NAME
    gcloud sql instances patch - updates the settings of a Cloud SQL instance

SYNOPSIS
    gcloud sql instances patch INSTANCE [--activation-policy=ACTIVATION_POLICY]
        [--active-directory-dns-servers=[DNS_SERVER_IP_ADDRESS,...]]
        [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN]
        [--active-directory-mode=ACTIVE_DIRECTORY_MODE]
        [--active-directory-organizational-unit=ACTIVE_DIRECTORY_ORGANIZATIONAL_UNIT]
        [--active-directory-secret-manager-key=ACTIVE_DIRECTORY_SECRET_MANAGER_KEY]
        [--[no-]assign-ip] [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH]
        [--audit-retention-interval=AUDIT_RETENTION_INTERVAL]
        [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL]
        [--availability-type=AVAILABILITY_TYPE] [--clear-active-directory]
        [--clear-active-directory-dns-servers] [--clear-entra-id-config]
        [--clear-failover-dr-replica-name] [--clear-password-policy]
        [--connector-enforcement=CONNECTOR_ENFORCEMENT] [--cpu=CPU]
        [--data-api-access=DATA_API_ACCESS]
        [--database-version=DATABASE_VERSION] [--[no-]deletion-protection]
        [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE]
        [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE]
        [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] [--diff]
        [--edition=EDITION] [--enable-auto-upgrade-minor-version]
        [--[no-]enable-bin-log] [--[no-]enable-connection-pooling]
        [--[no-]enable-data-cache] [--[no-]enable-database-replication]
        [--[no-]enable-dataplex-integration]
        [--[no-]enable-google-ml-integration]
        [--[no-]enable-google-private-path] [--enable-password-policy]
        [--[no-]enable-point-in-time-recovery]
        [--[no-]enable-private-service-connect]
        [--enforce-new-sql-network-architecture]
        [--failover-dr-replica-name=FAILOVER_DR_REPLICA_NAME]
        [--[no-]final-backup]
        [--final-backup-retention-days=FINAL_BACKUP_RETENTION_DAYS]
        [--follow-gae-app=FOLLOW_GAE_APP]
        [--[no-]include-replicas-for-major-version-upgrade]
        [--[no-]insights-config-enhanced-query-insights-enabled]
        [--[no-]insights-config-query-insights-enabled]
        [--insights-config-query-plans-per-minute=INSIGHTS_CONFIG_QUERY_PLANS_PER_MINUTE]
        [--insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH]
        [--[no-]insights-config-record-application-tags]
        [--[no-]insights-config-record-client-address]
        [--instance-type=INSTANCE_TYPE]
        [--maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL]
        [--maintenance-version=MAINTENANCE_VERSION] [--maintenance-window-any]
        [--maintenance-window-day=MAINTENANCE_WINDOW_DAY]
        [--maintenance-window-hour=MAINTENANCE_WINDOW_HOUR] [--memory=MEMORY]
        [--network=NETWORK] [--node-count=NODE_COUNT]
        [--password-policy-complexity=PASSWORD_POLICY_COMPLEXITY]
        [--[no-]password-policy-disallow-username-substring]
        [--password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH]
        [--password-policy-password-change-interval=PASSWORD_POLICY_PASSWORD_CHANGE_INTERVAL]
        [--password-policy-reuse-interval=PASSWORD_POLICY_REUSE_INTERVAL]
        [--performance-capture-config=KEY=VALUE,[KEY=VALUE,...]]
        [--pricing-plan=PRICING_PLAN, -p PRICING_PLAN]
        [--reconcile-psa-networking]
        [--[no-]recreate-replicas-on-primary-crash]
        [--remove-deny-maintenance-period] [--replication=REPLICATION]
        [--[no-]require-ssl] [--[no-]retain-backups-on-delete]
        [--server-ca-mode=SERVER_CA_MODE] [--server-ca-pool=SERVER_CA_POOL]
        [--server-certificate-rotation-mode=SERVER_CERTIFICATE_ROTATION_MODE]
        [--simulate-maintenance-event] [--ssl-mode=SSL_MODE]
        [--[no-]storage-auto-increase]
        [--storage-provisioned-iops=STORAGE_PROVISIONED_IOPS]
        [--storage-provisioned-throughput=STORAGE_PROVISIONED_THROUGHPUT]
        [--storage-size=STORAGE_SIZE] [--storage-type=STORAGE_TYPE]
        [--switch-transaction-logs-to-cloud-storage]
        [--threads-per-core=THREADS_PER_CORE] [--tier=TIER, -t TIER]
        [--time-zone=TIME_ZONE] [--upgrade-sql-network-architecture]
        [--allowed-psc-projects=PROJECT,[PROJECT,...]
          | --clear-allowed-psc-projects]
        [--authorized-gae-apps=APP,[APP,...] | --clear-gae-apps]
        [--authorized-networks=NETWORK,[NETWORK,...]
          | --clear-authorized-networks]
        [--clear-connection-pool-flags
          | --connection-pool-flags=FLAG=VALUE,[FLAG=VALUE,...]]
        [--clear-custom-subject-alternative-names
          | --custom-subject-alternative-names=DNS,[DNS,[DNS]]]
        [--clear-database-flags | --database-flags=FLAG=VALUE,[FLAG=VALUE,...]]
        [--clear-psc-auto-connections
          | --psc-auto-connections=[network=NETWORK],[project=PROJECT]]
        [--clear-psc-network-attachment-uri
          | --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI]
        [--entra-id-application-id=ENTRA_ID_APPLICATION_ID
          --entra-id-tenant-id=ENTRA_ID_TENANT_ID]
        [--gce-zone=GCE_ZONE | --secondary-zone=SECONDARY_ZONE --zone=ZONE]
        [--[no-]auto-scale-disable-scale-in --[no-]auto-scale-enabled
          --auto-scale-in-cooldown-seconds=AUTO_SCALE_IN_COOLDOWN_SECONDS
          --auto-scale-max-node-count=AUTO_SCALE_MAX_NODE_COUNT
          --auto-scale-min-node-count=AUTO_SCALE_MIN_NODE_COUNT
          --auto-scale-out-cooldown-seconds=AUTO_SCALE_OUT_COOLDOWN_SECONDS
          --auto-scale-target-metrics=[METRIC=VALUE,...]]
        [--no-backup | --backup-location=BACKUP_LOCATION
          --backup-start-time=BACKUP_START_TIME
          --retained-backups-count=RETAINED_BACKUPS_COUNT
          --retained-transaction-log-days=RETAINED_TRANSACTION_LOG_DAYS]
        [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Updates the settings of a Cloud SQL instance.

POSITIONAL ARGUMENTS
     INSTANCE
        Cloud SQL instance ID.

FLAGS
     --activation-policy=ACTIVATION_POLICY
        Activation policy for this instance. This specifies when the instance
        should be activated and is applicable only when the instance state is
        RUNNABLE. The default is always. More information on activation
        policies can be found here:
        https://cloud.google.com/sql/docs/mysql/start-stop-restart-instance#activation_policy.
        ACTIVATION_POLICY must be one of: always, never.

     --active-directory-dns-servers=[DNS_SERVER_IP_ADDRESS,...]
        A comma-separated list of the DNS servers to be used for Active
        Directory. Only available for SQL Server instances. E.g:
        10.0.0.1,10.0.0.2

     --active-directory-domain=ACTIVE_DIRECTORY_DOMAIN
        Managed Service for Microsoft Active Directory domain this instance is
        joined to. Only available for SQL Server instances.

     --active-directory-mode=ACTIVE_DIRECTORY_MODE
        Defines the Active Directory mode. Only available for SQL Server
        instances. ACTIVE_DIRECTORY_MODE must be one of:
        MANAGED_ACTIVE_DIRECTORY, CUSTOMER_MANAGED_ACTIVE_DIRECTORY.

     --active-directory-organizational-unit=ACTIVE_DIRECTORY_ORGANIZATIONAL_UNIT
        Defines the organizational unit to be used for Active Directory. Only
        available for SQL Server instances. E.g:
        OU=Cloud,DC=ad,DC=example,DC=com

     --active-directory-secret-manager-key=ACTIVE_DIRECTORY_SECRET_MANAGER_KEY
        The secret manager key storing administrator credentials. Only
        available for SQL Server instances.

     --[no-]assign-ip
        Assign a public IP address to the instance. This is a public,
        externally available IPv4 address that you can use to connect to your
        instance when properly authorized. Use --assign-ip to enable and
        --no-assign-ip to disable.

     --async
        Return immediately, without waiting for the operation in progress to
        complete.

     --audit-bucket-path=AUDIT_BUCKET_PATH
        The location, as a Cloud Storage bucket, to which audit files are
        uploaded. The URI is in the form gs://bucketName/folderName. Only
        available for SQL Server instances.

     --audit-retention-interval=AUDIT_RETENTION_INTERVAL
        The number of days for audit log retention on disk, for example, 3dfor
        3 days. Only available for SQL Server instances.

     --audit-upload-interval=AUDIT_UPLOAD_INTERVAL
        How often to upload audit logs (audit files), for example, 30mfor 30
        minutes. Only available for SQL Server instances.

     --availability-type=AVAILABILITY_TYPE
        Specifies level of availability. AVAILABILITY_TYPE must be one of:

         regional
            Provides high availability and is recommended for production
            instances; instance automatically fails over to another zone within
            your selected region.
         zonal
            Provides no failover capability. This is the default.

     --clear-active-directory
        Clears the Active Directory configuration.

     --clear-active-directory-dns-servers
        Removes the list of DNS Servers from the Active Directory Config.

     --clear-entra-id-config
        Clears the Entra ID config for the SQL Server instance.

     --clear-failover-dr-replica-name
        Clear the DR replica setting for the primary instance. Flag is only
        available for MySQL and PostgreSQL database instances.

     --clear-password-policy
        Clear the existing password policy. This flag is only available for
        Postgres.

     --connector-enforcement=CONNECTOR_ENFORCEMENT
        Cloud SQL Connector enforcement mode. It determines how Cloud SQL
        Connectors are used in the connection. See the list of modes here
        (https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#connectorenforcement).
        CONNECTOR_ENFORCEMENT must be one of:

         CONNECTOR_ENFORCEMENT_UNSPECIFIED
            The requirement for Cloud SQL connectors is unknown.
         NOT_REQUIRED
            Does not require Cloud SQL connectors.
         REQUIRED
            Requires all connections to use Cloud SQL connectors, including the
            Cloud SQL Auth Proxy and Cloud SQL Java, Python, and Go connectors.
            Note: This disables all existing authorized networks.

     --cpu=CPU
        Whole number value indicating how many cores are desired in the
        machine. Both --cpu and --memory must be specified if a custom machine
        type is desired, and the --tier flag must be omitted.--cpu and --memory
        flags are not compatible with the Enterprise Plus edition. These flags
        should not be used when creating an Enterprise Plus edition, as the
        machine configuration is determined by the --tier flag instead.

     --data-api-access=DATA_API_ACCESS
        Controls connectivity to the instance using ExecuteSql API.
        DATA_API_ACCESS must be one of:

         ALLOW_DATA_API
            Allow using ExecuteSql API to connect to the instance. For Private
            IP instances, this will allow authorized users to access the
            instance from the public internet using ExecuteSql API.
         DATA_API_ACCESS_UNSPECIFIED
            Unspecified mode, effectively the same as DISALLOW_DATA_API.
         DISALLOW_DATA_API
            Disallow using ExecuteSql API to connect to the instance.

     --database-version=DATABASE_VERSION
        The database engine type and versions. If left unspecified, no changes
        occur. See the list of database versions at
        https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion.
        Apart from listed major versions, DATABASE_VERSION also accepts
        supported minor versions. DATABASE_VERSION must be one of: MYSQL_5_6,
        MYSQL_5_7, MYSQL_8_0, MYSQL_8_4, POSTGRES_9_6, POSTGRES_10,
        POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, POSTGRES_15,
        POSTGRES_16, POSTGRES_17, POSTGRES_18, SQLSERVER_2017_EXPRESS,
        SQLSERVER_2017_WEB, SQLSERVER_2017_STANDARD, SQLSERVER_2017_ENTERPRISE,
        SQLSERVER_2019_EXPRESS, SQLSERVER_2019_WEB, SQLSERVER_2019_STANDARD,
        SQLSERVER_2019_ENTERPRISE, SQLSERVER_2022_EXPRESS, SQLSERVER_2022_WEB,
        SQLSERVER_2022_STANDARD, SQLSERVER_2022_ENTERPRISE,
        SQLSERVER_2025_EXPRESS, SQLSERVER_2025_STANDARD,
        SQLSERVER_2025_ENTERPRISE.

     --[no-]deletion-protection
        Enable deletion protection on a Cloud SQL instance. Use
        --deletion-protection to enable and --no-deletion-protection to
        disable.

     --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE
        Date when the deny maintenance period ends, that is 2021-01-10.

     --deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE
        Date when the deny maintenance period begins, that is 2020-11-01.

     --deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME
        Time when the deny maintenance period starts or ends, that is 05:00:00.

     --diff
        Show what changed as a result of the update.

     --edition=EDITION
        Specifies the edition of Cloud SQL instance. EDITION must be one of:
        enterprise, enterprise-plus.

     --enable-auto-upgrade-minor-version
        Enables auto-upgrade for MySQL 8.0 minor versions. The MySQL version
        must be 8.0.35 or higher.

     --[no-]enable-bin-log
        Allows for data recovery from a specific point in time, down to a
        fraction of a second. Must have automatic backups enabled to use. Make
        sure storage can support at least 7 days of logs. Use --enable-bin-log
        to enable and --no-enable-bin-log to disable.

     --[no-]enable-connection-pooling
        Enable connection pooling for the instance. Use
        --enable-connection-pooling to enable and
        --no-enable-connection-pooling to disable.

     --[no-]enable-data-cache
        Enable use of data cache for accelerated read performance. This flag is
        only available for Enterprise_Plus edition instances. Use
        --enable-data-cache to enable and --no-enable-data-cache to disable.

     --[no-]enable-database-replication
        Enable database replication. Applicable only for read replica
        instance(s). WARNING: Instance will be restarted. Use
        --enable-database-replication to enable and
        --no-enable-database-replication to disable.

     --[no-]enable-dataplex-integration
        Enable Dataplex integration for Google Cloud SQL. Use
        --enable-dataplex-integration to enable and
        --no-enable-dataplex-integration to disable.

     --[no-]enable-google-ml-integration
        Enable Vertex AI integration for Google Cloud SQL. You can integrate
        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
        instances only. Use --enable-google-ml-integration to enable and
        --no-enable-google-ml-integration to disable.

     --[no-]enable-google-private-path
        Enable a private path for Google Cloud services. This flag specifies
        whether the instance is accessible to internal Google Cloud services
        such as BigQuery. This is only applicable to MySQL and PostgreSQL
        instances that don't use public IP. Currently, SQL Server isn't
        supported. Use --enable-google-private-path to enable and
        --no-enable-google-private-path to disable.

     --enable-password-policy
        Enable the password policy, which enforces user password management
        with the policies configured for the instance. This flag is only
        available for Postgres.

     --[no-]enable-point-in-time-recovery
        Allows for data recovery from a specific point in time, down to a
        fraction of a second, using write-ahead logs. Must have automatic
        backups enabled to use. Make sure storage can support at least 7 days
        of logs. Use --enable-point-in-time-recovery to enable and
        --no-enable-point-in-time-recovery to disable.

     --[no-]enable-private-service-connect
        Enable connecting to the Cloud SQL instance with Private Service
        Connect. Use --enable-private-service-connect to enable and
        --no-enable-private-service-connect to disable.

     --enforce-new-sql-network-architecture
        Force the instance to use the new network architecture.

     --failover-dr-replica-name=FAILOVER_DR_REPLICA_NAME
        Set a Disaster Recovery (DR) replica with the specified name for the
        primary instance. This must be one of the existing cross region
        replicas of the primary instance. Flag is only available for MySQL and
        PostgreSQL database instances.

     --[no-]final-backup
        Enables the final backup to be taken at the time of instance deletion.
        Use --final-backup to enable and --no-final-backup to disable.

     --final-backup-retention-days=FINAL_BACKUP_RETENTION_DAYS
        Specifies number of days to retain final backup. The valid range is
        between 1 and 365. For instances managed by BackupDR, the valid range
        is between 1 day and 10 years (3653 days). Default value is 30 days.

     --follow-gae-app=FOLLOW_GAE_APP
        First Generation instances only. The App Engine app this instance
        should follow. It must be in the same region as the instance. WARNING:
        Instance may be restarted.

     --[no-]include-replicas-for-major-version-upgrade
        Enable the major version upgrade of replicas when the in-place major
        version upgrade of a primary instance is initated with
        --database-version. Use --include-replicas-for-major-version-upgrade to
        enable and --no-include-replicas-for-major--version-upgrade to disable.
        Use --include-replicas-for-major-version-upgrade to enable and
        --no-include-replicas-for-major-version-upgrade to disable.

     --[no-]insights-config-enhanced-query-insights-enabled
        Enable enhanced query insights for Enterprise Plus edition to provide
        more detailed query analytics.

        Use --insights-config-enhanced-query-insights-enabled to enable and
        --no-insights-config-enhanced-query-insights-enabled to disable.

     --[no-]insights-config-query-insights-enabled
        Enable query insights feature to provide query and query plan
        analytics.

        Use --insights-config-query-insights-enabled to enable and
        --no-insights-config-query-insights-enabled to disable.

     --insights-config-query-plans-per-minute=INSIGHTS_CONFIG_QUERY_PLANS_PER_MINUTE
        Number of query plans to sample every minute. Default value is 5.
        Allowed range: 0 to 20.

     --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH
        Sets the default query length limit. For Cloud SQL Enterprise edition,
        the range is from 256 to 4500 (in bytes) and the default query length
        is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from
        1024 to 100,000 (in bytes) and the default query length is 10,000
        bytes.

     --[no-]insights-config-record-application-tags
        Allow application tags to be recorded by the query insights feature.

        Use --insights-config-record-application-tags to enable and
        --no-insights-config-record-application-tags to disable.

     --[no-]insights-config-record-client-address
        Allow the client address to be recorded by the query insights feature.

        Use --insights-config-record-client-address to enable and
        --no-insights-config-record-client-address to disable.

     --instance-type=INSTANCE_TYPE
        The type of the instance. INSTANCE_TYPE must be one of:

         CLOUD_SQL_INSTANCE
            A primary instance.
         READ_POOL_INSTANCE
            A read pool instance.
         READ_REPLICA_INSTANCE
            A read replica instance.

     --maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL
        Which channel's updates to apply during the maintenance window. If not
        specified, Cloud SQL chooses the timing of updates to your instance.
        MAINTENANCE_RELEASE_CHANNEL must be one of:

         preview
            Preview updates release prior to production updates. You may wish
            to use the preview channel for dev/test applications so that you
            can preview their compatibility with your application prior to the
            production release.
         production
            Production updates are stable and recommended for applications in
            production.
         week5
            week5 updates release after the production updates. Use the week5
            channel to receive a 5 week advance notification about the upcoming
            maintenance, so you can prepare your application for the release.

     --maintenance-version=MAINTENANCE_VERSION
        The desired maintenance version of the instance.

     --maintenance-window-any
        Removes the user-specified maintenance window.

     --maintenance-window-day=MAINTENANCE_WINDOW_DAY
        Day of week for maintenance window, in UTC time zone.
        MAINTENANCE_WINDOW_DAY must be one of: SUN, MON, TUE, WED, THU, FRI,
        SAT.

     --maintenance-window-hour=MAINTENANCE_WINDOW_HOUR
        Hour of day for maintenance window, in UTC time zone.

     --memory=MEMORY
        Whole number value indicating how much memory is desired in the
        machine. A size unit should be provided (eg. 3072MiB or 9GiB) - if no
        units are specified, GiB is assumed. Both --cpu and --memory must be
        specified if a custom machine type is desired, and the --tier flag must
        be omitted. --cpu and --memory flags are not compatible with the
        Enterprise Plus edition. These flags should not be used when creating
        an Enterprise Plus edition, as the machine configuration is determined
        by the --tier flag instead.

     --network=NETWORK
        Network in the current project that the instance will be part of. To
        specify using a network with a shared VPC, use the full URL of the
        network. For an example host project, 'testproject', and shared
        network, 'testsharednetwork', this would use the form:
        --network=projects/testproject/global/networks/testsharednetwork

     --node-count=NODE_COUNT
        The number of nodes in the pool. This option is only available for read
        pools.

     --password-policy-complexity=PASSWORD_POLICY_COMPLEXITY
        The complexity of the password. This flag is available only for
        PostgreSQL. PASSWORD_POLICY_COMPLEXITY must be one of:

         COMPLEXITY_DEFAULT
            A combination of lowercase, uppercase, numeric, and
            non-alphanumeric characters.
         COMPLEXITY_UNSPECIFIED
            The default value if COMPLEXITY_DEFAULT is not specified. It
            implies that complexity check is not enabled.

     --[no-]password-policy-disallow-username-substring
        Disallow username as a part of the password. Use
        --password-policy-disallow-username-substring to enable and
        --no-password-policy-disallow-username-substring to disable.

     --password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH
        Minimum number of characters allowed in the password.

     --password-policy-password-change-interval=PASSWORD_POLICY_PASSWORD_CHANGE_INTERVAL
        Minimum interval after which the password can be changed, for example,
        2m for 2 minutes. See <a href="/sdk/gcloud/reference/topic/datetimes">
        $ gcloud topic datetimes</a> for information on duration formats. This
        flag is available only for PostgreSQL.

     --password-policy-reuse-interval=PASSWORD_POLICY_REUSE_INTERVAL
        Number of previous passwords that cannot be reused. The valid range is
        0 to 100.

     --performance-capture-config=KEY=VALUE,[KEY=VALUE,...]
        A comma-separated list of performance capture settings to add to the
        MySQL instance. The input should be in a format of key=value. Available
        case-sensitive keys are: enabled (boolean), probing-interval-seconds
        (integer), probe-threshold (integer), running-threads-threshold
        (integer), seconds-behind-source-threshold (integer),
        transaction-duration-threshold (integer),
        cpu-utilization-threshold-percent (integer),
        memory-usage-threshold-percent (integer),
        transaction-lock-wait-threshold-count (integer),
        semaphore-wait-threshold-count (integer),
        history-list-length-threshold-count (integer),
        transaction-kill-threshold-seconds (integer), transaction-kill-type
        (string), transaction-kill-excluded-user-hosts (string,
        semicolon-separated list) Example: --performance-capture-config
        enabled=true,probe-threshold=5, cpu-utilization-threshold-percent=80,
        transaction-kill-excluded-user-hosts=user1@host1;user2@%,
        transaction-kill-type=READ_ONLY_TRANSACTIONS

     --pricing-plan=PRICING_PLAN, -p PRICING_PLAN
        First Generation instances only. The pricing plan for this instance.
        PRICING_PLAN must be one of: PER_USE, PACKAGE.

     --reconcile-psa-networking
        Reconciles the instance's PSA networking configuration. If the instance
        is already on a PSA network, the DNS zone and records associated with
        the PSA write endpoint are either added if missing or updated if
        incorrect.

     --[no-]recreate-replicas-on-primary-crash
        Allow/Disallow replica recreation when a primary MySQL instance
        operating in reduced durability mode crashes. Not recreating the
        replicas might lead to data inconsistencies between the primary and its
        replicas. This setting is only applicable for MySQL instances and is
        enabled by default. Use --recreate-replicas-on-primary-crash to enable
        and --no-recreate-replicas-on-primary-crash to disable.

     --remove-deny-maintenance-period
        Removes the user-specified deny maintenance period.

     --replication=REPLICATION
        Type of replication this instance uses. The default is synchronous.
        REPLICATION must be one of: synchronous, asynchronous.

     --[no-]require-ssl
        mysqld should default to 'REQUIRE X509' for users connecting over IP.
        Use --require-ssl to enable and --no-require-ssl to disable.

     --[no-]retain-backups-on-delete
        Retain automated/ondemand backups of the instance after the instance is
        deleted. Use --retain-backups-on-delete to enable and
        --no-retain-backups-on-delete to disable.

     --server-ca-mode=SERVER_CA_MODE
        Set the server CA mode of the instance. SERVER_CA_MODE must be one of:

         CUSTOMER_MANAGED_CAS_CA
            Customer-managed CA hosted on Google Cloud's Certificate Authority
            Service (CAS).
         GOOGLE_MANAGED_CAS_CA
            Google-managed regional CA part of root CA hierarchy hosted on
            Google Cloud's Certificate Authority Service (CAS).
         GOOGLE_MANAGED_INTERNAL_CA
            Google-managed self-signed internal CA.

     --server-ca-pool=SERVER_CA_POOL
        Set the server CA pool of the instance.

     --server-certificate-rotation-mode=SERVER_CERTIFICATE_ROTATION_MODE
        Set the server certificate rotation mode of the instance.
        SERVER_CERTIFICATE_ROTATION_MODE must be one of:

         AUTOMATIC_ROTATION_DURING_MAINTENANCE
            Automatic server certificate rotation during Cloud SQL scheduled
            maintenance or self-service maintenance updates. Requires
            server_ca_mode to be GOOGLE_MANAGED_CAS_CA or
            CUSTOMER_MANAGED_CAS_CA.
         NO_AUTOMATIC_ROTATION
            No automatic server certificate rotation. Server certificates must
            be rotated manually.

     --simulate-maintenance-event
        Simulate a maintenance event without changing the version. Only
        applicable to instances that support near-zero downtime planned
        maintenance.

     --ssl-mode=SSL_MODE
        Set the SSL mode of the instance. SSL_MODE must be one of:

         ALLOW_UNENCRYPTED_AND_ENCRYPTED
            Allow non-SSL and SSL connections. For SSL connections, client
            certificate will not be verified.
         ENCRYPTED_ONLY
            Only allow connections encrypted with SSL/TLS.
         TRUSTED_CLIENT_CERTIFICATE_REQUIRED
            Only allow connections encrypted with SSL/TLS and with valid client
            certificates.

     --[no-]storage-auto-increase
        Storage size can be increased, but it cannot be decreased; storage
        increases are permanent for the life of the instance. With this setting
        enabled, a spike in storage requirements can result in permanently
        increased storage costs for your instance. However, if an instance runs
        out of available space, it can result in the instance going offline,
        dropping existing connections. This setting is enabled by default. Use
        --storage-auto-increase to enable and --no-storage-auto-increase to
        disable.

     --storage-provisioned-iops=STORAGE_PROVISIONED_IOPS
        Indicates how many IOPS to provision for the data disk. This sets the
        number of I/O operations per second that the disk can handle.

     --storage-provisioned-throughput=STORAGE_PROVISIONED_THROUGHPUT
        Indicates how much throughput to provision for the data disk. This sets
        the throughput in MB per second that the disk can handle.

     --storage-size=STORAGE_SIZE
        Amount of storage allocated to the instance. Must be an integer number
        of GB. The default is 10GB. Information on storage limits can be found
        here: https://cloud.google.com/sql/docs/quotas#storage_limits

     --storage-type=STORAGE_TYPE
        The storage type for the instance, determined by the selected machine
        type. STORAGE_TYPE must be one of: SSD, HDD, HYPERDISK_BALANCED.

     --switch-transaction-logs-to-cloud-storage
        Switches the location of the transaction logs used for PITR from disk
        to Cloud Storage.

     --threads-per-core=THREADS_PER_CORE
        The number of threads per core. The value of this flag can be 1 or 2.
        To disable SMT, set this flag to 1. Only available in Cloud SQL for SQL
        Server instances.

     --tier=TIER, -t TIER
        Machine type for a shared-core instance e.g. db-g1-small. For all other
        instances, instead of using tiers, customize your instance by
        specifying its CPU and memory. You can do so with the --cpu and
        --memory flags. Learn more about how CPU and memory affects pricing:
        https://cloud.google.com/sql/pricing. WARNING: Instance will be
        restarted.

     --time-zone=TIME_ZONE
        Set a non-default time zone. Only available for SQL Server instances.

     --upgrade-sql-network-architecture
        Upgrade from old network architecture to new network architecture. The
        new network architecture offers better isolation, reliability, and
        faster new feature adoption.

     At most one of these can be specified:

       --allowed-psc-projects=PROJECT,[PROJECT,...]
          A comma-separated list of projects. Each project in this list might
          be represented by a project number (numeric) or by a project ID
          (alphanumeric). This allows Private Service Connect connections to be
          established from specified consumer projects.

       --clear-allowed-psc-projects
          This will clear the project allowlist of Private Service Connect,
          disallowing all projects from creating new Private Service Connect
          bindings to the instance.

     At most one of these can be specified:

       --authorized-gae-apps=APP,[APP,...]
          First Generation instances only. List of project IDs for App Engine
          applications running in the Standard environment that can access this
          instance.

          The value given for this argument replaces the existing list.

       --clear-gae-apps
          Specified to clear the list of App Engine apps that can access this
          instance.

     At most one of these can be specified:

       --authorized-networks=NETWORK,[NETWORK,...]
          The list of external networks that are allowed to connect to the
          instance. Specified in CIDR notation, also known as 'slash' notation
          (e.g. 192.168.100.0/24).

          The value given for this argument replaces the existing list.

       --clear-authorized-networks
          Clear the list of external networks that are allowed to connect to
          the instance.

     At most one of these can be specified:

       --clear-connection-pool-flags
          This will clear the connection pool flags set on the instance.

       --connection-pool-flags=FLAG=VALUE,[FLAG=VALUE,...]
          Comma-separated list of connection pool flags to set on the instance
          connection pool. Use an equals sign to separate flag name and value.
          More information on available flags can be found here:
          https://cloud.google.com/sql/docs/mysql/managed-connection-pooling#configuration-options
          for MySQL and
          https://cloud.google.com/sql/docs/postgres/managed-connection-pooling#configuration-options
          for PostgreSQL. (e.g., --connection-pool-flags
          max_pool_size=1000,max_client_connections=20)

     At most one of these can be specified:

       --clear-custom-subject-alternative-names
          This clears the customer specified DNS names.

       --custom-subject-alternative-names=DNS,[DNS,[DNS]]
          A comma-separated list of DNS names to add to the instance's SSL
          certificate. A custom SAN is a structured way to add additional DNS
          names (host names) that are not managed by Cloud SQL to an instance.
          It allows for hostname verification during establishment of a
          database connection using the DNS name over SSL/TLS. When you create
          and/or update an instance, you can add a comma-separated list of up
          to three DNS names to the server certificate of your instance.

     At most one of these can be specified:

       --clear-database-flags
          Clear the database flags set on the instance. WARNING: Instance will
          be restarted.

       --database-flags=FLAG=VALUE,[FLAG=VALUE,...]
          Comma-separated list of database flags to set on the instance. Use an
          equals sign to separate flag name and value. Flags without values,
          like skip_grant_tables, can be written out without a value after,
          e.g., skip_grant_tables=. Use on/off for booleans. View the Instance
          Resource API for allowed flags. (e.g., --database-flags
          max_allowed_packet=55555,skip_grant_tables=,log_output=1)

     At most one of these can be specified:

       --clear-psc-auto-connections
          This removes all automatically created connections. Cloud SQL uses
          these connections to connect to an instance using Private Service
          Connect.

       --psc-auto-connections=[network=NETWORK],[project=PROJECT]
          A comma-separated list of networks or network-project pairs. Each
          project is represented by a project number (numeric) or by a project
          ID (alphanumeric). This allows Private Service Connect connections to
          be created automatically for the specified networks. For example,
          this connection uses "the form
          psc-auto-connections=network=projects/testproject1/global/networks/testnetwork1"
          or "the form
          psc-auto-connections=project=testproject1,network=projects/testproject1/global/networks/testnetwork1".
          Sets psc_auto_connections value.

           network
              Required, sets network value.

           project
              Sets project value.

          Shorthand Example:

              --psc-auto-connections=network=string,project=string

          JSON Example:

              --psc-auto-connections='{"network": "string", "project": "string"}'

          File Example:

              --psc-auto-connections=path_to_file.(yaml|json)

     At most one of these can be specified:

       --clear-psc-network-attachment-uri
          Disable outbound connectivity from a Cloud SQL instance which uses
          Private Service Connect (PSC).

       --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI
          Full URI of the network attachment that is configured to support
          outbound connectivity from a Cloud SQL instance which uses Private
          Service Connect (PSC). For example, this would be of the
          form:--psc-network-attachment-uri=projects/test-project/regions/us-central1/networkAttachments/my-na

     Entraid configuration for the SQL Server instance.

     --entra-id-application-id=ENTRA_ID_APPLICATION_ID
        Set the Entraid application ID.

        This flag argument must be specified if any of the other arguments in
        this group are specified.

     --entra-id-tenant-id=ENTRA_ID_TENANT_ID
        Set the Entraid tenant ID.

        This flag argument must be specified if any of the other arguments in
        this group are specified.

     At most one of these can be specified:

       --gce-zone=GCE_ZONE
          (DEPRECATED) Preferred Compute Engine zone (e.g. us-central1-a,
          us-central1-b, etc.). WARNING: Instance may be restarted.

          Flag --gce-zone is deprecated and will be removed by release 255.0.0.
          Use --zone instead.

       Or at least one of these can be specified:

         --secondary-zone=SECONDARY_ZONE
            Preferred secondary Compute Engine zone (e.g. us-central1-a,
            us-central1-b, etc.).

         --zone=ZONE
            Preferred Compute Engine zone (e.g. us-central1-a, us-central1-b,
            etc.). WARNING: Instance may be restarted.

     Options for configuring read pool auto scale.

     --[no-]auto-scale-disable-scale-in
        Disables automatic read pool scale-in. When disabled, read pool auto
        scaling only supports increasing the read pool node count. By default,
        both automatic read pool scale-in and scale-out are enabled. Use
        --auto-scale-disable-scale-in to enable and
        --no-auto-scale-disable-scale-in to disable.

     --[no-]auto-scale-enabled
        Enables read pool auto scaling. Supports automatically increasing and
        decreasing the read pool's node count based on need. Use
        --auto-scale-enabled to enable and --no-auto-scale-enabled to disable.

     --auto-scale-in-cooldown-seconds=AUTO_SCALE_IN_COOLDOWN_SECONDS
        The cooldown period for automatic read pool scale-in. Minimum time
        between scale-in events. Must be an integer value. For example, if the
        value is 60, then a scale-in event will not be triggered within 60
        seconds of the last scale-in event.

     --auto-scale-max-node-count=AUTO_SCALE_MAX_NODE_COUNT
        Maximum number of read pool nodes to be maintained.

     --auto-scale-min-node-count=AUTO_SCALE_MIN_NODE_COUNT
        Minimum number of read pool nodes to be maintained.

     --auto-scale-out-cooldown-seconds=AUTO_SCALE_OUT_COOLDOWN_SECONDS
        The cooldown period for automatic read pool scale-out. Minimum time
        between scale-out events. Must be an integer value. For example, if the
        value is 60, then a scale-out event will not be triggered within 60
        seconds of the last scale-out event.

     --auto-scale-target-metrics=[METRIC=VALUE,...]
        Target metrics for read pool auto scaling. Options are:
        AVERAGE_CPU_UTILIZATION and AVERAGE_DB_CONNECTIONS. Example:
        --auto-scale-target-metrics=AVERAGE_CPU_UTILIZATION=0.8

     At most one of these can be specified:

       --no-backup
          Specified if daily backup should be disabled.

       Or at least one of these can be specified:

         --backup-location=BACKUP_LOCATION
            Choose where to store your backups. Backups are stored in the
            closest multi-region location to you by default. Only customize if
            needed. Specify empty string to revert to default.

         --backup-start-time=BACKUP_START_TIME
            Start time of daily backups, specified in the HH:MM format, in the
            UTC timezone.

         --retained-backups-count=RETAINED_BACKUPS_COUNT
            How many backups to keep. The valid range is between 1 and 365.
            Default value is 7 for Enterprise edition instances. For
            Enterprise_Plus, default value is 15. Applicable only if
            --no-backups is not specified.

         --retained-transaction-log-days=RETAINED_TRANSACTION_LOG_DAYS
            How many days of transaction logs to keep. The valid range is
            between 1 and 35. Only use this option when point-in-time recovery
            is enabled. If logs are stored on disk, storage size for
            transaction logs could increase when the number of days for log
            retention increases. For Enterprise, default and max retention
            values are 7 and 7 respectively. For Enterprise_Plus, default and
            max retention values are 14 and 35.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    These variants are also available:

        $ gcloud alpha sql instances patch

        $ gcloud beta sql instances patch

