{
  "slug": "kms-autokey-config-supports-project-level-operations-and-key-resolution-mode-e7b028e73826",
  "title": "KMS Autokey config supports project-level operations and key-resolution-mode",
  "tools": [
    "gcloud"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-05-19T00:00:00.000Z",
  "announced_at": "2026-05-19T00:00:00.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "To inspect a project Autokey configuration, run `gcloud beta kms autokey-config describe --project=<project-id>`. To update it, put the project resource name and desired `keyProjectResolutionMode` in a YAML config file, then run `gcloud beta kms autokey-config update <config-file> --project=<project-id>`.",
    "examples": [
      "gcloud beta kms autokey-config describe --project=<project-id>",
      "# <config-file>.yaml\nname: projects/<project-id>/autokeyConfig\nkeyProjectResolutionMode: RESOURCE_PROJECT\nkeyProject: ''\n\ngcloud beta kms autokey-config update <config-file>.yaml --project=<project-id>"
    ],
    "gotchas": [
      "Availability: beta",
      "--project=<project-id> (required): Project id for the configuration; describe requires exactly one of --project or --folder. It is also a gcloud-wide flag for update.",
      "<config-file> (required): File containing the AutokeyConfig resource to update.",
      "name (required): AutokeyConfig resource name, e.g. projects/<project-id>/autokeyConfig.",
      "keyProjectResolutionMode: Mode for resolving the key project. Allowed values: DEDICATED_KEY_PROJECT, RESOURCE_PROJECT, DISABLED. Docs do not state these values are mutually exclusive; they are enum alternatives.",
      "keyProject: Key project name. Empty value clears the configuration; guide's RESOURCE_PROJECT example leaves it empty."
    ]
  },
  "why_it_matters": "Describe or update a project-level Autokey configuration, including its key resolution mode.",
  "sources": [
    "https://docs.cloud.google.com/sdk/docs/release-notes#56900_2026-05-19",
    "https://docs.cloud.google.com/sdk/gcloud/reference/beta/kms/autokey-config/describe",
    "https://docs.cloud.google.com/kms/docs/enable-autokey",
    "https://docs.cloud.google.com/sdk/gcloud/reference/beta/kms/autokey-config/update",
    "https://docs.cloud.google.com/kms/docs/reference/rest/v1/AutokeyConfig"
  ],
  "rank": 0.95027,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v1+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "cloud-20261008",
    "verdict_id": "cloud-20261008:cloud-20261008-5e3724313706031f-4:gate",
    "evidence_hash": "22e7aff8649ce54d16ddd864155224367b36a98247649ab3dc9980ac6b22cebe"
  },
  "review": {
    "draft_hash": "feb0864170a46f6ee97307b24c4e93bbae28514f58e2dccfd576c2a084b263b5",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "cloud-20261008:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.95 >= 0.9; 2 needed) and Jev gave 0.63 (>= 0.6 needed)."
  }
}