gcloud: Wed Aug 9 11:23:49 UTC 2023

gcloud/sql/instances/create

@@ -46,6 +46,8 @@ SYNOPSIS
         [--storage-size=STORAGE_SIZE] [--storage-type=STORAGE_TYPE]
         [--threads-per-core=THREADS_PER_CORE] [--tier=TIER, -t TIER]
         [--time-zone=TIME_ZONE] [--timeout=TIMEOUT; default=3600]
+        [--allowed-psc-projects=PROJECT,[PROJECT,...]
+          --enable-private-service-connect]
         [--disk-encryption-key=DISK_ENCRYPTION_KEY
           : --disk-encryption-key-keyring=DISK_ENCRYPTION_KEY_KEYRING
           --disk-encryption-key-location=DISK_ENCRYPTION_KEY_LOCATION
@@ -417,6 +419,16 @@ FLAGS
         specified. By default, set to 3600s. To wait indefinitely, set to
         unlimited.
 
+     --allowed-psc-projects=PROJECT,[PROJECT,...]
+        A comma-separated list of projects. Each project in this list may be
+        represented by a project number (numeric) or by a project id
+        (alphanumeric). This will allow PSC connections to be established from
+        specified consumer projects. This can be set only when PSC is enabled.
+
+     --enable-private-service-connect
+        When the flag is set, a Cloud SQL instance will be created with PSC
+        enabled.
+
      Key resource - The Cloud KMS (Key Management Service) cryptokey that will
      be used to protect the instance. The 'Compute Engine Service Agent'
      service account must hold permission 'Cloud KMS CryptoKey

gcloud/sql/instances/help

@@ -51,6 +51,9 @@ COMMANDS
      promote-replica
         Promotes Cloud SQL read replica to a stand-alone instance.
 
+     reencrypt
+        Reencrypts a Cloud SQL CMEK instance.
+
      reset-ssl-config
         Deletes all client certificates and generates a new server certificate.
 

gcloud/sql/instances/patch

@@ -38,6 +38,8 @@ SYNOPSIS
         [--[no-]require-ssl] [--[no-]storage-auto-increase]
         [--storage-size=STORAGE_SIZE] [--threads-per-core=THREADS_PER_CORE]
         [--tier=TIER, -t TIER]
+        [--allowed-psc-projects=PROJECT,[PROJECT,...]
+          | --clear-allowed-psc-projects]
         [--authorized-gae-apps=APP,[APP,...] | --clear-gae-apps]
         [--authorized-networks=NETWORK,[NETWORK,...]
           | --clear-authorized-networks]
@@ -350,6 +352,19 @@ FLAGS
         https://cloud.google.com/sql/pricing. WARNING: Instance will be
         restarted.
 
+     At most one of these can be specified:
+
+       --allowed-psc-projects=PROJECT,[PROJECT,...]
+          A comma-separated list of projects. Each project in this list may be
+          represented by a project number (numeric) or by a project id
+          (alphanumeric). This will allow PSC connections to be established
+          from specified consumer projects. This can be set only when PSC is
+          enabled.
+
+       --clear-allowed-psc-projects
+          This will clear the project allowlist of PSC, disallowing all
+          projects from creating new PSC bindings to the instance.
+
      At most one of these can be specified:
 
        --authorized-gae-apps=APP,[APP,...]

gcloud/sql/instances/reencrypt

@@ -0,0 +1,38 @@
+NAME
+    gcloud sql instances reencrypt - reencrypts a Cloud SQL CMEK instance
+
+SYNOPSIS
+    gcloud sql instances reencrypt INSTANCE [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Reencrypt a Cloud SQL CMEK instance with the primary key version.
+
+EXAMPLES
+    To reencrypt a Cloud SQL CMEK instance with the primary key version:
+
+        $ gcloud sql instances reencrypt instance-foo
+
+POSITIONAL ARGUMENTS
+     INSTANCE
+        Cloud SQL instance ID.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha sql instances reencrypt
+
+        $ gcloud beta sql instances reencrypt
+