gcloud beta secrets versions access - access a secret version's data

gcloud beta secrets versions access(VERSION :--secret=SECRET)[--location=LOCATION][--out-file=OUT-FILE-PATH][GCLOUD_WIDE_FLAG …]

gcloudbetasecretsversionsaccess123--secret=my-secret

Note: The output will be formatted as UTF-8 which can corrupt binary secrets.

To write raw bytes to a file use --out-file flag:

gcloudbetasecretsversionsaccess123--secret=my-secret--out-file=/tmp/secret

To get the raw bytes, have Google Cloud CLI print the response as base64-encodedand decode:

gcloudbetasecretsversionsaccess123--secret=my-secret--format='get(payload.data)'|tr'_-''/+'|base64-d

Version resource - Numeric secret version to access or a configured alias(including 'latest' to use the latest version). The arguments in this group canbe used to specify the attributes of this resource. (NOTE) Some attributes arenot given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentVERSION on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

VERSION

ID of the version or fully qualified identifier for the version.

To set theversion attribute:

• provide the argumentVERSION on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--secret=SECRET

The secret of the version.

To set thesecret attribute:

• provide the argumentVERSION on the command line with a fullyspecified name;
• provide the argument--secret on the command line.

Location resource - The location to access secret. This represents a Cloudresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.

To set theproject attribute:

• provide the argument--location on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

--location=LOCATION

ID of the location or fully qualified identifier for the location.

To set thelocation attribute:

• provide the argument--location on the command line.

--out-file=OUT-FILE-PATH

File path to which secret data is written. If this flag is not provided secretdata will be written to stdout in UTF-8 format.

Run$gcloud help for details.