tmp/secret
POSITIONAL ARGUMENTS
Secret resource - The secret to create. This represents a Cloud resource. (NOTE)Some attributes are not given arguments in this group but can be set in otherways.

To set theproject attribute:

  • provide the argumentSECRET on the command line with a fullyspecified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

SECRET
ID of the secret or fully qualified identifier for the secret.

To set thesecret attribute:

  • provide the argumentSECRET on the command line.
REQUIRED FLAGS
--data-file=PATH
File path from which to read secret data. Set this to "-" to read the secretdata from stdin.
OPTIONAL FLAGS
Location resource - The location to create secret version. This represents aCloud resource. (NOTE) Some attributes are not given arguments in this group butcan be set in other ways.

To set theproject attribute:

  • provide the argument--location on the command line with a fullyspecified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.
--location=LOCATION
ID of the location or fully qualified identifier for the location.

To set thelocation attribute:

  • provide the argument--location on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This variant is also available:
gcloudbetasecretsversionsadd

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-01-21 UTC.