gcloud: Wed Oct 15 10:52:53 UTC 2025

gcloud/beta/container/clusters/create

@@ -43,7 +43,8 @@ SYNOPSIS
         [--enable-identity-service] [--enable-image-streaming]
         [--enable-insecure-kubelet-readonly-port]
         [--enable-intra-node-visibility] [--enable-ip-access]
-        [--enable-ip-alias] [--enable-kubernetes-alpha]
+        [--enable-ip-alias] [--enable-k8s-certs-via-dns]
+        [--enable-k8s-tokens-via-dns] [--enable-kubernetes-alpha]
         [--enable-kubernetes-unstable-apis=API,[API,...]]
         [--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
         [--enable-legacy-lustre-port] [--enable-logging-monitoring-system-only]
@@ -682,6 +683,14 @@ FLAGS
         you omit both --enable-ip-alias and --no-enable-ip-alias, the default
         is a VPC-native cluster.
 
+     --enable-k8s-certs-via-dns
+        Enable K8s client certificates Authentication to the cluster's control
+        plane over DNS-based endpoint.
+
+     --enable-k8s-tokens-via-dns
+        Enable K8s Service Account tokens Authentication to the cluster's
+        control plane over DNS-based endpoint.
+
      --enable-kubernetes-alpha
         Enable Kubernetes alpha features on this cluster. Selecting this option
         will result in the cluster having all Kubernetes alpha API groups and