diff --git a/gcloud/_version b/gcloud/_version
index 52bd158ff..0f5b82f55 100644
--- a/gcloud/_version
+++ b/gcloud/_version
@@ -1,8 +1,8 @@
-Google Cloud SDK 516.0.0
-alpha 2025.03.24
-beta 2025.03.24
+Google Cloud SDK 517.0.0
+alpha 2025.03.29
+beta 2025.03.29
 bq 2.1.14
 bundled-python3-unix 3.12.8
-core 2025.03.24
+core 2025.03.29
 gcloud-crc32c 1.0.0
 gsutil 5.33
diff --git a/gcloud/alpha/bigtable/app-profiles/create b/gcloud/alpha/bigtable/app-profiles/create
index 23bfc58b0..569e710ba 100644
--- a/gcloud/alpha/bigtable/app-profiles/create
+++ b/gcloud/alpha/bigtable/app-profiles/create
@@ -76,7 +76,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/alpha/bigtable/app-profiles/delete b/gcloud/alpha/bigtable/app-profiles/delete
index 11e83ec59..ed225411a 100644
--- a/gcloud/alpha/bigtable/app-profiles/delete
+++ b/gcloud/alpha/bigtable/app-profiles/delete
@@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/alpha/bigtable/app-profiles/describe b/gcloud/alpha/bigtable/app-profiles/describe
index 7093d8bb3..85e0408be 100644
--- a/gcloud/alpha/bigtable/app-profiles/describe
+++ b/gcloud/alpha/bigtable/app-profiles/describe
@@ -40,7 +40,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/alpha/bigtable/app-profiles/update b/gcloud/alpha/bigtable/app-profiles/update
index 41927b8c7..a8083253a 100644
--- a/gcloud/alpha/bigtable/app-profiles/update
+++ b/gcloud/alpha/bigtable/app-profiles/update
@@ -75,7 +75,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/alpha/bigtable/backups/copy b/gcloud/alpha/bigtable/backups/copy
index d1c3bd67a..e4faa61d9 100644
--- a/gcloud/alpha/bigtable/backups/copy
+++ b/gcloud/alpha/bigtable/backups/copy
@@ -62,7 +62,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --destination-cluster=DESTINATION_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -70,7 +70,7 @@ REQUIRED FLAGS
           ▸ provide the argument --destination-cluster on the command line.
 
        --destination-instance=DESTINATION_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -116,7 +116,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --source-cluster=SOURCE_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --source-backup on the command line with a
@@ -124,7 +124,7 @@ REQUIRED FLAGS
           ▸ provide the argument --source-cluster on the command line.
 
        --source-instance=SOURCE_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --source-backup on the command line with a
diff --git a/gcloud/alpha/bigtable/clusters/create b/gcloud/alpha/bigtable/clusters/create
index 390424294..419e03408 100644
--- a/gcloud/alpha/bigtable/clusters/create
+++ b/gcloud/alpha/bigtable/clusters/create
@@ -54,7 +54,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/alpha/bigtable/clusters/delete b/gcloud/alpha/bigtable/clusters/delete
index ddd2b0cb5..a04870e64 100644
--- a/gcloud/alpha/bigtable/clusters/delete
+++ b/gcloud/alpha/bigtable/clusters/delete
@@ -37,7 +37,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/alpha/bigtable/clusters/describe b/gcloud/alpha/bigtable/clusters/describe
index 1af4743cd..56a180e0f 100644
--- a/gcloud/alpha/bigtable/clusters/describe
+++ b/gcloud/alpha/bigtable/clusters/describe
@@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/alpha/bigtable/clusters/update b/gcloud/alpha/bigtable/clusters/update
index 1ec82fb63..13a4a1128 100644
--- a/gcloud/alpha/bigtable/clusters/update
+++ b/gcloud/alpha/bigtable/clusters/update
@@ -43,7 +43,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/alpha/bigtable/help b/gcloud/alpha/bigtable/help
index 4e8d3f794..f287a8a85 100644
--- a/gcloud/alpha/bigtable/help
+++ b/gcloud/alpha/bigtable/help
@@ -33,6 +33,9 @@ GROUPS
      instances
         (ALPHA) Manage Cloud Bigtable instances.
 
+     logical-views
+        (ALPHA) Manage Bigtable logical views.
+
      operations
         (ALPHA) Manage Cloud Bigtable operations.
 
diff --git a/gcloud/alpha/bigtable/hot-tablets/list b/gcloud/alpha/bigtable/hot-tablets/list
index 67cc55cb1..d2040c2c4 100644
--- a/gcloud/alpha/bigtable/hot-tablets/list
+++ b/gcloud/alpha/bigtable/hot-tablets/list
@@ -53,7 +53,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/alpha/bigtable/logical-views/create b/gcloud/alpha/bigtable/logical-views/create
new file mode 100644
index 000000000..0aabe59b6
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/create
@@ -0,0 +1,78 @@
+NAME
+    gcloud alpha bigtable logical-views create - create a new Bigtable logical
+        view
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views create
+        (LOGICAL_VIEW : --instance=INSTANCE) --query=QUERY [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a new Bigtable logical view.
+
+EXAMPLES
+    To create a logical view, run:
+
+        $ gcloud alpha bigtable logical-views create my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to create. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views create
+
+        $ gcloud beta bigtable logical-views create
+
diff --git a/gcloud/alpha/bigtable/logical-views/delete b/gcloud/alpha/bigtable/logical-views/delete
new file mode 100644
index 000000000..2cd2235db
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/delete
@@ -0,0 +1,66 @@
+NAME
+    gcloud alpha bigtable logical-views delete - delete a Bigtable logical view
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views delete
+        (LOGICAL_VIEW : --instance=INSTANCE) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a Bigtable logical view.
+
+EXAMPLES
+    To delete a logical view, run:
+
+        $ gcloud alpha bigtable logical-views delete my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to delete. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views delete
+
+        $ gcloud beta bigtable logical-views delete
+
diff --git a/gcloud/alpha/bigtable/logical-views/describe b/gcloud/alpha/bigtable/logical-views/describe
new file mode 100644
index 000000000..e7d606328
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/describe
@@ -0,0 +1,67 @@
+NAME
+    gcloud alpha bigtable logical-views describe - describe an existing
+        Bigtable logical view
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views describe
+        (LOGICAL_VIEW : --instance=INSTANCE) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe an existing Bigtable logical view.
+
+EXAMPLES
+    To view a logical view's description, run:
+
+        $ gcloud alpha bigtable logical-views describe my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to describe. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views describe
+
+        $ gcloud beta bigtable logical-views describe
+
diff --git a/gcloud/alpha/bigtable/logical-views/help b/gcloud/alpha/bigtable/logical-views/help
new file mode 100644
index 000000000..3d59ffbe5
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/help
@@ -0,0 +1,42 @@
+NAME
+    gcloud alpha bigtable logical-views - manage Bigtable logical views
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Bigtable logical views.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Create a new Bigtable logical view.
+
+     delete
+        (ALPHA) Delete a Bigtable logical view.
+
+     describe
+        (ALPHA) Describe an existing Bigtable logical view.
+
+     list
+        (ALPHA) List existing Bigtable logical views.
+
+     update
+        (ALPHA) Update a Bigtable logical view.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views
+
+        $ gcloud beta bigtable logical-views
+
diff --git a/gcloud/alpha/bigtable/logical-views/list b/gcloud/alpha/bigtable/logical-views/list
new file mode 100644
index 000000000..6b1a259aa
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/list
@@ -0,0 +1,86 @@
+NAME
+    gcloud alpha bigtable logical-views list - list existing Bigtable logical
+        views
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views list --instance=INSTANCE
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List existing Bigtable logical views.
+
+EXAMPLES
+    To list all logical views for an instance, run:
+
+        $ gcloud alpha bigtable logical-views list --instance=my-instance-id
+
+REQUIRED FLAGS
+     Instance resource - The instance to list logical views for. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --instance=INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument --instance on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views list
+
+        $ gcloud beta bigtable logical-views list
+
diff --git a/gcloud/alpha/bigtable/logical-views/update b/gcloud/alpha/bigtable/logical-views/update
new file mode 100644
index 000000000..936ee8e29
--- /dev/null
+++ b/gcloud/alpha/bigtable/logical-views/update
@@ -0,0 +1,77 @@
+NAME
+    gcloud alpha bigtable logical-views update - update a Bigtable logical view
+
+SYNOPSIS
+    gcloud alpha bigtable logical-views update
+        (LOGICAL_VIEW : --instance=INSTANCE) --query=QUERY [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update a Bigtable logical view.
+
+EXAMPLES
+    To update a logical view to a new query, run:
+
+        $ gcloud alpha bigtable logical-views update my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family2 FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to update. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud bigtable logical-views update
+
+        $ gcloud beta bigtable logical-views update
+
diff --git a/gcloud/alpha/compute/firewall-policies/export-rules b/gcloud/alpha/compute/firewall-policies/export-rules
index 5f1270e1e..74aae7237 100644
--- a/gcloud/alpha/compute/firewall-policies/export-rules
+++ b/gcloud/alpha/compute/firewall-policies/export-rules
@@ -44,7 +44,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute firewall-policies export-rules
 
         $ gcloud beta compute firewall-policies export-rules
 
diff --git a/gcloud/alpha/compute/firewall-policies/import-rules b/gcloud/alpha/compute/firewall-policies/import-rules
index f10a9e82b..1f06ad161 100644
--- a/gcloud/alpha/compute/firewall-policies/import-rules
+++ b/gcloud/alpha/compute/firewall-policies/import-rules
@@ -45,7 +45,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute firewall-policies import-rules
 
         $ gcloud beta compute firewall-policies import-rules
 
diff --git a/gcloud/alpha/compute/firewall-policies/rules/create b/gcloud/alpha/compute/firewall-policies/rules/create
index cac26a57a..b45b385c2 100644
--- a/gcloud/alpha/compute/firewall-policies/rules/create
+++ b/gcloud/alpha/compute/firewall-policies/rules/create
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -16,7 +16,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -66,7 +66,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -75,12 +75,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -127,7 +127,7 @@ OPTIONAL FLAGS
      --src-ip-ranges=[SRC_IP_RANGE,...]
         Source IP ranges to match for this rule.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
         --src-network. It applies to ingress rules. Valid values are INTERNET,
@@ -136,12 +136,12 @@ OPTIONAL FLAGS
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
         Source Region Code to match for this rule. Can only be specified if
-        DIRECTION is ingress. Cannot be specified when the source network scope
+        DIRECTION is ingress. Cannot be specified when the source network type
         is NON_INTERNET, VPC_NETWORK or INTRA_VPC.
 
      --src-secure-tags=[SOURCE_SECURE_TAGS,...]
@@ -157,7 +157,7 @@ OPTIONAL FLAGS
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/alpha/compute/firewall-policies/rules/update b/gcloud/alpha/compute/firewall-policies/rules/update
index 928153fe6..32d05f0e9 100644
--- a/gcloud/alpha/compute/firewall-policies/rules/update
+++ b/gcloud/alpha/compute/firewall-policies/rules/update
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -17,7 +17,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -68,7 +68,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -77,12 +77,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -132,7 +132,7 @@ OPTIONAL FLAGS
      --src-ip-ranges=[SRC_IP_RANGE,...]
         Source IP ranges to match for this rule.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
         --src-network. It applies to ingress rules. Valid values are INTERNET,
@@ -141,12 +141,12 @@ OPTIONAL FLAGS
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
         Source Region Code to match for this rule. Can only be specified if
-        DIRECTION is ingress. Cannot be specified when the source network scope
+        DIRECTION is ingress. Cannot be specified when the source network type
         is NON_INTERNET, VPC_NETWORK or INTRA_VPC.
 
      --src-secure-tags=[SOURCE_SECURE_TAGS,...]
@@ -162,7 +162,7 @@ OPTIONAL FLAGS
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/alpha/compute/future-reservations/create b/gcloud/alpha/compute/future-reservations/create
index aa3f06288..e32b1cbe3 100644
--- a/gcloud/alpha/compute/future-reservations/create
+++ b/gcloud/alpha/compute/future-reservations/create
@@ -261,8 +261,8 @@ OPTIONAL FLAGS
         Maintenance for the reserved capacity. SCHEDULING_TYPE must be one of:
 
          GROUPED
-            In GROUPED mode, maintenance on all reserved instances
-            issynchronized.
+            In GROUPED mode, maintenance on all reserved instances is
+            synchronized.
          INDEPENDENT
             In INDEPENDENT mode, maintenance is not synchronized for this
             reservation, and each instance has its own maintenance window.
diff --git a/gcloud/alpha/compute/future-reservations/update b/gcloud/alpha/compute/future-reservations/update
index 77638cf02..994b965b6 100644
--- a/gcloud/alpha/compute/future-reservations/update
+++ b/gcloud/alpha/compute/future-reservations/update
@@ -102,8 +102,8 @@ FLAGS
         Maintenance for the reserved capacity. SCHEDULING_TYPE must be one of:
 
          GROUPED
-            In GROUPED mode, maintenance on all reserved instances
-            issynchronized.
+            In GROUPED mode, maintenance on all reserved instances is
+            synchronized.
          INDEPENDENT
             In INDEPENDENT mode, maintenance is not synchronized for this
             reservation, and each instance has its own maintenance window.
diff --git a/gcloud/alpha/compute/instances/report-host-as-faulty b/gcloud/alpha/compute/instances/report-host-as-faulty
index 648694922..f4b866cc9 100644
--- a/gcloud/alpha/compute/instances/report-host-as-faulty
+++ b/gcloud/alpha/compute/instances/report-host-as-faulty
@@ -5,7 +5,7 @@ NAME
 SYNOPSIS
     gcloud alpha compute instances report-host-as-faulty INSTANCE_NAME
         --disruption-schedule=DISRUPTION_SCHEDULE
-        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION]
+        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] [--async]
         [--zone=ZONE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -39,6 +39,10 @@ REQUIRED FLAGS
         fault being reported.
 
 OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
      --zone=ZONE
         Zone of the instance to operate on. If not specified, you might be
         prompted to select a zone (interactive mode only). gcloud attempts to
diff --git a/gcloud/alpha/compute/network-firewall-policies/export-rules b/gcloud/alpha/compute/network-firewall-policies/export-rules
index 6cf37421b..7ee44c9dc 100644
--- a/gcloud/alpha/compute/network-firewall-policies/export-rules
+++ b/gcloud/alpha/compute/network-firewall-policies/export-rules
@@ -48,7 +48,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies export-rules
 
         $ gcloud beta compute network-firewall-policies export-rules
 
diff --git a/gcloud/alpha/compute/network-firewall-policies/import-rules b/gcloud/alpha/compute/network-firewall-policies/import-rules
index 1c6b827b9..5c6fdcd6e 100644
--- a/gcloud/alpha/compute/network-firewall-policies/import-rules
+++ b/gcloud/alpha/compute/network-firewall-policies/import-rules
@@ -49,7 +49,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies import-rules
 
         $ gcloud beta compute network-firewall-policies import-rules
 
diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/create b/gcloud/alpha/compute/network-firewall-policies/rules/create
index dd9432e42..9565d4e76 100644
--- a/gcloud/alpha/compute/network-firewall-policies/rules/create
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/create
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -16,7 +16,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -74,7 +74,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -83,12 +83,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -132,16 +132,16 @@ OPTIONAL FLAGS
         --src-secure-tags.Multiple IP address blocks can be specified if they
         are separated by commas.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
-        --src-network. It applies to ingress rules. Valid values are INTERNET,
+        --src-networks. It applies to ingress rules. Valid values are INTERNET,
         NON_INTERNET, VPC_NETWORKS and INTRA_VPC. Use empty string to clear the
         field.
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
@@ -158,12 +158,12 @@ OPTIONAL FLAGS
         matches --src-ip-ranges or the tag of the source matches
         --src-secure-tags. Secure Tags can be assigned to instances during
         instance creation. Secure tags cannot be specified if source network
-        scope is INTERNET.
+        type is INTERNET.
 
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/update b/gcloud/alpha/compute/network-firewall-policies/rules/update
index a6355f777..86ec3b26c 100644
--- a/gcloud/alpha/compute/network-firewall-policies/rules/update
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/update
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -16,7 +16,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -67,7 +67,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -76,12 +76,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -128,16 +128,16 @@ OPTIONAL FLAGS
         --src-secure-tags.Multiple IP address blocks can be specified if they
         are separated by commas.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
-        --src-network. It applies to ingress rules. Valid values are INTERNET,
+        --src-networks. It applies to ingress rules. Valid values are INTERNET,
         NON_INTERNET, VPC_NETWORKS and INTRA_VPC. Use empty string to clear the
         field.
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
@@ -154,12 +154,12 @@ OPTIONAL FLAGS
         matches --src-ip-ranges or the tag of the source matches
         --src-secure-tags. Secure Tags can be assigned to instances during
         instance creation. Secure tags cannot be specified if source network
-        scope is INTERNET.
+        type is INTERNET.
 
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/alpha/compute/networks/subnets/create b/gcloud/alpha/compute/networks/subnets/create
index d518cbf05..ea153fafb 100644
--- a/gcloud/alpha/compute/networks/subnets/create
+++ b/gcloud/alpha/compute/networks/subnets/create
@@ -67,9 +67,13 @@ OPTIONAL FLAGS
         instances without a public ip address.
 
      --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
-        Set external IPv6 prefix to be allocated for this subnetwork.
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
 
-        For example, --external-ipv6-prefix 2600:1901:0:0:0:0:0:0/64
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
 
      --flow-sampling=FLOW_SAMPLING
         Can only be specified if VPC flow logging for this subnetwork is
diff --git a/gcloud/alpha/compute/networks/subnets/update b/gcloud/alpha/compute/networks/subnets/update
index 871432c1a..95155cf3b 100644
--- a/gcloud/alpha/compute/networks/subnets/update
+++ b/gcloud/alpha/compute/networks/subnets/update
@@ -71,9 +71,13 @@ FLAGS
         applicable when the [--role=ACTIVE] flag is being used.
 
      --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
-        Set external IPv6 prefix to be allocated for this subnetwork.
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
 
-        For example, --external-ipv6-prefix 2600:1901:0:0:0:0:0:0/64
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
 
      --flow-sampling=FLOW_SAMPLING
         Can only be specified if VPC Flow Logs for this subnetwork is enabled.
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/create b/gcloud/alpha/compute/os-config/policy-orchestrators/create
index afc557f82..bbb6e2ac8 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/create
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/create
@@ -143,7 +143,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators create
 
         $ gcloud beta compute os-config policy-orchestrators create
 
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/delete b/gcloud/alpha/compute/os-config/policy-orchestrators/delete
index cfd595001..07394625e 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/delete
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/delete
@@ -82,7 +82,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators delete
 
         $ gcloud beta compute os-config policy-orchestrators delete
 
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/describe b/gcloud/alpha/compute/os-config/policy-orchestrators/describe
index 5314cc885..35ae3dd78 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/describe
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/describe
@@ -76,7 +76,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators describe
 
         $ gcloud beta compute os-config policy-orchestrators describe
 
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/help b/gcloud/alpha/compute/os-config/policy-orchestrators/help
index 2b0592117..1ad778022 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/help
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/help
@@ -27,7 +27,7 @@ COMMANDS
         (ALPHA) Describe a policy orchestrator.
 
      list
-        (ALPHA) List policy orchestrators for a specified folder.
+        (ALPHA) List policy orchestrators.
 
      update
         (ALPHA) Update a policy orchestrator.
@@ -36,7 +36,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators
 
         $ gcloud beta compute os-config policy-orchestrators
 
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/list b/gcloud/alpha/compute/os-config/policy-orchestrators/list
index 688e91670..0f4922688 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/list
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/list
@@ -1,6 +1,6 @@
 NAME
     gcloud alpha compute os-config policy-orchestrators list - list policy
-        orchestrators for a specified folder
+        orchestrators
 
 SYNOPSIS
     gcloud alpha compute os-config policy-orchestrators list
@@ -9,7 +9,7 @@ SYNOPSIS
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) List policy orchestrators for a specified folder.
+    (ALPHA) List policy orchestrators.
 
 EXAMPLES
     To list the policy orchestrators in folder 123456, run:
@@ -18,10 +18,10 @@ EXAMPLES
             --folder 123456
 
 FLAGS
-     Project folder organization resource - Folder to list policy orchestrators
-     from. The arguments in this group can be used to specify the attributes of
-     this resource. (NOTE) Some attributes are not given arguments in this
-     group but can be set in other ways.
+     Project folder organization resource - Project, folder or organization to
+     list policy orchestrators from. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
 
      To set the project attribute:
       ◆ provide the argument --project on the command line;
@@ -92,7 +92,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators list
 
         $ gcloud beta compute os-config policy-orchestrators list
 
diff --git a/gcloud/alpha/compute/os-config/policy-orchestrators/update b/gcloud/alpha/compute/os-config/policy-orchestrators/update
index d8f96224c..ea04dcd50 100644
--- a/gcloud/alpha/compute/os-config/policy-orchestrators/update
+++ b/gcloud/alpha/compute/os-config/policy-orchestrators/update
@@ -157,7 +157,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators update
 
         $ gcloud beta compute os-config policy-orchestrators update
 
diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create
index 4fd5eb4fb..2652bf3ee 100644
--- a/gcloud/alpha/compute/queued-resources/create
+++ b/gcloud/alpha/compute/queued-resources/create
@@ -737,6 +737,11 @@ OPTIONAL FLAGS
          FLEX_START
             Instance is provisioned using the Flex Start provisioning model and
             has a limited runtime.
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/alpha/container/ai/help b/gcloud/alpha/container/ai/help
new file mode 100644
index 000000000..bbe5f497a
--- /dev/null
+++ b/gcloud/alpha/container/ai/help
@@ -0,0 +1,26 @@
+NAME
+    gcloud alpha container ai - manage AI related workloads for GKE
+
+SYNOPSIS
+    gcloud alpha container ai GROUP [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage AI related workloads for GKE.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     recommender
+        (ALPHA) Recommendation engine for GKE AI workloads.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/accelerators/help b/gcloud/alpha/container/ai/recommender/accelerators/help
new file mode 100644
index 000000000..8f8ab9483
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/accelerators/help
@@ -0,0 +1,28 @@
+NAME
+    gcloud alpha container ai recommender accelerators - manage supported
+        accelerators for GKE recommender
+
+SYNOPSIS
+    gcloud alpha container ai recommender accelerators COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage supported accelerators for GKE recommender.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List compatible accelerator profiles.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/accelerators/list b/gcloud/alpha/container/ai/recommender/accelerators/list
new file mode 100644
index 000000000..6a461122c
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/accelerators/list
@@ -0,0 +1,63 @@
+NAME
+    gcloud alpha container ai recommender accelerators list - list compatible
+        accelerator profiles
+
+SYNOPSIS
+    gcloud alpha container ai recommender accelerators list --model=MODEL
+        [--format=FORMAT; default="table"]
+        [--max-ntpot-milliseconds=MAX_NTPOT_MILLISECONDS]
+        [--model-server=MODEL_SERVER]
+        [--model-server-version=MODEL_SERVER_VERSION] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) This command lists all supported accelerators with their
+    performance details. By default, the supported accelerators are displayed
+    in a table format with select information for each accelerator. To see all
+    details, use --format=yaml.
+
+    To get supported model, model servers, and model server versions, run
+    gcloud alpha container ai recommender models list, gcloud alpha container
+    ai recommender model-servers list, and gcloud alpha container ai
+    recommender model-server-versions list. Alternatively, run gcloud alpha
+    container ai recommender model-and-server-combinations list to get all
+    supported model and server combinations.
+
+REQUIRED FLAGS
+     --model=MODEL
+        The model.
+
+OPTIONAL FLAGS
+     --format=FORMAT; default="table"
+        The output format. Default is table, which displays select information
+        in a table format. Use --format=yaml to display all details. FORMAT
+        must be one of: table, yaml.
+
+     --max-ntpot-milliseconds=MAX_NTPOT_MILLISECONDS
+        The maximum normalized time per output token (NTPOT) in milliseconds.
+        NTPOT is measured as the request_latency / output_tokens. If this field
+        is set, the command will only return accelerators that can meet the
+        target ntpot milliseconds and display their throughput performance at
+        the target latency. Otherwise, the command will return all accelerators
+        and display their highest throughput performance.
+
+     --model-server=MODEL_SERVER
+        The model server. If not specified, this defaults to any model server.
+
+     --model-server-version=MODEL_SERVER_VERSION
+        The model server version. If not specified, this defaults to the latest
+        version.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/help b/gcloud/alpha/container/ai/recommender/help
new file mode 100644
index 000000000..3ebb798b9
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/help
@@ -0,0 +1,50 @@
+NAME
+    gcloud alpha container ai recommender - recommendation engine for GKE AI
+        workloads
+
+SYNOPSIS
+    gcloud alpha container ai recommender GROUP [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) The GKE Inference Recommender helps simplify deploying AI inference
+    on Google Kubernetes Engine (GKE). It provides tailored recommendations
+    based on Google's internal benchmarks. Provide inputs like your preferred
+    open-source model (e.g. Llama, Gemma, or Mistral) and your application's
+    performance target. Based on these inputs, the recommender generates
+    accelerator choices with performance metrics, and detailed, ready-to-deploy
+    recommendations for compute, load balancing, and autoscaling. These
+    recommendations are provided as standard Kubernetes YAML manifests, which
+    you can deploy or modify.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     accelerators
+        (ALPHA) Manage supported accelerators for GKE recommender.
+
+     manifests
+        (ALPHA) Generate optimized Kubernetes manifests.
+
+     model-and-server-combinations
+        (ALPHA) Manage supported model and model servers for GKE recommender.
+
+     model-server-versions
+        (ALPHA) Manage supported model server versions for GKE recommender.
+
+     model-servers
+        (ALPHA) Manage supported model servers for GKE recommender.
+
+     models
+        (ALPHA) Manage supported models for GKE recommender.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/manifests/create b/gcloud/alpha/container/ai/recommender/manifests/create
new file mode 100644
index 000000000..429ce0496
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/manifests/create
@@ -0,0 +1,70 @@
+NAME
+    gcloud alpha container ai recommender manifests create - generate
+        ready-to-deploy Kubernetes manifests with compute, load balancing, and
+        autoscaling capabilities
+
+SYNOPSIS
+    gcloud alpha container ai recommender manifests create
+        --accelerator-type=ACCELERATOR_TYPE --model=MODEL
+        --model-server=MODEL_SERVER
+        [--model-server-version=MODEL_SERVER_VERSION] [--namespace=NAMESPACE]
+        [--output=OUTPUT; default="all"] [--output-path=OUTPUT_PATH]
+        [--target-ntpot-milliseconds=TARGET_NTPOT_MILLISECONDS]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) To get supported model, model servers, and model server versions,
+    run gcloud alpha container ai recommender model-and-server-combinations
+    list. To get supported accelerators with their performance metrics, run
+    gcloud alpha container ai recommender accelerators list.
+
+REQUIRED FLAGS
+     --accelerator-type=ACCELERATOR_TYPE
+        The accelerator type.
+
+     --model=MODEL
+        The model.
+
+     --model-server=MODEL_SERVER
+        The model server.
+
+OPTIONAL FLAGS
+     --model-server-version=MODEL_SERVER_VERSION
+        The model server version. If not specified, this defaults to the latest
+        version.
+
+     --namespace=NAMESPACE
+        The namespace to deploy the manifests in. Default namespace is
+        'default'.
+
+     --output=OUTPUT; default="all"
+        The output to display. Default is all. OUTPUT must be one of: manifest,
+        comments, all.
+
+     --output-path=OUTPUT_PATH
+        The path to save the output to. If not specified, output to the
+        terminal.
+
+     --target-ntpot-milliseconds=TARGET_NTPOT_MILLISECONDS
+        The maximum normalized time per output token (NTPOT) in milliseconds.
+        NTPOT is measured as the request_latency / output_tokens. If this is
+        set, the manifests will include Horizontal Pod Autoscaler (HPA)
+        resources which automatically adjust the model server replica count in
+        response to changes in model server load to keep p50 NTPOT below the
+        specified threshold. If the provided target-ntpot-milliseconds is too
+        low to achieve, the HPA manifest will not be generated.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/manifests/help b/gcloud/alpha/container/ai/recommender/manifests/help
new file mode 100644
index 000000000..82e682956
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/manifests/help
@@ -0,0 +1,29 @@
+NAME
+    gcloud alpha container ai recommender manifests - generate optimized
+        Kubernetes manifests
+
+SYNOPSIS
+    gcloud alpha container ai recommender manifests COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Generate optimized Kubernetes manifests.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Generate ready-to-deploy Kubernetes manifests with compute,
+        load balancing, and autoscaling capabilities.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-and-server-combinations/help b/gcloud/alpha/container/ai/recommender/model-and-server-combinations/help
new file mode 100644
index 000000000..058c854b2
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-and-server-combinations/help
@@ -0,0 +1,28 @@
+NAME
+    gcloud alpha container ai recommender model-and-server-combinations -
+        manage supported model and model servers for GKE recommender
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-and-server-combinations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage supported model and model servers for GKE recommender.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List supported model and server combinations.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-and-server-combinations/list b/gcloud/alpha/container/ai/recommender/model-and-server-combinations/list
new file mode 100644
index 000000000..97490f316
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-and-server-combinations/list
@@ -0,0 +1,38 @@
+NAME
+    gcloud alpha container ai recommender model-and-server-combinations list -
+        list supported model and server combinations
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-and-server-combinations list
+        [--model=MODEL] [--model-server=MODEL_SERVER]
+        [--model-server-version=MODEL_SERVER_VERSION] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) This command lists all supported model, model server, and model
+    server version combinations.
+
+FLAGS
+     --model=MODEL
+        The model. If not specified, this defaults to any model.
+
+     --model-server=MODEL_SERVER
+        The model server. If not specified, this defaults to any model server.
+
+     --model-server-version=MODEL_SERVER_VERSION
+        The model server version. If not specified, this defaults to the any
+        model server version.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-server-versions/help b/gcloud/alpha/container/ai/recommender/model-server-versions/help
new file mode 100644
index 000000000..56c283b02
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-server-versions/help
@@ -0,0 +1,28 @@
+NAME
+    gcloud alpha container ai recommender model-server-versions - manage
+        supported model server versions for GKE recommender
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-server-versions COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage supported model server versions for GKE recommender.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List supported model server versions.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-server-versions/list b/gcloud/alpha/container/ai/recommender/model-server-versions/list
new file mode 100644
index 000000000..85b3a8f98
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-server-versions/list
@@ -0,0 +1,36 @@
+NAME
+    gcloud alpha container ai recommender model-server-versions list - list
+        supported model server versions
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-server-versions list
+        --model=MODEL --model-server=MODEL_SERVER [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) To get supported model and model servers, run gcloud alpha
+    container ai recommender models list and gcloud alpha container ai
+    recommender model-servers list. Alternatively, run gcloud alpha container
+    ai recommender model-and-server-combinations list to get all supported
+    model and server combinations.
+
+REQUIRED FLAGS
+     --model=MODEL
+        The model.
+
+     --model-server=MODEL_SERVER
+        The model server. If not specified, this defaults to any model server.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-servers/help b/gcloud/alpha/container/ai/recommender/model-servers/help
new file mode 100644
index 000000000..36046810a
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-servers/help
@@ -0,0 +1,28 @@
+NAME
+    gcloud alpha container ai recommender model-servers - manage supported
+        model servers for GKE recommender
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-servers COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage supported model servers for GKE recommender.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List supported model servers for a given model.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/model-servers/list b/gcloud/alpha/container/ai/recommender/model-servers/list
new file mode 100644
index 000000000..b588f01f7
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/model-servers/list
@@ -0,0 +1,31 @@
+NAME
+    gcloud alpha container ai recommender model-servers list - list supported
+        model servers for a given model
+
+SYNOPSIS
+    gcloud alpha container ai recommender model-servers list --model=MODEL
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) To get supported models, run gcloud alpha container ai recommender
+    models list or to get all supported model and server combinations, run
+    gcloud alpha container ai recommender model-and-server-combinations list.
+
+REQUIRED FLAGS
+     --model=MODEL
+        The model.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/models/help b/gcloud/alpha/container/ai/recommender/models/help
new file mode 100644
index 000000000..c16bf0144
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/models/help
@@ -0,0 +1,27 @@
+NAME
+    gcloud alpha container ai recommender models - manage supported models for
+        GKE recommender
+
+SYNOPSIS
+    gcloud alpha container ai recommender models COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage supported models for GKE recommender.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List supported models.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/ai/recommender/models/list b/gcloud/alpha/container/ai/recommender/models/list
new file mode 100644
index 000000000..60015b1ee
--- /dev/null
+++ b/gcloud/alpha/container/ai/recommender/models/list
@@ -0,0 +1,23 @@
+NAME
+    gcloud alpha container ai recommender models list - list supported models
+
+SYNOPSIS
+    gcloud alpha container ai recommender models list [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List supported models.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/fleet/help b/gcloud/alpha/container/fleet/help
index 242908f16..4f3f4f3ad 100644
--- a/gcloud/alpha/container/fleet/help
+++ b/gcloud/alpha/container/fleet/help
@@ -91,6 +91,9 @@ GROUPS
      policycontroller
         (ALPHA) Manage Policy Controller Feature.
 
+     rbacrolebindingactuation
+        (ALPHA) Manage RbacRoleBinding Actuation.
+
      scopes
         (ALPHA) Manage scopes of all your GKE fleets.
 
diff --git a/gcloud/alpha/container/fleet/rbacrolebindingactuation/describe b/gcloud/alpha/container/fleet/rbacrolebindingactuation/describe
new file mode 100644
index 000000000..8096d6a1a
--- /dev/null
+++ b/gcloud/alpha/container/fleet/rbacrolebindingactuation/describe
@@ -0,0 +1,22 @@
+NAME
+    gcloud alpha container fleet rbacrolebindingactuation describe - describe
+        the status of the RbacRoleBinding Actuation Feature in a fleet
+
+SYNOPSIS
+    gcloud alpha container fleet rbacrolebindingactuation describe
+        [GCLOUD_WIDE_FLAG ...]
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/fleet/rbacrolebindingactuation/help b/gcloud/alpha/container/fleet/rbacrolebindingactuation/help
new file mode 100644
index 000000000..6f0e909c9
--- /dev/null
+++ b/gcloud/alpha/container/fleet/rbacrolebindingactuation/help
@@ -0,0 +1,32 @@
+NAME
+    gcloud alpha container fleet rbacrolebindingactuation - manage
+        RbacRoleBinding Actuation
+
+SYNOPSIS
+    gcloud alpha container fleet rbacrolebindingactuation COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage RbacRoleBinding Actuation.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (ALPHA) Describe the status of the RbacRoleBinding Actuation Feature in
+        a fleet.
+
+     update
+        (ALPHA) Update RbacRoleBinding Actuation Feature.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/fleet/rbacrolebindingactuation/update b/gcloud/alpha/container/fleet/rbacrolebindingactuation/update
new file mode 100644
index 000000000..c5e914490
--- /dev/null
+++ b/gcloud/alpha/container/fleet/rbacrolebindingactuation/update
@@ -0,0 +1,36 @@
+NAME
+    gcloud alpha container fleet rbacrolebindingactuation update - update
+        RbacRoleBinding Actuation Feature
+
+SYNOPSIS
+    gcloud alpha container fleet rbacrolebindingactuation update
+        --allowed-custom-roles=ROLES,[ROLES,...] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) This command updates RbacRoleBinding Actuation Feature in a fleet.
+
+EXAMPLES
+    To update the RbacRoleBinding Actuation Feature, run:
+
+        $ gcloud container fleet rbacrolebinding-actuation update \
+            --allowed-custom-roles=role1,role2
+
+REQUIRED FLAGS
+     --allowed-custom-roles=ROLES,[ROLES,...]
+        The list of allowed custom roles that can be used in scope
+        RBACRoleBindings.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/help b/gcloud/alpha/container/help
index 75222b18e..8f71e710a 100644
--- a/gcloud/alpha/container/help
+++ b/gcloud/alpha/container/help
@@ -16,6 +16,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     ai
+        (ALPHA) Manage AI related workloads for GKE.
+
      attached
         (ALPHA) Manage Attached clusters for running containers.
 
diff --git a/gcloud/alpha/container/hub/help b/gcloud/alpha/container/hub/help
index 57e0cae6c..bc76de3b3 100644
--- a/gcloud/alpha/container/hub/help
+++ b/gcloud/alpha/container/hub/help
@@ -91,6 +91,9 @@ GROUPS
      policycontroller
         (ALPHA) Manage Policy Controller Feature.
 
+     rbacrolebindingactuation
+        (ALPHA) Manage RbacRoleBinding Actuation.
+
      scopes
         (ALPHA) Manage scopes of all your GKE fleets.
 
diff --git a/gcloud/alpha/container/hub/rbacrolebindingactuation/describe b/gcloud/alpha/container/hub/rbacrolebindingactuation/describe
new file mode 100644
index 000000000..eba528b3a
--- /dev/null
+++ b/gcloud/alpha/container/hub/rbacrolebindingactuation/describe
@@ -0,0 +1,22 @@
+NAME
+    gcloud alpha container hub rbacrolebindingactuation describe - describe the
+        status of the RbacRoleBinding Actuation Feature in a fleet
+
+SYNOPSIS
+    gcloud alpha container hub rbacrolebindingactuation describe
+        [GCLOUD_WIDE_FLAG ...]
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/hub/rbacrolebindingactuation/help b/gcloud/alpha/container/hub/rbacrolebindingactuation/help
new file mode 100644
index 000000000..85552a23a
--- /dev/null
+++ b/gcloud/alpha/container/hub/rbacrolebindingactuation/help
@@ -0,0 +1,32 @@
+NAME
+    gcloud alpha container hub rbacrolebindingactuation - manage
+        RbacRoleBinding Actuation
+
+SYNOPSIS
+    gcloud alpha container hub rbacrolebindingactuation COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage RbacRoleBinding Actuation.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (ALPHA) Describe the status of the RbacRoleBinding Actuation Feature in
+        a fleet.
+
+     update
+        (ALPHA) Update RbacRoleBinding Actuation Feature.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/container/hub/rbacrolebindingactuation/update b/gcloud/alpha/container/hub/rbacrolebindingactuation/update
new file mode 100644
index 000000000..bf3e28d76
--- /dev/null
+++ b/gcloud/alpha/container/hub/rbacrolebindingactuation/update
@@ -0,0 +1,36 @@
+NAME
+    gcloud alpha container hub rbacrolebindingactuation update - update
+        RbacRoleBinding Actuation Feature
+
+SYNOPSIS
+    gcloud alpha container hub rbacrolebindingactuation update
+        --allowed-custom-roles=ROLES,[ROLES,...] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) This command updates RbacRoleBinding Actuation Feature in a fleet.
+
+EXAMPLES
+    To update the RbacRoleBinding Actuation Feature, run:
+
+        $ gcloud container fleet rbacrolebinding-actuation update \
+            --allowed-custom-roles=role1,role2
+
+REQUIRED FLAGS
+     --allowed-custom-roles=ROLES,[ROLES,...]
+        The list of allowed custom roles that can be used in scope
+        RBACRoleBindings.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/create b/gcloud/alpha/developer-connect/account-connectors/create
new file mode 100644
index 000000000..dd038ecae
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/create
@@ -0,0 +1,180 @@
+NAME
+    gcloud alpha developer-connect account-connectors create - create
+        accountConnectors
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors create
+        (ACCOUNT_CONNECTOR : --location=LOCATION)
+        [--annotations=[ANNOTATIONS,...]] [--async] [--etag=ETAG]
+        [--labels=[LABELS,...]] [--request-id=REQUEST_ID] [--validate-only]
+        [--provider-oauth-config-scopes=[PROVIDER_OAUTH_CONFIG_SCOPES,...]
+          : --provider-oauth-config-system-id=PROVIDER_OAUTH_CONFIG_SYSTEM_ID]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create an accountConnector
+
+EXAMPLES
+    To create the accountConnector, run:
+
+        $ gcloud alpha developer-connect account-connectors create
+
+POSITIONAL ARGUMENTS
+     AccountConnector resource - Identifier. The resource name of the
+     userConnection, in the format
+     projects/{project}/locations/{location}/accountConnectors/{account_connector_id}.
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument account_connector on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ACCOUNT_CONNECTOR
+          ID of the accountConnector or fully qualified identifier for the
+          accountConnector.
+
+          To set the account_connector attribute:
+          ▸ provide the argument account_connector on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the accountConnector resource.
+
+          To set the location attribute:
+          ▸ provide the argument account_connector on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --annotations=[ANNOTATIONS,...]
+        Allows users to store small amounts of arbitrary data.
+
+         KEY
+            Sets KEY value.
+
+         VALUE
+            Sets VALUE value.
+
+        Shorthand Example:
+
+            --annotations=string=string
+
+        JSON Example:
+
+            --annotations='{"string": "string"}'
+
+        File Example:
+
+            --annotations=path_to_file.(yaml|json)
+
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --etag=ETAG
+        This checksum is computed by the server based on the value of other
+        fields, and may be sent on update and delete requests to ensure the
+        client has an up-to-date value before proceeding.
+
+     --labels=[LABELS,...]
+        Labels as key value pairs.
+
+         KEY
+            Keys must start with a lowercase character and contain only hyphens
+            (-), underscores (_), lowercase characters, and numbers.
+
+         VALUE
+            Values must contain only hyphens (-), underscores (_), lowercase
+            characters, and numbers.
+
+        Shorthand Example:
+
+            --labels=string=string
+
+        JSON Example:
+
+            --labels='{"string": "string"}'
+
+        File Example:
+
+            --labels=path_to_file.(yaml|json)
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+     --validate-only
+        If set, validate the request, but do not actually post it.
+
+     Arguments for the account connector config.
+
+       ProviderOAuthConfig is the OAuth config for a provider.
+
+         --provider-oauth-config-scopes=[PROVIDER_OAUTH_CONFIG_SCOPES,...]
+            User selected scopes to apply to the Oauth config In the event of
+            changing scopes, user records under AccountConnector will be
+            deleted and users will re-auth again.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         Arguments for the oauth provider id.
+
+           --provider-oauth-config-system-id=PROVIDER_OAUTH_CONFIG_SYSTEM_ID
+              Developer Connect provided OAuth. PROVIDER_OAUTH_CONFIG_SYSTEM_ID
+              must be one of:
+
+               github
+                  GitHub provider. Scopes can be found at
+                  https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/scopes-for-oauth-apps#available-scopes
+               gitlab
+                  GitLab provider. Scopes can be found at
+                  https://docs.gitlab.com/user/profile/personal_access_tokens/#personal-access-token-scopes
+               google
+                  Google provider. Recommended scopes:
+                  "https://www.googleapis.com/auth/drive.readonly",
+                  "https://www.googleapis.com/auth/documents.readonly"
+               rovo
+                  Rovo provider. Must select the "rovo" scope.
+               sentry
+                  Sentry provider. Scopes can be found at
+                  https://docs.sentry.io/api/permissions/
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the developerconnect/v1 API. The full documentation for
+    this API can be found at:
+    http://cloud.google.com/developer-connect/docs/overview
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/delete b/gcloud/alpha/developer-connect/account-connectors/delete
new file mode 100644
index 000000000..334cfbfd1
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/delete
@@ -0,0 +1,102 @@
+NAME
+    gcloud alpha developer-connect account-connectors delete - delete
+        accountConnectors
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors delete
+        (ACCOUNT_CONNECTOR : --location=LOCATION) [--async] [--etag=ETAG]
+        [--force] [--request-id=REQUEST_ID] [--validate-only]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete an accountConnector
+
+EXAMPLES
+    To delete the accountConnector, run:
+
+        $ gcloud alpha developer-connect account-connectors delete
+
+POSITIONAL ARGUMENTS
+     AccountConnector resource - Name of the resource The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument account_connector on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ACCOUNT_CONNECTOR
+          ID of the accountConnector or fully qualified identifier for the
+          accountConnector.
+
+          To set the account_connector attribute:
+          ▸ provide the argument account_connector on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the accountConnector resource.
+
+          To set the location attribute:
+          ▸ provide the argument account_connector on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --etag=ETAG
+        The current etag of the AccountConnectorn. If an etag is provided and
+        does not match the current etag of the AccountConnector, deletion will
+        be blocked and an ABORTED error will be returned.
+
+     --force
+        If set to true, any Users from this AccountConnector will also be
+        deleted. (Otherwise, the request will only work if the AccountConnector
+        has no Users.)
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes after the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+     --validate-only
+        If set, validate the request, but do not actually post it.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the developerconnect/v1 API. The full documentation for
+    this API can be found at:
+    http://cloud.google.com/developer-connect/docs/overview
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/describe b/gcloud/alpha/developer-connect/account-connectors/describe
new file mode 100644
index 000000000..837f780f5
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/describe
@@ -0,0 +1,67 @@
+NAME
+    gcloud alpha developer-connect account-connectors describe - describe
+        accountConnectors
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors describe
+        (ACCOUNT_CONNECTOR : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe an accountConnector
+
+EXAMPLES
+    To describe the accountConnector, run:
+
+        $ gcloud alpha developer-connect account-connectors describe
+
+POSITIONAL ARGUMENTS
+     AccountConnector resource - Name of the resource The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument account_connector on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ACCOUNT_CONNECTOR
+          ID of the accountConnector or fully qualified identifier for the
+          accountConnector.
+
+          To set the account_connector attribute:
+          ▸ provide the argument account_connector on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the accountConnector resource.
+
+          To set the location attribute:
+          ▸ provide the argument account_connector on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the developerconnect/v1 API. The full documentation for
+    this API can be found at:
+    http://cloud.google.com/developer-connect/docs/overview
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/help b/gcloud/alpha/developer-connect/account-connectors/help
new file mode 100644
index 000000000..2da6bfb9e
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/help
@@ -0,0 +1,40 @@
+NAME
+    gcloud alpha developer-connect account-connectors - manage Account
+        Connector resources
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Account Connector resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Create accountConnectors.
+
+     delete
+        (ALPHA) Delete accountConnectors.
+
+     describe
+        (ALPHA) Describe accountConnectors.
+
+     list
+        (ALPHA) List accountConnectors.
+
+     update
+        (ALPHA) Update accountConnectors.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/list b/gcloud/alpha/developer-connect/account-connectors/list
new file mode 100644
index 000000000..f9096ea68
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/list
@@ -0,0 +1,87 @@
+NAME
+    gcloud alpha developer-connect account-connectors list - list
+        accountConnectors
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List accountConnectors
+
+EXAMPLES
+    To list all accountConnectors, run:
+
+        $ gcloud alpha developer-connect account-connectors list
+
+REQUIRED FLAGS
+     Location resource - Parent value for ListAccountConnectorsRequest This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the developerconnect/v1 API. The full documentation for
+    this API can be found at:
+    http://cloud.google.com/developer-connect/docs/overview
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/account-connectors/update b/gcloud/alpha/developer-connect/account-connectors/update
new file mode 100644
index 000000000..8af4dc171
--- /dev/null
+++ b/gcloud/alpha/developer-connect/account-connectors/update
@@ -0,0 +1,241 @@
+NAME
+    gcloud alpha developer-connect account-connectors update - update
+        accountConnectors
+
+SYNOPSIS
+    gcloud alpha developer-connect account-connectors update
+        (ACCOUNT_CONNECTOR : --location=LOCATION) [--[no-]allow-missing]
+        [--async] [--etag=ETAG] [--request-id=REQUEST_ID]
+        [--[no-]validate-only]
+        [--annotations=[ANNOTATIONS,...]
+          | --update-annotations=[UPDATE_ANNOTATIONS,...] --clear-annotations
+          | --remove-annotations=[__REMOVE_ANNOTATIONS,...]]
+        [--clear-provider-oauth-config
+          --provider-oauth-config-scopes=[PROVIDER_OAUTH_CONFIG_SCOPES,...]]
+        [--labels=[LABELS,...]
+          | --update-labels=[UPDATE_LABELS,...] --clear-labels
+          | --remove-labels=[__REMOVE_LABELS,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update an accountConnector
+
+EXAMPLES
+    To update the accountConnector, run:
+
+        $ gcloud alpha developer-connect account-connectors update
+
+POSITIONAL ARGUMENTS
+     AccountConnector resource - Identifier. The resource name of the
+     userConnection, in the format
+     projects/{project}/locations/{location}/accountConnectors/{account_connector_id}.
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument account_connector on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ACCOUNT_CONNECTOR
+          ID of the accountConnector or fully qualified identifier for the
+          accountConnector.
+
+          To set the account_connector attribute:
+          ▸ provide the argument account_connector on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the accountConnector resource.
+
+          To set the location attribute:
+          ▸ provide the argument account_connector on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --[no-]allow-missing
+        If set to true, and the userConnection is not found a new
+        userConnection will be created. In this situation update_mask is
+        ignored. The creation will succeed only if the input userConnection has
+        all the necessary. Use --allow-missing to enable and --no-allow-missing
+        to disable.
+
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --etag=ETAG
+        This checksum is computed by the server based on the value of other
+        fields, and may be sent on update and delete requests to ensure the
+        client has an up-to-date value before proceeding.
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+     --[no-]validate-only
+        If set, validate the request, but do not actually post it. Use
+        --validate-only to enable and --no-validate-only to disable.
+
+     Update annotations.
+
+     At most one of these can be specified:
+
+       --annotations=[ANNOTATIONS,...]
+          Set annotations to new value. Allows users to store small amounts of
+          arbitrary data.
+
+           KEY
+              Sets KEY value.
+
+           VALUE
+              Sets VALUE value.
+
+          Shorthand Example:
+
+              --annotations=string=string
+
+          JSON Example:
+
+              --annotations='{"string": "string"}'
+
+          File Example:
+
+              --annotations=path_to_file.(yaml|json)
+
+       --update-annotations=[UPDATE_ANNOTATIONS,...]
+          Update annotations value or add key value pair. Allows users to store
+          small amounts of arbitrary data.
+
+           KEY
+              Sets KEY value.
+
+           VALUE
+              Sets VALUE value.
+
+          Shorthand Example:
+
+              --update-annotations=string=string
+
+          JSON Example:
+
+              --update-annotations='{"string": "string"}'
+
+          File Example:
+
+              --update-annotations=path_to_file.(yaml|json)
+
+       At most one of these can be specified:
+
+         --clear-annotations
+            Clear annotations value and set to empty map.
+
+         --remove-annotations=[__REMOVE_ANNOTATIONS,...]
+            Remove existing value from map annotations.
+
+     Arguments for the account connector config.
+
+       ProviderOAuthConfig is the OAuth config for a provider.
+
+         --clear-provider-oauth-config
+            Set accountConnector.providerOauthConfig back to default value.
+
+         --provider-oauth-config-scopes=[PROVIDER_OAUTH_CONFIG_SCOPES,...]
+            User selected scopes to apply to the Oauth config In the event of
+            changing scopes, user records under AccountConnector will be
+            deleted and users will re-auth again.
+
+     Update labels.
+
+     At most one of these can be specified:
+
+       --labels=[LABELS,...]
+          Set labels to new value. Labels as key value pairs.
+
+           KEY
+              Keys must start with a lowercase character and contain only
+              hyphens (-), underscores (_), lowercase characters, and numbers.
+
+           VALUE
+              Values must contain only hyphens (-), underscores (_), lowercase
+              characters, and numbers.
+
+          Shorthand Example:
+
+              --labels=string=string
+
+          JSON Example:
+
+              --labels='{"string": "string"}'
+
+          File Example:
+
+              --labels=path_to_file.(yaml|json)
+
+       --update-labels=[UPDATE_LABELS,...]
+          Update labels value or add key value pair. Labels as key value pairs.
+
+           KEY
+              Keys must start with a lowercase character and contain only
+              hyphens (-), underscores (_), lowercase characters, and numbers.
+
+           VALUE
+              Values must contain only hyphens (-), underscores (_), lowercase
+              characters, and numbers.
+
+          Shorthand Example:
+
+              --update-labels=string=string
+
+          JSON Example:
+
+              --update-labels='{"string": "string"}'
+
+          File Example:
+
+              --update-labels=path_to_file.(yaml|json)
+
+       At most one of these can be specified:
+
+         --clear-labels
+            Clear labels value and set to empty map.
+
+         --remove-labels=[__REMOVE_LABELS,...]
+            Remove existing value from map labels.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the developerconnect/v1 API. The full documentation for
+    this API can be found at:
+    http://cloud.google.com/developer-connect/docs/overview
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/developer-connect/help b/gcloud/alpha/developer-connect/help
index d2aa1abb9..8562d335e 100644
--- a/gcloud/alpha/developer-connect/help
+++ b/gcloud/alpha/developer-connect/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     account-connectors
+        (ALPHA) Manage Account Connector resources.
+
      connections
         (ALPHA) Manage connection resources.
 
diff --git a/gcloud/alpha/firestore/bulk-delete b/gcloud/alpha/firestore/bulk-delete
index 054bbeb61..2cce00601 100644
--- a/gcloud/alpha/firestore/bulk-delete
+++ b/gcloud/alpha/firestore/bulk-delete
@@ -66,7 +66,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud firestore bulk-delete
 
         $ gcloud beta firestore bulk-delete
 
diff --git a/gcloud/alpha/iap/settings/get b/gcloud/alpha/iap/settings/get
index f00048d4f..61ef4f23f 100644
--- a/gcloud/alpha/iap/settings/get
+++ b/gcloud/alpha/iap/settings/get
@@ -97,11 +97,9 @@ FLAGS
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. For Backend Services, you can use
-        both compute and backend-services as resource type.
-        --resource-type=cloud-run is in private preview and reach out to IAP
-        team in case of any queries. RESOURCE_TYPE must be one of: app-engine,
-        iap_web, compute, organization, folder, forwarding-rule, cloud-run,
-        backend-services.
+        both compute and backend-services as resource type. RESOURCE_TYPE must
+        be one of: app-engine, iap_web, compute, organization, folder,
+        forwarding-rule, cloud-run, backend-services.
 
      --service=SERVICE
         Service name. Optional when resource-type is compute or app-engine.
diff --git a/gcloud/alpha/iap/settings/set b/gcloud/alpha/iap/settings/set
index 02b829625..42760fc8a 100644
--- a/gcloud/alpha/iap/settings/set
+++ b/gcloud/alpha/iap/settings/set
@@ -148,11 +148,9 @@ FLAGS
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. For Backend Services, you can use
-        both compute and backend-services as resource type.
-        --resource-type=cloud-run is in private preview and reach out to IAP
-        team in case of any queries. RESOURCE_TYPE must be one of: app-engine,
-        iap_web, compute, organization, folder, forwarding-rule, cloud-run,
-        backend-services.
+        both compute and backend-services as resource type. RESOURCE_TYPE must
+        be one of: app-engine, iap_web, compute, organization, folder,
+        forwarding-rule, cloud-run, backend-services.
 
      --service=SERVICE
         Service name. Optional when resource-type is compute or app-engine.
diff --git a/gcloud/alpha/iap/web/add-iam-policy-binding b/gcloud/alpha/iap/web/add-iam-policy-binding
index 4be3cff6c..27f5d45b7 100644
--- a/gcloud/alpha/iap/web/add-iam-policy-binding
+++ b/gcloud/alpha/iap/web/add-iam-policy-binding
@@ -121,10 +121,8 @@ OPTIONAL FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/alpha/iap/web/get-iam-policy b/gcloud/alpha/iap/web/get-iam-policy
index be679c450..8b6056351 100644
--- a/gcloud/alpha/iap/web/get-iam-policy
+++ b/gcloud/alpha/iap/web/get-iam-policy
@@ -71,10 +71,8 @@ FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/alpha/iap/web/remove-iam-policy-binding b/gcloud/alpha/iap/web/remove-iam-policy-binding
index 75ebc6c12..d4814c2ba 100644
--- a/gcloud/alpha/iap/web/remove-iam-policy-binding
+++ b/gcloud/alpha/iap/web/remove-iam-policy-binding
@@ -138,10 +138,8 @@ OPTIONAL FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/alpha/iap/web/set-iam-policy b/gcloud/alpha/iap/web/set-iam-policy
index 9d577d478..127f77c07 100644
--- a/gcloud/alpha/iap/web/set-iam-policy
+++ b/gcloud/alpha/iap/web/set-iam-policy
@@ -79,10 +79,8 @@ FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/alpha/memorystore/backup-collections/backups/delete b/gcloud/alpha/memorystore/backup-collections/backups/delete
new file mode 100644
index 000000000..0ddfe93ff
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/backups/delete
@@ -0,0 +1,86 @@
+NAME
+    gcloud alpha memorystore backup-collections backups delete - delete backups
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections backups delete
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a backup
+
+EXAMPLES
+    To delete the backup, run:
+
+        $ gcloud alpha memorystore backup-collections backups delete
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --request-id=REQUEST_ID
+        Idempotent request UUID.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections backups delete
+
+        $ gcloud beta memorystore backup-collections backups delete
+
diff --git a/gcloud/alpha/memorystore/backup-collections/backups/describe b/gcloud/alpha/memorystore/backup-collections/backups/describe
new file mode 100644
index 000000000..651ec2fd5
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/backups/describe
@@ -0,0 +1,79 @@
+NAME
+    gcloud alpha memorystore backup-collections backups describe - describe
+        backups
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections backups describe
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe a backup
+
+EXAMPLES
+    To describe the backup, run:
+
+        $ gcloud alpha memorystore backup-collections backups describe
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections backups describe
+
+        $ gcloud beta memorystore backup-collections backups describe
+
diff --git a/gcloud/alpha/memorystore/backup-collections/backups/export b/gcloud/alpha/memorystore/backup-collections/backups/export
new file mode 100644
index 000000000..9779af5c1
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/backups/export
@@ -0,0 +1,86 @@
+NAME
+    gcloud alpha memorystore backup-collections backups export - export backups
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections backups export
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--gcs-bucket=GCS_BUCKET] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) export backups
+
+EXAMPLES
+    To export all backups, run:
+
+        $ gcloud alpha memorystore backup-collections backups export
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --gcs-bucket=GCS_BUCKET
+        Google Cloud Storage bucket, like "my-bucket".
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections backups export
+
+        $ gcloud beta memorystore backup-collections backups export
+
diff --git a/gcloud/alpha/memorystore/backup-collections/backups/help b/gcloud/alpha/memorystore/backup-collections/backups/help
new file mode 100644
index 000000000..a1cfda3bb
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/backups/help
@@ -0,0 +1,41 @@
+NAME
+    gcloud alpha memorystore backup-collections backups - manage Backup
+        resources
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections backups COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Backup resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     delete
+        (ALPHA) Delete backups.
+
+     describe
+        (ALPHA) Describe backups.
+
+     export
+        (ALPHA) export backups.
+
+     list
+        (ALPHA) List backups.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections backups
+
+        $ gcloud beta memorystore backup-collections backups
+
diff --git a/gcloud/alpha/memorystore/backup-collections/backups/list b/gcloud/alpha/memorystore/backup-collections/backups/list
new file mode 100644
index 000000000..b1cf3eb1e
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/backups/list
@@ -0,0 +1,105 @@
+NAME
+    gcloud alpha memorystore backup-collections backups list - list backups
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections backups list
+        (--backup-collection=BACKUP_COLLECTION : --location=LOCATION)
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List backups
+
+EXAMPLES
+    To list all backups, run:
+
+        $ gcloud alpha memorystore backup-collections backups list
+
+REQUIRED FLAGS
+     BackupCollection resource - The resource name of the backupCollection
+     using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --backup-collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument --backup-collection on the command line.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument --backup-collection on the command line with
+            a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections backups list
+
+        $ gcloud beta memorystore backup-collections backups list
+
diff --git a/gcloud/alpha/memorystore/backup-collections/describe b/gcloud/alpha/memorystore/backup-collections/describe
new file mode 100644
index 000000000..4de397b53
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/describe
@@ -0,0 +1,73 @@
+NAME
+    gcloud alpha memorystore backup-collections describe - describe
+        backupCollections
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections describe
+        (BACKUP_COLLECTION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe a backupCollection
+
+EXAMPLES
+    To describe the backupCollection, run:
+
+        $ gcloud alpha memorystore backup-collections describe
+
+POSITIONAL ARGUMENTS
+     BackupCollection resource - Instance backupCollection resource name using
+     the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup_collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup_collection attribute:
+          ▸ provide the argument backup_collection on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup_collection on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections describe
+
+        $ gcloud beta memorystore backup-collections describe
+
diff --git a/gcloud/alpha/memorystore/backup-collections/help b/gcloud/alpha/memorystore/backup-collections/help
new file mode 100644
index 000000000..94beb0d8c
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/help
@@ -0,0 +1,41 @@
+NAME
+    gcloud alpha memorystore backup-collections - manage Backup Collection
+        resources
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections GROUP | COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Backup Collection resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     backups
+        (ALPHA) Manage Backup resources.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (ALPHA) Describe backupCollections.
+
+     list
+        (ALPHA) List backupCollections.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections
+
+        $ gcloud beta memorystore backup-collections
+
diff --git a/gcloud/alpha/memorystore/backup-collections/list b/gcloud/alpha/memorystore/backup-collections/list
new file mode 100644
index 000000000..e4753acbf
--- /dev/null
+++ b/gcloud/alpha/memorystore/backup-collections/list
@@ -0,0 +1,91 @@
+NAME
+    gcloud alpha memorystore backup-collections list - list backupCollections
+
+SYNOPSIS
+    gcloud alpha memorystore backup-collections list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List backupCollections
+
+EXAMPLES
+    To list all backupCollections, run:
+
+        $ gcloud alpha memorystore backup-collections list
+
+REQUIRED FLAGS
+     Location resource - The resource name of the backupCollection location
+     using the form: projects/{project_id}/locations/{location_id} where
+     location_id refers to a Google Cloud region. This represents a Cloud
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore backup-collections list
+
+        $ gcloud beta memorystore backup-collections list
+
diff --git a/gcloud/alpha/memorystore/help b/gcloud/alpha/memorystore/help
index f27f7f6c8..22763c963 100644
--- a/gcloud/alpha/memorystore/help
+++ b/gcloud/alpha/memorystore/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     backup-collections
+        (ALPHA) Manage Backup Collection resources.
+
      instances
         (ALPHA) Manage Instance resources.
 
diff --git a/gcloud/alpha/memorystore/instances/backup b/gcloud/alpha/memorystore/instances/backup
new file mode 100644
index 000000000..fa3217d81
--- /dev/null
+++ b/gcloud/alpha/memorystore/instances/backup
@@ -0,0 +1,83 @@
+NAME
+    gcloud alpha memorystore instances backup - backup instances
+
+SYNOPSIS
+    gcloud alpha memorystore instances backup (INSTANCE : --location=LOCATION)
+        [--async] [--backup-id=BACKUP_ID] [--ttl=TTL] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) backup instances
+
+EXAMPLES
+    To backup all instances, run:
+
+        $ gcloud alpha memorystore instances backup
+
+POSITIONAL ARGUMENTS
+     Instance resource - Instance resource name using the form:
+     projects/{project_id}/locations/{location_id}/instances/{instance_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument instance on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the instance resource.
+
+          To set the location attribute:
+          ▸ provide the argument instance on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --backup-id=BACKUP_ID
+        The id of the backup to be created. If not specified, the default value
+        ([YYYYMMDDHHMMSS][Shortened Instance UID] is used.
+
+     --ttl=TTL
+        TTL for the backup to expire. Value range is 1 day to 100 years. If not
+        specified, the default value is 100 years.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1alpha API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. These variants are also available:
+
+        $ gcloud memorystore instances backup
+
+        $ gcloud beta memorystore instances backup
+
diff --git a/gcloud/alpha/memorystore/instances/create b/gcloud/alpha/memorystore/instances/create
index 64f0de240..e9d3e320c 100644
--- a/gcloud/alpha/memorystore/instances/create
+++ b/gcloud/alpha/memorystore/instances/create
@@ -19,7 +19,12 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          (--fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS)]
         [--cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE : --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --primary-instance=PRIMARY_INSTANCE]
+        [--gcs-source-uris=[GCS_SOURCE_URIS,...]
+          | --managed-backup-source=MANAGED_BACKUP_SOURCE]
         [--zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
           --zone-distribution-config-mode=ZONE_DISTRIBUTION_CONFIG_MODE]
         [GCLOUD_WIDE_FLAG ...]
@@ -262,7 +267,8 @@ FLAGS
           Ondemand maintenance for the instance.
 
      --psc-auto-connections=[network=NETWORK],[port=PORT],[projectId=PROJECTID]
-        User inputs and resource details of the auto-created PSC connections.
+        Deprecated: Use the endpoints.connections.psc_auto_connection value
+        instead.
 
          network
             The network where the PSC endpoints are created, in the form of
@@ -369,6 +375,53 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+           At least one of these must be specified:
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE
@@ -439,6 +492,27 @@ FLAGS
               To set the instance attribute:
               ◇ provide the argument --primary-instance on the command line.
 
+     Arguments for the import sources.
+
+     At most one of these can be specified:
+
+       Backups that stored in Cloud Storage buckets. The Cloud Storage buckets
+       need to be the same region as the instances.
+
+         --gcs-source-uris=[GCS_SOURCE_URIS,...]
+            Example: gs://bucket1/object1, gs://bucket2/folder2/object2
+
+       Backups that generated and managed by memorystore.
+
+         --managed-backup-source=MANAGED_BACKUP_SOURCE
+            Example:
+            //memorystore.googleapis.com/projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup}
+            A shorter version (without the prefix) of the backup name is also
+            supported, like
+            projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup_id}
+            In this case, it assumes the backup is under
+            memorystore.googleapis.com.
+
      Zone distribution configuration for allocation of instance resources.
 
        --zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
diff --git a/gcloud/alpha/memorystore/instances/help b/gcloud/alpha/memorystore/instances/help
index bfa0be130..76f0841e1 100644
--- a/gcloud/alpha/memorystore/instances/help
+++ b/gcloud/alpha/memorystore/instances/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 COMMANDS
     COMMAND is one of the following:
 
+     backup
+        (ALPHA) backup instances.
+
      create
         (ALPHA) Create a Memorystore instance.
 
diff --git a/gcloud/alpha/memorystore/instances/update b/gcloud/alpha/memorystore/instances/update
index 491654118..2b5f9cdca 100644
--- a/gcloud/alpha/memorystore/instances/update
+++ b/gcloud/alpha/memorystore/instances/update
@@ -14,6 +14,10 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          --clear-automated-backup-config
+          --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS]
         [--clear-cross-instance-replication-config
           --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE --clear-primary-instance | --primary-instance=PRIMARY_INSTANCE --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] | --add-cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --clear-cross-instance-replication-config-secondary-instances | --remove-cross-instance-replication-config-secondary-instances=[instance=INSTANCE]]
         [--clear-maintenance-policy
@@ -209,6 +213,54 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       --clear-automated-backup-config
+          Set instance.automatedBackupConfig back to default value.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --clear-cross-instance-replication-config
@@ -520,6 +572,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -531,11 +587,11 @@ FLAGS
 
           Shorthand Example:
 
-              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -565,6 +621,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -576,11 +636,11 @@ FLAGS
 
           Shorthand Example:
 
-              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -616,6 +676,10 @@ FLAGS
                         the form of
                         projects/{project_id}/global/networks/{network_id}.
 
+                     port
+                        port will only be set for Primary/Reader or Discovery
+                        endpoint.
+
                      pscConnectionId
                         The PSC connection id of the forwarding rule connected
                         to the service attachment.
@@ -627,11 +691,11 @@ FLAGS
 
             Shorthand Example:
 
-                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
             JSON Example:
 
-                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
             File Example:
 
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/help b/gcloud/alpha/network-services/multicast-group-range-activations/help
index c6bce3b14..702928d23 100644
--- a/gcloud/alpha/network-services/multicast-group-range-activations/help
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/help
@@ -29,6 +29,9 @@ COMMANDS
      list
         (ALPHA) List multicast group range activations.
 
+     update
+        (ALPHA) Update a multicast group range activation.
+
 NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/update b/gcloud/alpha/network-services/multicast-group-range-activations/update
new file mode 100644
index 000000000..62dffd2bc
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/update
@@ -0,0 +1,119 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations update -
+        update a multicast group range activation
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations update
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION) [--async]
+        [--description=DESCRIPTION] [--[no-]enable-logging]
+        [--update-labels=[KEY=VALUE,...]]
+        [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    Update a multicast group range activation with the name
+    'my-multicast-group-range-activation' and location 'zone'.
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            update my-multicast-group-range-activation --enable-logging \
+            --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - Name of the multicast group
+     range to be updated. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group range activation.
+
+     --[no-]enable-logging
+        Whether to enable logging for this multicast group range activation.
+        Use --enable-logging to enable and --no-enable-logging to disable.
+
+     --update-labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to update. If a label exists, its value
+        is modified. Otherwise, a new label is created.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     At most one of these can be specified:
+
+       --clear-labels
+          Remove all labels. If --update-labels is also specified then
+          --clear-labels is applied first.
+
+          For example, to remove all labels:
+
+              $ gcloud alpha network-services multicast-group-range-activations \
+                update --clear-labels
+
+          To remove all existing labels and create two new labels, foo and baz:
+
+              $ gcloud alpha network-services multicast-group-range-activations \
+                update --clear-labels --update-labels foo=bar,baz=qux
+
+       --remove-labels=[KEY,...]
+          List of label keys to remove. If a label does not exist it is
+          silently ignored. If --update-labels is also specified then
+          --update-labels is applied first.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            update
+
diff --git a/gcloud/alpha/redis/clusters/backup-collections/describe b/gcloud/alpha/redis/clusters/backup-collections/describe
index a93d763a8..0e1e3c72e 100644
--- a/gcloud/alpha/redis/clusters/backup-collections/describe
+++ b/gcloud/alpha/redis/clusters/backup-collections/describe
@@ -72,7 +72,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backup-collections describe
 
         $ gcloud beta redis clusters backup-collections describe
 
diff --git a/gcloud/alpha/redis/clusters/backup-collections/help b/gcloud/alpha/redis/clusters/backup-collections/help
index 8db0146fb..ad2bc9e10 100644
--- a/gcloud/alpha/redis/clusters/backup-collections/help
+++ b/gcloud/alpha/redis/clusters/backup-collections/help
@@ -28,7 +28,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backup-collections
 
         $ gcloud beta redis clusters backup-collections
 
diff --git a/gcloud/alpha/redis/clusters/backup-collections/list b/gcloud/alpha/redis/clusters/backup-collections/list
index 4ac12bb8c..2d7300e9a 100644
--- a/gcloud/alpha/redis/clusters/backup-collections/list
+++ b/gcloud/alpha/redis/clusters/backup-collections/list
@@ -85,7 +85,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backup-collections list
 
         $ gcloud beta redis clusters backup-collections list
 
diff --git a/gcloud/alpha/redis/clusters/backups/delete b/gcloud/alpha/redis/clusters/backups/delete
index 1c9dc10d4..449b1da52 100644
--- a/gcloud/alpha/redis/clusters/backups/delete
+++ b/gcloud/alpha/redis/clusters/backups/delete
@@ -84,7 +84,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backups delete
 
         $ gcloud beta redis clusters backups delete
 
diff --git a/gcloud/alpha/redis/clusters/backups/describe b/gcloud/alpha/redis/clusters/backups/describe
index be29b586e..ebfe3d5ec 100644
--- a/gcloud/alpha/redis/clusters/backups/describe
+++ b/gcloud/alpha/redis/clusters/backups/describe
@@ -81,7 +81,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backups describe
 
         $ gcloud beta redis clusters backups describe
 
diff --git a/gcloud/alpha/redis/clusters/backups/export b/gcloud/alpha/redis/clusters/backups/export
index eca9ee68c..66ef0ff44 100644
--- a/gcloud/alpha/redis/clusters/backups/export
+++ b/gcloud/alpha/redis/clusters/backups/export
@@ -87,7 +87,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backups export
 
         $ gcloud beta redis clusters backups export
 
diff --git a/gcloud/alpha/redis/clusters/backups/help b/gcloud/alpha/redis/clusters/backups/help
index 174c2364a..4cb4fb460 100644
--- a/gcloud/alpha/redis/clusters/backups/help
+++ b/gcloud/alpha/redis/clusters/backups/help
@@ -32,7 +32,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backups
 
         $ gcloud beta redis clusters backups
 
diff --git a/gcloud/alpha/redis/clusters/backups/list b/gcloud/alpha/redis/clusters/backups/list
index d51cbca5d..78bb5b06a 100644
--- a/gcloud/alpha/redis/clusters/backups/list
+++ b/gcloud/alpha/redis/clusters/backups/list
@@ -101,7 +101,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters backups list
 
         $ gcloud beta redis clusters backups list
 
diff --git a/gcloud/alpha/redis/clusters/create-backup b/gcloud/alpha/redis/clusters/create-backup
index c229c3c66..7b086b87c 100644
--- a/gcloud/alpha/redis/clusters/create-backup
+++ b/gcloud/alpha/redis/clusters/create-backup
@@ -76,7 +76,9 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist. This variant is also available:
+    access allowlist. These variants are also available:
+
+        $ gcloud redis clusters create-backup
 
         $ gcloud beta redis clusters create-backup
 
diff --git a/gcloud/alpha/resource-manager/tags/bindings/help b/gcloud/alpha/resource-manager/tags/bindings/help
index 9aaed1a49..bc3568615 100644
--- a/gcloud/alpha/resource-manager/tags/bindings/help
+++ b/gcloud/alpha/resource-manager/tags/bindings/help
@@ -29,6 +29,9 @@ COMMANDS
      list
         (ALPHA) Lists TagBindings bound to the specified resource.
 
+     update
+        (ALPHA) Updates TagBindings bound to the specified resource.
+
 NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
diff --git a/gcloud/alpha/resource-manager/tags/bindings/update b/gcloud/alpha/resource-manager/tags/bindings/update
new file mode 100644
index 000000000..6481228f3
--- /dev/null
+++ b/gcloud/alpha/resource-manager/tags/bindings/update
@@ -0,0 +1,94 @@
+NAME
+    gcloud alpha resource-manager tags bindings update - updates TagBindings
+        bound to the specified resource
+
+SYNOPSIS
+    gcloud alpha resource-manager tags bindings update
+        --resource-name=RESOURCE_NAME
+        (--clear-tags | --replace-tags=[REPLACE_TAGS,...]
+          | --remove-tags=REMOVE_TAGS,[REMOVE_TAGS,...]
+          --update-tags=[UPDATE_TAGS,...]) [--location=LOCATION]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Updates TagBindings bound to the specified resource.
+
+REQUIRED FLAGS
+     --resource-name=RESOURCE_NAME
+        Full resource name of the resource to attach to the tagValue.
+
+     Tags to update for a resource.
+
+     Exactly one of these must be specified:
+
+       --clear-tags
+          Clear all tags on the resource.
+
+       --replace-tags=[REPLACE_TAGS,...]
+          Replace all existing tags on the resource with the specified
+          key-value pairs. Sets replace_tags value.
+
+           KEY
+              Sets KEY value.
+
+           VALUE
+              Sets VALUE value.
+
+          Shorthand Example:
+
+              --replace-tags=string=string
+
+          JSON Example:
+
+              --replace-tags='{"string": "string"}'
+
+          File Example:
+
+              --replace-tags=path_to_file.(yaml|json)
+
+       Tags to add/remove for a resource.
+
+         --remove-tags=REMOVE_TAGS,[REMOVE_TAGS,...]
+            Remove the specified tags from the resource.
+
+         --update-tags=[UPDATE_TAGS,...]
+            Add/update tags to the resource. Sets update_tags value.
+
+             KEY
+                Sets KEY value.
+
+             VALUE
+                Sets VALUE value.
+
+            Shorthand Example:
+
+                --update-tags=string=string
+
+            JSON Example:
+
+                --update-tags='{"string": "string"}'
+
+            File Example:
+
+                --update-tags=path_to_file.(yaml|json)
+
+OPTIONAL FLAGS
+     --location=LOCATION
+        Region or zone of the resource to bind to the TagValue. This field is
+        not required if the resource is a global resource like projects,
+        folders and organizations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy
index 1a8d4c1f5..5cf367022 100644
--- a/gcloud/alpha/run/deploy
+++ b/gcloud/alpha/run/deploy
@@ -9,11 +9,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url] [--delegate-builds]
         [--[no-]deploy-health-check] [--description=DESCRIPTION]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max=MAX] [--max-instances=MAX_INSTANCES]
-        [--max-surge=MAX_SURGE] [--max-unavailable=MAX_UNAVAILABLE]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max=MAX] [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -192,6 +192,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
@@ -231,16 +235,6 @@ FLAGS
         'default' to remove. This setting is immutably set on each new Revision
         and modifying its value will deploy another Revision.
 
-     --max-surge=MAX_SURGE
-        A maximum percentage of instances that will be moved in each step of
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
-     --max-unavailable=MAX_UNAVAILABLE
-        A maximum percentage of instances that may be unavailable during
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
      --mesh=MESH
         Enables Cloud Service Mesh using the specified mesh resource name. Mesh
         resource name must be in the format of
diff --git a/gcloud/alpha/run/multi-region-services/update b/gcloud/alpha/run/multi-region-services/update
index a6027d8a8..29a136c8d 100644
--- a/gcloud/alpha/run/multi-region-services/update
+++ b/gcloud/alpha/run/multi-region-services/update
@@ -11,11 +11,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url]
         [--[no-]deploy-health-check] [--description=DESCRIPTION]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max=MAX] [--max-instances=MAX_INSTANCES]
-        [--max-surge=MAX_SURGE] [--max-unavailable=MAX_UNAVAILABLE]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max=MAX] [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -161,6 +161,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
@@ -200,16 +204,6 @@ FLAGS
         'default' to remove. This setting is immutably set on each new Revision
         and modifying its value will deploy another Revision.
 
-     --max-surge=MAX_SURGE
-        A maximum percentage of instances that will be moved in each step of
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
-     --max-unavailable=MAX_UNAVAILABLE
-        A maximum percentage of instances that may be unavailable during
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
      --mesh=MESH
         Enables Cloud Service Mesh using the specified mesh resource name. Mesh
         resource name must be in the format of
diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update
index 0ae350041..b444226aa 100644
--- a/gcloud/alpha/run/services/update
+++ b/gcloud/alpha/run/services/update
@@ -9,11 +9,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url]
         [--[no-]deploy-health-check] [--description=DESCRIPTION]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max=MAX] [--max-instances=MAX_INSTANCES]
-        [--max-surge=MAX_SURGE] [--max-unavailable=MAX_UNAVAILABLE]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max=MAX] [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -159,6 +159,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
@@ -198,16 +202,6 @@ FLAGS
         'default' to remove. This setting is immutably set on each new Revision
         and modifying its value will deploy another Revision.
 
-     --max-surge=MAX_SURGE
-        A maximum percentage of instances that will be moved in each step of
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
-     --max-unavailable=MAX_UNAVAILABLE
-        A maximum percentage of instances that may be unavailable during
-        traffic split changes. Use "default" to unset the limit and use the
-        platform default.
-
      --mesh=MESH
         Enables Cloud Service Mesh using the specified mesh resource name. Mesh
         resource name must be in the format of
diff --git a/gcloud/alpha/run/worker-pools/deploy b/gcloud/alpha/run/worker-pools/deploy
index b8d07a2a5..956a61ba7 100644
--- a/gcloud/alpha/run/worker-pools/deploy
+++ b/gcloud/alpha/run/worker-pools/deploy
@@ -5,8 +5,7 @@ NAME
 SYNOPSIS
     gcloud alpha run worker-pools deploy [[WORKER_POOL] --region=REGION]
         [--async] [--breakglass=JUSTIFICATION] [--container=CONTAINER]
-        [--description=DESCRIPTION] [--max=MAX] [--max-surge=MAX_SURGE]
-        [--max-unavailable=MAX_UNAVAILABLE] [--mesh=MESH] [--min=MIN]
+        [--description=DESCRIPTION] [--max=MAX] [--mesh=MESH] [--min=MIN]
         [--no-promote] [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--vpc-egress=VPC_EGRESS]
@@ -115,16 +114,6 @@ FLAGS
         divided among all Revisions receiving a percentage of instance
         assignments and can be modified without deploying a new Revision.
 
-     --max-surge=MAX_SURGE
-        A maximum percentage of instances that will be moved in each step of
-        instance split changes. Use "default" to unset the limit and use the
-        platform default.
-
-     --max-unavailable=MAX_UNAVAILABLE
-        A maximum percentage of instances that may be unavailable during
-        instance split changes. Use "default" to unset the limit and use the
-        platform default.
-
      --mesh=MESH
         Enables Cloud Service Mesh using the specified mesh resource name. Mesh
         resource name must be in the format of
diff --git a/gcloud/alpha/run/worker-pools/update b/gcloud/alpha/run/worker-pools/update
index 7c2e25e77..67574c95b 100644
--- a/gcloud/alpha/run/worker-pools/update
+++ b/gcloud/alpha/run/worker-pools/update
@@ -5,20 +5,14 @@ NAME
 SYNOPSIS
     gcloud alpha run worker-pools update [[WORKER_POOL] --region=REGION]
         [--async] [--breakglass=JUSTIFICATION] [--container=CONTAINER]
-        [--description=DESCRIPTION] [--max=MAX] [--max-surge=MAX_SURGE]
-        [--max-unavailable=MAX_UNAVAILABLE] [--mesh=MESH] [--min=MIN]
+        [--description=DESCRIPTION] [--max=MAX] [--mesh=MESH] [--min=MIN]
         [--no-promote] [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
-        [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
-        [--vpc-egress=VPC_EGRESS]
+        [--service-account=SERVICE_ACCOUNT] [--vpc-egress=VPC_EGRESS]
         [--add-cloudsql-instances=[CLOUDSQL-INSTANCES,...]
           | --clear-cloudsql-instances
           | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...]
           | --set-cloudsql-instances=[CLOUDSQL-INSTANCES,...]]
-        [--add-custom-audiences=[CUSTOM-AUDIENCES,...]
-          | --clear-custom-audiences
-          | --remove-custom-audiences=[CUSTOM-AUDIENCES,...]
-          | --set-custom-audiences=[CUSTOM-AUDIENCES,...]]
         [--add-volume=[KEY=VALUE,...]
           --clear-volumes --remove-volume=[VOLUME,...]]
         [--add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
@@ -115,16 +109,6 @@ FLAGS
         divided among all Revisions receiving a percentage of instance
         assignments and can be modified without deploying a new Revision.
 
-     --max-surge=MAX_SURGE
-        A maximum percentage of instances that will be moved in each step of
-        instance split changes. Use "default" to unset the limit and use the
-        platform default.
-
-     --max-unavailable=MAX_UNAVAILABLE
-        A maximum percentage of instances that may be unavailable during
-        instance split changes. Use "default" to unset the limit and use the
-        platform default.
-
      --mesh=MESH
         Enables Cloud Service Mesh using the specified mesh resource name. Mesh
         resource name must be in the format of
@@ -169,10 +153,6 @@ FLAGS
         revision of the service. The service account represents the identity of
         the running revision, and determines what permissions the revision has.
 
-     --[no-]session-affinity
-        Whether to enable session affinity for connections to the service. Use
-        --session-affinity to enable and --no-session-affinity to disable.
-
      --vpc-egress=VPC_EGRESS
         Specify which of the outbound traffic to send through Direct VPC egress
         or the VPC connector for this resource. This resource must have Direct
@@ -216,24 +196,6 @@ FLAGS
           Completely replace the current Cloud SQL instances with the given
           values.
 
-     These flags modify the custom audiences that can be used in the audience
-     field of ID token for authenticated requests.
-
-     At most one of these can be specified:
-
-       --add-custom-audiences=[CUSTOM-AUDIENCES,...]
-          Append the given values to the current custom audiences.
-
-       --clear-custom-audiences
-          Empty the current custom audiences.
-
-       --remove-custom-audiences=[CUSTOM-AUDIENCES,...]
-          Remove the given values from the current custom audiences.
-
-       --set-custom-audiences=[CUSTOM-AUDIENCES,...]
-          Completely replace the current custom audiences with the given
-          values.
-
      --add-volume=[KEY=VALUE,...]
         Adds a volume to the Cloud Run resource. To add more than one volume,
         specify this flag multiple times. Volumes must have a name and type
diff --git a/gcloud/alpha/scc/remediation-intents/auto-remediate b/gcloud/alpha/scc/remediation-intents/auto-remediate
new file mode 100644
index 000000000..66fbe860e
--- /dev/null
+++ b/gcloud/alpha/scc/remediation-intents/auto-remediate
@@ -0,0 +1,52 @@
+NAME
+    gcloud alpha scc remediation-intents auto-remediate - command for
+        semi-automatic remediation of SCC findings
+
+SYNOPSIS
+    gcloud alpha scc remediation-intents auto-remediate
+        --git-config-path=GIT_SETTINGS --org-id=ORG_ID
+        [--root-dir-path=ROOT_DIR_PATH; default="."] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Orchestrates the semi-automatic remediation process for SCC
+    findings by calling the Remediation Intent APIs.
+
+EXAMPLES
+    Sample usage: Remediate a SCC finding for the organization 1234567890, in
+    the terraform repository located at ./terraform-repo. $ {command} scc
+    remediation-intents auto-remediate \        --org-id=1234567890 --root-dir-path=./terraform-repo \
+        --git-config-path=./git-config.yaml
+
+REQUIRED FLAGS
+     --git-config-path=GIT_SETTINGS
+        Path to the git config file in YAML format to raise the PR. Format:
+        /path/to/file.yaml. Sample Config file:
+
+            remote: origin
+            main-branch-name: master
+            branch-prefix: iac-remediation-
+            reviewers: reviewer1,reviewer2
+
+     --org-id=ORG_ID
+        The Google Cloud organization ID
+
+OPTIONAL FLAGS
+     --root-dir-path=ROOT_DIR_PATH; default="."
+        The relative path to the root directory for the terraform repository.
+        If not specified, the default value is assumed to be the current
+        directory. The default is *..
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/scc/remediation-intents/help b/gcloud/alpha/scc/remediation-intents/help
index b4c3e7d27..92fa54d8f 100644
--- a/gcloud/alpha/scc/remediation-intents/help
+++ b/gcloud/alpha/scc/remediation-intents/help
@@ -17,6 +17,9 @@ GCLOUD WIDE FLAGS
 COMMANDS
     COMMAND is one of the following:
 
+     auto-remediate
+        (ALPHA) Command for semi-automatic remediation of SCC findings.
+
      create
         (ALPHA) Creates a remediation intent resource.
 
diff --git a/gcloud/alpha/sql/instances/create b/gcloud/alpha/sql/instances/create
index 6fa5c30be..05742f0e6 100644
--- a/gcloud/alpha/sql/instances/create
+++ b/gcloud/alpha/sql/instances/create
@@ -278,9 +278,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies
diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch
index 629c3dfa8..e83c096ca 100644
--- a/gcloud/alpha/sql/instances/patch
+++ b/gcloud/alpha/sql/instances/patch
@@ -220,9 +220,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --[no-]enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies
diff --git a/gcloud/beta/bigtable/app-profiles/create b/gcloud/beta/bigtable/app-profiles/create
index 7a7e0ee34..83fdf952a 100644
--- a/gcloud/beta/bigtable/app-profiles/create
+++ b/gcloud/beta/bigtable/app-profiles/create
@@ -76,7 +76,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/beta/bigtable/app-profiles/delete b/gcloud/beta/bigtable/app-profiles/delete
index 73bed6820..6d9d28425 100644
--- a/gcloud/beta/bigtable/app-profiles/delete
+++ b/gcloud/beta/bigtable/app-profiles/delete
@@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/beta/bigtable/app-profiles/describe b/gcloud/beta/bigtable/app-profiles/describe
index 7ad23811a..0162cfb7c 100644
--- a/gcloud/beta/bigtable/app-profiles/describe
+++ b/gcloud/beta/bigtable/app-profiles/describe
@@ -40,7 +40,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/beta/bigtable/app-profiles/update b/gcloud/beta/bigtable/app-profiles/update
index 3879a251c..e4e74df37 100644
--- a/gcloud/beta/bigtable/app-profiles/update
+++ b/gcloud/beta/bigtable/app-profiles/update
@@ -75,7 +75,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/beta/bigtable/backups/copy b/gcloud/beta/bigtable/backups/copy
index c8b2d8972..62c816fdb 100644
--- a/gcloud/beta/bigtable/backups/copy
+++ b/gcloud/beta/bigtable/backups/copy
@@ -62,7 +62,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --destination-cluster=DESTINATION_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -70,7 +70,7 @@ REQUIRED FLAGS
           ▸ provide the argument --destination-cluster on the command line.
 
        --destination-instance=DESTINATION_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -116,7 +116,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --source-cluster=SOURCE_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --source-backup on the command line with a
@@ -124,7 +124,7 @@ REQUIRED FLAGS
           ▸ provide the argument --source-cluster on the command line.
 
        --source-instance=SOURCE_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --source-backup on the command line with a
diff --git a/gcloud/beta/bigtable/clusters/create b/gcloud/beta/bigtable/clusters/create
index 8e6535ce1..36e83a286 100644
--- a/gcloud/beta/bigtable/clusters/create
+++ b/gcloud/beta/bigtable/clusters/create
@@ -54,7 +54,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/beta/bigtable/clusters/delete b/gcloud/beta/bigtable/clusters/delete
index efcd17114..72f37df1d 100644
--- a/gcloud/beta/bigtable/clusters/delete
+++ b/gcloud/beta/bigtable/clusters/delete
@@ -37,7 +37,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/beta/bigtable/clusters/describe b/gcloud/beta/bigtable/clusters/describe
index 4e31f95d7..0611d6c55 100644
--- a/gcloud/beta/bigtable/clusters/describe
+++ b/gcloud/beta/bigtable/clusters/describe
@@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/beta/bigtable/clusters/update b/gcloud/beta/bigtable/clusters/update
index 568168251..7fff17885 100644
--- a/gcloud/beta/bigtable/clusters/update
+++ b/gcloud/beta/bigtable/clusters/update
@@ -43,7 +43,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/beta/bigtable/help b/gcloud/beta/bigtable/help
index 285341f63..0e1a4a92b 100644
--- a/gcloud/beta/bigtable/help
+++ b/gcloud/beta/bigtable/help
@@ -33,6 +33,9 @@ GROUPS
      instances
         (BETA) Manage Cloud Bigtable instances.
 
+     logical-views
+        (BETA) Manage Bigtable logical views.
+
      operations
         (BETA) Manage Cloud Bigtable operations.
 
diff --git a/gcloud/beta/bigtable/hot-tablets/list b/gcloud/beta/bigtable/hot-tablets/list
index f961e96c7..38232b144 100644
--- a/gcloud/beta/bigtable/hot-tablets/list
+++ b/gcloud/beta/bigtable/hot-tablets/list
@@ -53,7 +53,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/beta/bigtable/logical-views/create b/gcloud/beta/bigtable/logical-views/create
new file mode 100644
index 000000000..50a9eaf99
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/create
@@ -0,0 +1,76 @@
+NAME
+    gcloud beta bigtable logical-views create - create a new Bigtable logical
+        view
+
+SYNOPSIS
+    gcloud beta bigtable logical-views create
+        (LOGICAL_VIEW : --instance=INSTANCE) --query=QUERY [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a new Bigtable logical view.
+
+EXAMPLES
+    To create a logical view, run:
+
+        $ gcloud beta bigtable logical-views create my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to create. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views create
+
+        $ gcloud alpha bigtable logical-views create
+
diff --git a/gcloud/beta/bigtable/logical-views/delete b/gcloud/beta/bigtable/logical-views/delete
new file mode 100644
index 000000000..f56360fe5
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/delete
@@ -0,0 +1,64 @@
+NAME
+    gcloud beta bigtable logical-views delete - delete a Bigtable logical view
+
+SYNOPSIS
+    gcloud beta bigtable logical-views delete
+        (LOGICAL_VIEW : --instance=INSTANCE) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a Bigtable logical view.
+
+EXAMPLES
+    To delete a logical view, run:
+
+        $ gcloud beta bigtable logical-views delete my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to delete. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views delete
+
+        $ gcloud alpha bigtable logical-views delete
+
diff --git a/gcloud/beta/bigtable/logical-views/describe b/gcloud/beta/bigtable/logical-views/describe
new file mode 100644
index 000000000..2672e6fcf
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/describe
@@ -0,0 +1,65 @@
+NAME
+    gcloud beta bigtable logical-views describe - describe an existing Bigtable
+        logical view
+
+SYNOPSIS
+    gcloud beta bigtable logical-views describe
+        (LOGICAL_VIEW : --instance=INSTANCE) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Describe an existing Bigtable logical view.
+
+EXAMPLES
+    To view a logical view's description, run:
+
+        $ gcloud beta bigtable logical-views describe my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to describe. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views describe
+
+        $ gcloud alpha bigtable logical-views describe
+
diff --git a/gcloud/beta/bigtable/logical-views/help b/gcloud/beta/bigtable/logical-views/help
new file mode 100644
index 000000000..84cbc2a8e
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/help
@@ -0,0 +1,40 @@
+NAME
+    gcloud beta bigtable logical-views - manage Bigtable logical views
+
+SYNOPSIS
+    gcloud beta bigtable logical-views COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Bigtable logical views.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a new Bigtable logical view.
+
+     delete
+        (BETA) Delete a Bigtable logical view.
+
+     describe
+        (BETA) Describe an existing Bigtable logical view.
+
+     list
+        (BETA) List existing Bigtable logical views.
+
+     update
+        (BETA) Update a Bigtable logical view.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views
+
+        $ gcloud alpha bigtable logical-views
+
diff --git a/gcloud/beta/bigtable/logical-views/list b/gcloud/beta/bigtable/logical-views/list
new file mode 100644
index 000000000..51d065f22
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/list
@@ -0,0 +1,84 @@
+NAME
+    gcloud beta bigtable logical-views list - list existing Bigtable logical
+        views
+
+SYNOPSIS
+    gcloud beta bigtable logical-views list --instance=INSTANCE
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List existing Bigtable logical views.
+
+EXAMPLES
+    To list all logical views for an instance, run:
+
+        $ gcloud beta bigtable logical-views list --instance=my-instance-id
+
+REQUIRED FLAGS
+     Instance resource - The instance to list logical views for. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --instance=INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument --instance on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views list
+
+        $ gcloud alpha bigtable logical-views list
+
diff --git a/gcloud/beta/bigtable/logical-views/update b/gcloud/beta/bigtable/logical-views/update
new file mode 100644
index 000000000..eaaba95c6
--- /dev/null
+++ b/gcloud/beta/bigtable/logical-views/update
@@ -0,0 +1,75 @@
+NAME
+    gcloud beta bigtable logical-views update - update a Bigtable logical view
+
+SYNOPSIS
+    gcloud beta bigtable logical-views update
+        (LOGICAL_VIEW : --instance=INSTANCE) --query=QUERY [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Update a Bigtable logical view.
+
+EXAMPLES
+    To update a logical view to a new query, run:
+
+        $ gcloud beta bigtable logical-views update my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family2 FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to update. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud bigtable logical-views update
+
+        $ gcloud alpha bigtable logical-views update
+
diff --git a/gcloud/beta/compute/firewall-policies/export-rules b/gcloud/beta/compute/firewall-policies/export-rules
index ced875221..8c45fca58 100644
--- a/gcloud/beta/compute/firewall-policies/export-rules
+++ b/gcloud/beta/compute/firewall-policies/export-rules
@@ -41,8 +41,10 @@ GCLOUD WIDE FLAGS
     Run $ gcloud help for details.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute firewall-policies export-rules
 
         $ gcloud alpha compute firewall-policies export-rules
 
diff --git a/gcloud/beta/compute/firewall-policies/import-rules b/gcloud/beta/compute/firewall-policies/import-rules
index ea9caae00..d53c6bd88 100644
--- a/gcloud/beta/compute/firewall-policies/import-rules
+++ b/gcloud/beta/compute/firewall-policies/import-rules
@@ -42,8 +42,10 @@ GCLOUD WIDE FLAGS
     Run $ gcloud help for details.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute firewall-policies import-rules
 
         $ gcloud alpha compute firewall-policies import-rules
 
diff --git a/gcloud/beta/compute/firewall-policies/rules/create b/gcloud/beta/compute/firewall-policies/rules/create
index 59d1ea69f..8bea4fa08 100644
--- a/gcloud/beta/compute/firewall-policies/rules/create
+++ b/gcloud/beta/compute/firewall-policies/rules/create
@@ -7,7 +7,7 @@ SYNOPSIS
         --firewall-policy=FIREWALL_POLICY [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -15,7 +15,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -65,7 +65,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -74,12 +74,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -126,7 +126,7 @@ OPTIONAL FLAGS
      --src-ip-ranges=[SRC_IP_RANGE,...]
         Source IP ranges to match for this rule.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
         --src-network. It applies to ingress rules. Valid values are INTERNET,
@@ -135,12 +135,12 @@ OPTIONAL FLAGS
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
         Source Region Code to match for this rule. Can only be specified if
-        DIRECTION is ingress. Cannot be specified when the source network scope
+        DIRECTION is ingress. Cannot be specified when the source network type
         is NON_INTERNET, VPC_NETWORK or INTRA_VPC.
 
      --src-secure-tags=[SOURCE_SECURE_TAGS,...]
@@ -156,7 +156,7 @@ OPTIONAL FLAGS
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/beta/compute/firewall-policies/rules/update b/gcloud/beta/compute/firewall-policies/rules/update
index cc3629813..b937d489e 100644
--- a/gcloud/beta/compute/firewall-policies/rules/update
+++ b/gcloud/beta/compute/firewall-policies/rules/update
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -17,7 +17,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -68,7 +68,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -77,12 +77,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -132,7 +132,7 @@ OPTIONAL FLAGS
      --src-ip-ranges=[SRC_IP_RANGE,...]
         Source IP ranges to match for this rule.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
         --src-network. It applies to ingress rules. Valid values are INTERNET,
@@ -141,12 +141,12 @@ OPTIONAL FLAGS
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
         Source Region Code to match for this rule. Can only be specified if
-        DIRECTION is ingress. Cannot be specified when the source network scope
+        DIRECTION is ingress. Cannot be specified when the source network type
         is NON_INTERNET, VPC_NETWORK or INTRA_VPC.
 
      --src-secure-tags=[SOURCE_SECURE_TAGS,...]
@@ -162,7 +162,7 @@ OPTIONAL FLAGS
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/beta/compute/future-reservations/create b/gcloud/beta/compute/future-reservations/create
index b144c4aa6..1c5036687 100644
--- a/gcloud/beta/compute/future-reservations/create
+++ b/gcloud/beta/compute/future-reservations/create
@@ -236,8 +236,8 @@ OPTIONAL FLAGS
         Maintenance for the reserved capacity. SCHEDULING_TYPE must be one of:
 
          GROUPED
-            In GROUPED mode, maintenance on all reserved instances
-            issynchronized.
+            In GROUPED mode, maintenance on all reserved instances is
+            synchronized.
          INDEPENDENT
             In INDEPENDENT mode, maintenance is not synchronized for this
             reservation, and each instance has its own maintenance window.
diff --git a/gcloud/beta/compute/future-reservations/update b/gcloud/beta/compute/future-reservations/update
index 9db04c2be..8a254dc37 100644
--- a/gcloud/beta/compute/future-reservations/update
+++ b/gcloud/beta/compute/future-reservations/update
@@ -93,8 +93,8 @@ FLAGS
         Maintenance for the reserved capacity. SCHEDULING_TYPE must be one of:
 
          GROUPED
-            In GROUPED mode, maintenance on all reserved instances
-            issynchronized.
+            In GROUPED mode, maintenance on all reserved instances is
+            synchronized.
          INDEPENDENT
             In INDEPENDENT mode, maintenance is not synchronized for this
             reservation, and each instance has its own maintenance window.
diff --git a/gcloud/beta/compute/instances/report-host-as-faulty b/gcloud/beta/compute/instances/report-host-as-faulty
index d8078038d..d8b33a408 100644
--- a/gcloud/beta/compute/instances/report-host-as-faulty
+++ b/gcloud/beta/compute/instances/report-host-as-faulty
@@ -5,7 +5,7 @@ NAME
 SYNOPSIS
     gcloud beta compute instances report-host-as-faulty INSTANCE_NAME
         --disruption-schedule=DISRUPTION_SCHEDULE
-        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION]
+        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] [--async]
         [--zone=ZONE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -39,6 +39,10 @@ REQUIRED FLAGS
         fault being reported.
 
 OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
      --zone=ZONE
         Zone of the instance to operate on. If not specified, you might be
         prompted to select a zone (interactive mode only). gcloud attempts to
diff --git a/gcloud/beta/compute/network-firewall-policies/export-rules b/gcloud/beta/compute/network-firewall-policies/export-rules
index b04209dd8..4806403d9 100644
--- a/gcloud/beta/compute/network-firewall-policies/export-rules
+++ b/gcloud/beta/compute/network-firewall-policies/export-rules
@@ -45,8 +45,10 @@ GCLOUD WIDE FLAGS
     Run $ gcloud help for details.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute network-firewall-policies export-rules
 
         $ gcloud alpha compute network-firewall-policies export-rules
 
diff --git a/gcloud/beta/compute/network-firewall-policies/import-rules b/gcloud/beta/compute/network-firewall-policies/import-rules
index 01f9a42be..75735519f 100644
--- a/gcloud/beta/compute/network-firewall-policies/import-rules
+++ b/gcloud/beta/compute/network-firewall-policies/import-rules
@@ -46,8 +46,10 @@ GCLOUD WIDE FLAGS
     Run $ gcloud help for details.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute network-firewall-policies import-rules
 
         $ gcloud alpha compute network-firewall-policies import-rules
 
diff --git a/gcloud/beta/compute/network-firewall-policies/rules/create b/gcloud/beta/compute/network-firewall-policies/rules/create
index 15dce7fc6..43eb4cd87 100644
--- a/gcloud/beta/compute/network-firewall-policies/rules/create
+++ b/gcloud/beta/compute/network-firewall-policies/rules/create
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -16,7 +16,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -74,7 +74,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -83,12 +83,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -132,16 +132,16 @@ OPTIONAL FLAGS
         --src-secure-tags.Multiple IP address blocks can be specified if they
         are separated by commas.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
-        --src-network. It applies to ingress rules. Valid values are INTERNET,
+        --src-networks. It applies to ingress rules. Valid values are INTERNET,
         NON_INTERNET, VPC_NETWORKS and INTRA_VPC. Use empty string to clear the
         field.
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
@@ -158,12 +158,12 @@ OPTIONAL FLAGS
         matches --src-ip-ranges or the tag of the source matches
         --src-secure-tags. Secure Tags can be assigned to instances during
         instance creation. Secure tags cannot be specified if source network
-        scope is INTERNET.
+        type is INTERNET.
 
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/beta/compute/network-firewall-policies/rules/update b/gcloud/beta/compute/network-firewall-policies/rules/update
index 5a7f6532f..33ac2ff7b 100644
--- a/gcloud/beta/compute/network-firewall-policies/rules/update
+++ b/gcloud/beta/compute/network-firewall-policies/rules/update
@@ -8,7 +8,7 @@ SYNOPSIS
         [--description=DESCRIPTION]
         [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
         [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
-        [--dest-network-scope=DEST_NETWORK_SCOPE]
+        [--dest-network-type=DEST_NETWORK_TYPE]
         [--dest-region-codes=[DEST_REGION_CODES,...]]
         [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
         [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging]
@@ -16,7 +16,7 @@ SYNOPSIS
         [--security-profile-group=SECURITY_PROFILE_GROUP]
         [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
         [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
-        [--src-network-scope=SRC_NETWORK_SCOPE]
+        [--src-network-type=SRC_NETWORK_TYPE]
         [--src-networks=[SRC_NETWORKS,...]]
         [--src-region-codes=[SOURCE_REGION_CODES,...]]
         [--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
@@ -67,7 +67,7 @@ OPTIONAL FLAGS
      --dest-ip-ranges=[DEST_IP_RANGE,...]
         Destination IP ranges to match for this rule.
 
-     --dest-network-scope=DEST_NETWORK_SCOPE
+     --dest-network-type=DEST_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet or
         non-internet traffic. It applies to destination traffic for egress
         rules. Valid values are INTERNET and NON_INTERNET. Use empty string to
@@ -76,12 +76,12 @@ OPTIONAL FLAGS
      --dest-region-codes=[DEST_REGION_CODES,...]
         Destination Region Code to match for this rule. Can only be specified
         if DIRECTION is egress. Cannot be specified when the source network
-        scope is NON_INTERNET.
+        type is NON_INTERNET.
 
      --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
         Destination Threat Intelligence lists to match for this rule. Can only
         be specified if DIRECTION is egress. Cannot be specified when source
-        network scope is NON_INTERNET. The available lists can be found here:
+        network type is NON_INTERNET. The available lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
      --direction=DIRECTION
@@ -128,16 +128,16 @@ OPTIONAL FLAGS
         --src-secure-tags.Multiple IP address blocks can be specified if they
         are separated by commas.
 
-     --src-network-scope=SRC_NETWORK_SCOPE
+     --src-network-type=SRC_NETWORK_TYPE
         Use this flag to indicate that the rule should match internet,
         non-internet traffic or traffic coming from the network specified by
-        --src-network. It applies to ingress rules. Valid values are INTERNET,
+        --src-networks. It applies to ingress rules. Valid values are INTERNET,
         NON_INTERNET, VPC_NETWORKS and INTRA_VPC. Use empty string to clear the
         field.
 
      --src-networks=[SRC_NETWORKS,...]
         The source VPC networks to match for this rule. It can only be
-        specified when --src-network-scope is VPC_NETWORKS. It applies to
+        specified when --src-network-type is VPC_NETWORKS. It applies to
         ingress rules. It accepts full or partial URLs.
 
      --src-region-codes=[SOURCE_REGION_CODES,...]
@@ -154,12 +154,12 @@ OPTIONAL FLAGS
         matches --src-ip-ranges or the tag of the source matches
         --src-secure-tags. Secure Tags can be assigned to instances during
         instance creation. Secure tags cannot be specified if source network
-        scope is INTERNET.
+        type is INTERNET.
 
      --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
         Source Threat Intelligence lists to match for this rule. Can only be
         specified if DIRECTION is ingress. Cannot be specified when the source
-        network scope is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
+        network type is NON_INTERNET, VPC_NETWORK or INTRA_VPC. The available
         lists can be found here:
         https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
 
diff --git a/gcloud/beta/compute/networks/subnets/create b/gcloud/beta/compute/networks/subnets/create
index c048909cc..23a624177 100644
--- a/gcloud/beta/compute/networks/subnets/create
+++ b/gcloud/beta/compute/networks/subnets/create
@@ -5,8 +5,9 @@ NAME
 SYNOPSIS
     gcloud beta compute networks subnets create NAME --network=NETWORK
         [--description=DESCRIPTION] [--enable-flow-logs]
-        [--enable-private-ip-google-access] [--ip-collection=IP_COLLECTION]
-        [--ipv6-access-type=IPV6_ACCESS_TYPE]
+        [--enable-private-ip-google-access]
+        [--external-ipv6-prefix=EXTERNAL_IPV6_PREFIX]
+        [--ip-collection=IP_COLLECTION] [--ipv6-access-type=IPV6_ACCESS_TYPE]
         [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL]
         [--logging-filter-expr=LOGGING_FILTER_EXPR]
         [--logging-flow-sampling=LOGGING_FLOW_SAMPLING]
@@ -51,6 +52,15 @@ OPTIONAL FLAGS
         Enable/disable access to Google Cloud APIs from this subnet for
         instances without a public ip address.
 
+     --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
+
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
+
      --ip-collection=IP_COLLECTION
         Resource reference to a public delegated prefix. The
         PublicDelegatedPrefix must be a sub-prefix in
diff --git a/gcloud/beta/compute/networks/subnets/update b/gcloud/beta/compute/networks/subnets/update
index f5ea71e7b..b98697c82 100644
--- a/gcloud/beta/compute/networks/subnets/update
+++ b/gcloud/beta/compute/networks/subnets/update
@@ -6,6 +6,7 @@ SYNOPSIS
     gcloud beta compute networks subnets update NAME
         [--add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,
           [...]] [--drain-timeout=DRAIN_TIMEOUT; default="0s"]
+        [--external-ipv6-prefix=EXTERNAL_IPV6_PREFIX]
         [--ip-collection=IP_COLLECTION] [--ipv6-access-type=IPV6_ACCESS_TYPE]
         [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL]
         [--logging-filter-expr=LOGGING_FILTER_EXPR]
@@ -57,6 +58,15 @@ FLAGS
         availability of proxies for load balancing. The drain timeout is only
         applicable when the [--role=ACTIVE] flag is being used.
 
+     --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
+
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
+
      --ip-collection=IP_COLLECTION
         Resource reference to a public delegated prefix. The
         PublicDelegatedPrefix must be a sub-prefix in
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/create b/gcloud/beta/compute/os-config/policy-orchestrators/create
index b6b9f9069..4340ec1c9 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/create
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/create
@@ -140,8 +140,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/compute/docs/osconfig/rest
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators create
 
         $ gcloud alpha compute os-config policy-orchestrators create
 
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/delete b/gcloud/beta/compute/os-config/policy-orchestrators/delete
index f89119692..963246515 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/delete
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/delete
@@ -79,8 +79,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/compute/docs/osconfig/rest
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators delete
 
         $ gcloud alpha compute os-config policy-orchestrators delete
 
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/describe b/gcloud/beta/compute/os-config/policy-orchestrators/describe
index 3d426d29c..1c7a57308 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/describe
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/describe
@@ -73,8 +73,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/compute/docs/osconfig/rest
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators describe
 
         $ gcloud alpha compute os-config policy-orchestrators describe
 
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/help b/gcloud/beta/compute/os-config/policy-orchestrators/help
index 6a7db906d..d1a27bf7f 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/help
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/help
@@ -27,14 +27,16 @@ COMMANDS
         (BETA) Describe a policy orchestrator.
 
      list
-        (BETA) List policy orchestrators for a specified folder.
+        (BETA) List policy orchestrators.
 
      update
         (BETA) Update a policy orchestrator.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators
 
         $ gcloud alpha compute os-config policy-orchestrators
 
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/list b/gcloud/beta/compute/os-config/policy-orchestrators/list
index 2207da109..3eb60ed93 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/list
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/list
@@ -1,6 +1,6 @@
 NAME
     gcloud beta compute os-config policy-orchestrators list - list policy
-        orchestrators for a specified folder
+        orchestrators
 
 SYNOPSIS
     gcloud beta compute os-config policy-orchestrators list
@@ -9,7 +9,7 @@ SYNOPSIS
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (BETA) List policy orchestrators for a specified folder.
+    (BETA) List policy orchestrators.
 
 EXAMPLES
     To list the policy orchestrators in folder 123456, run:
@@ -18,10 +18,10 @@ EXAMPLES
             --folder 123456
 
 FLAGS
-     Project folder organization resource - Folder to list policy orchestrators
-     from. The arguments in this group can be used to specify the attributes of
-     this resource. (NOTE) Some attributes are not given arguments in this
-     group but can be set in other ways.
+     Project folder organization resource - Project, folder or organization to
+     list policy orchestrators from. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
 
      To set the project attribute:
       ◆ provide the argument --project on the command line;
@@ -89,8 +89,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/compute/docs/osconfig/rest
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators list
 
         $ gcloud alpha compute os-config policy-orchestrators list
 
diff --git a/gcloud/beta/compute/os-config/policy-orchestrators/update b/gcloud/beta/compute/os-config/policy-orchestrators/update
index fb6f438b1..3cd2784f5 100644
--- a/gcloud/beta/compute/os-config/policy-orchestrators/update
+++ b/gcloud/beta/compute/os-config/policy-orchestrators/update
@@ -154,8 +154,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/compute/docs/osconfig/rest
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud compute os-config policy-orchestrators update
 
         $ gcloud alpha compute os-config policy-orchestrators update
 
diff --git a/gcloud/beta/dataflow/flex-template/run b/gcloud/beta/dataflow/flex-template/run
index 7fd27c6f5..68704943a 100644
--- a/gcloud/beta/dataflow/flex-template/run
+++ b/gcloud/beta/dataflow/flex-template/run
@@ -5,6 +5,7 @@ SYNOPSIS
     gcloud beta dataflow flex-template run JOB_NAME
         --template-file-gcs-location=TEMPLATE_FILE_GCS_LOCATION
         [--additional-experiments=[ADDITIONAL_EXPERIMENTS,...]]
+        [--additional-pipeline-options=[ADDITIONAL_PIPELINE_OPTIONS,...]]
         [--additional-user-labels=[ADDITIONAL_USER_LABELS,...]]
         [--dataflow-kms-key=DATAFLOW_KMS_KEY] [--disable-public-ips]
         [--enable-streaming-engine] [--flexrs-goal=FLEXRS_GOAL]
@@ -43,7 +44,12 @@ REQUIRED FLAGS
 
 OPTIONAL FLAGS
      --additional-experiments=[ADDITIONAL_EXPERIMENTS,...]
-        Additional experiments to pass to the job.
+        Additional experiments to pass to the job. Example:
+        --additional-experiments=experiment1,experiment2=value2
+
+     --additional-pipeline-options=[ADDITIONAL_PIPELINE_OPTIONS,...]
+        Additional pipeline options to pass to the job. Example:
+        --additional-pipeline-options=option1=value1,option2=value2
 
      --additional-user-labels=[ADDITIONAL_USER_LABELS,...]
         Additional user labels to pass to the job. Example:
diff --git a/gcloud/beta/datastream/streams/create b/gcloud/beta/datastream/streams/create
index 19c65ceec..45fadd073 100644
--- a/gcloud/beta/datastream/streams/create
+++ b/gcloud/beta/datastream/streams/create
@@ -281,6 +281,20 @@ REQUIRED FLAGS
                   "dataFreshness": "3600s"
                 }
 
+            BigQuery configuration with Big Lake table configuration:                {
+                  "singleTargetDataset": {
+                    "datasetId": "projectId:datasetId"
+                  },
+                  "appendOnly": {},
+                  "blmtConfig": {
+                    "bucket": "bucketName",
+                    "tableFormat": "ICEBERG",
+                    "fileFormat": "PARQUET",
+                    "connectionName": "projectId.region.connectionName",
+                    "rootPath": "/root"
+                  }
+                }
+
          --gcs-destination-config=GCS_DESTINATION_CONFIG
             Path to a YAML (or JSON) file containing the configuration for
             Google Cloud Storage Destination Config.
diff --git a/gcloud/beta/datastream/streams/update b/gcloud/beta/datastream/streams/update
index 85e3d9d61..3b45bc48f 100644
--- a/gcloud/beta/datastream/streams/update
+++ b/gcloud/beta/datastream/streams/update
@@ -318,6 +318,20 @@ FLAGS
                 "dataFreshness": "3600s"
               }
 
+          BigQuery configuration with Big Lake table configuration:              {
+                "singleTargetDataset": {
+                  "datasetId": "projectId:datasetId"
+                },
+                "appendOnly": {},
+                "blmtConfig": {
+                  "bucket": "bucketName",
+                  "tableFormat": "ICEBERG",
+                  "fileFormat": "PARQUET",
+                  "connectionName": "projectId.region.connectionName",
+                  "rootPath": "/root"
+                }
+              }
+
        --gcs-destination-config=GCS_DESTINATION_CONFIG
           Path to a YAML (or JSON) file containing the configuration for Google
           Cloud Storage Destination Config.
diff --git a/gcloud/beta/firestore/bulk-delete b/gcloud/beta/firestore/bulk-delete
index 3d5c6fbe3..7f006bbff 100644
--- a/gcloud/beta/firestore/bulk-delete
+++ b/gcloud/beta/firestore/bulk-delete
@@ -63,8 +63,10 @@ GCLOUD WIDE FLAGS
     Run $ gcloud help for details.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud firestore bulk-delete
 
         $ gcloud alpha firestore bulk-delete
 
diff --git a/gcloud/beta/iap/settings/get b/gcloud/beta/iap/settings/get
index cc27e9073..e8249fed3 100644
--- a/gcloud/beta/iap/settings/get
+++ b/gcloud/beta/iap/settings/get
@@ -97,11 +97,9 @@ FLAGS
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. For Backend Services, you can use
-        both compute and backend-services as resource type.
-        --resource-type=cloud-run is in private preview and reach out to IAP
-        team in case of any queries. RESOURCE_TYPE must be one of: app-engine,
-        iap_web, compute, organization, folder, forwarding-rule, cloud-run,
-        backend-services.
+        both compute and backend-services as resource type. RESOURCE_TYPE must
+        be one of: app-engine, iap_web, compute, organization, folder,
+        forwarding-rule, cloud-run, backend-services.
 
      --service=SERVICE
         Service name. Optional when resource-type is compute or app-engine.
diff --git a/gcloud/beta/iap/settings/set b/gcloud/beta/iap/settings/set
index 81e51e8e1..c149b0a4f 100644
--- a/gcloud/beta/iap/settings/set
+++ b/gcloud/beta/iap/settings/set
@@ -147,11 +147,9 @@ FLAGS
 
      --resource-type=RESOURCE_TYPE
         Resource type of the IAP resource. For Backend Services, you can use
-        both compute and backend-services as resource type.
-        --resource-type=cloud-run is in private preview and reach out to IAP
-        team in case of any queries. RESOURCE_TYPE must be one of: app-engine,
-        iap_web, compute, organization, folder, forwarding-rule, cloud-run,
-        backend-services.
+        both compute and backend-services as resource type. RESOURCE_TYPE must
+        be one of: app-engine, iap_web, compute, organization, folder,
+        forwarding-rule, cloud-run, backend-services.
 
      --service=SERVICE
         Service name. Optional when resource-type is compute or app-engine.
diff --git a/gcloud/beta/iap/web/add-iam-policy-binding b/gcloud/beta/iap/web/add-iam-policy-binding
index b5059c2c4..fee067f1d 100644
--- a/gcloud/beta/iap/web/add-iam-policy-binding
+++ b/gcloud/beta/iap/web/add-iam-policy-binding
@@ -121,10 +121,8 @@ OPTIONAL FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/beta/iap/web/get-iam-policy b/gcloud/beta/iap/web/get-iam-policy
index 566b95447..241fedb6a 100644
--- a/gcloud/beta/iap/web/get-iam-policy
+++ b/gcloud/beta/iap/web/get-iam-policy
@@ -69,10 +69,8 @@ FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/beta/iap/web/remove-iam-policy-binding b/gcloud/beta/iap/web/remove-iam-policy-binding
index 7ec937074..742276722 100644
--- a/gcloud/beta/iap/web/remove-iam-policy-binding
+++ b/gcloud/beta/iap/web/remove-iam-policy-binding
@@ -138,10 +138,8 @@ OPTIONAL FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/beta/iap/web/set-iam-policy b/gcloud/beta/iap/web/set-iam-policy
index ebaed6380..915e2e764 100644
--- a/gcloud/beta/iap/web/set-iam-policy
+++ b/gcloud/beta/iap/web/set-iam-policy
@@ -78,10 +78,8 @@ FLAGS
         global backend-services. Required when resource-type=cloud-run.
 
      --resource-type=RESOURCE_TYPE
-        Resource type of the IAP resource. --resource-type=cloud-run is in
-        private preview and reach out to IAP team in case of any queries.
-        RESOURCE_TYPE must be one of: app-engine, backend-services,
-        forwarding-rule, cloud-run.
+        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
+        app-engine, backend-services, forwarding-rule, cloud-run.
 
      --service=SERVICE
         Service name.
diff --git a/gcloud/beta/memorystore/backup-collections/backups/delete b/gcloud/beta/memorystore/backup-collections/backups/delete
new file mode 100644
index 000000000..e0da97743
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/backups/delete
@@ -0,0 +1,84 @@
+NAME
+    gcloud beta memorystore backup-collections backups delete - delete backups
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections backups delete
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a backup
+
+EXAMPLES
+    To delete the backup, run:
+
+        $ gcloud beta memorystore backup-collections backups delete
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --request-id=REQUEST_ID
+        Idempotent request UUID.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections backups delete
+
+        $ gcloud alpha memorystore backup-collections backups delete
+
diff --git a/gcloud/beta/memorystore/backup-collections/backups/describe b/gcloud/beta/memorystore/backup-collections/backups/describe
new file mode 100644
index 000000000..97781129a
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/backups/describe
@@ -0,0 +1,77 @@
+NAME
+    gcloud beta memorystore backup-collections backups describe - describe
+        backups
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections backups describe
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Describe a backup
+
+EXAMPLES
+    To describe the backup, run:
+
+        $ gcloud beta memorystore backup-collections backups describe
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections backups describe
+
+        $ gcloud alpha memorystore backup-collections backups describe
+
diff --git a/gcloud/beta/memorystore/backup-collections/backups/export b/gcloud/beta/memorystore/backup-collections/backups/export
new file mode 100644
index 000000000..5879a1931
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/backups/export
@@ -0,0 +1,84 @@
+NAME
+    gcloud beta memorystore backup-collections backups export - export backups
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections backups export
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--gcs-bucket=GCS_BUCKET] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) export backups
+
+EXAMPLES
+    To export all backups, run:
+
+        $ gcloud beta memorystore backup-collections backups export
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --gcs-bucket=GCS_BUCKET
+        Google Cloud Storage bucket, like "my-bucket".
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections backups export
+
+        $ gcloud alpha memorystore backup-collections backups export
+
diff --git a/gcloud/beta/memorystore/backup-collections/backups/help b/gcloud/beta/memorystore/backup-collections/backups/help
new file mode 100644
index 000000000..acbde56a3
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/backups/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud beta memorystore backup-collections backups - manage Backup
+        resources
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections backups COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Backup resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     delete
+        (BETA) Delete backups.
+
+     describe
+        (BETA) Describe backups.
+
+     export
+        (BETA) export backups.
+
+     list
+        (BETA) List backups.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections backups
+
+        $ gcloud alpha memorystore backup-collections backups
+
diff --git a/gcloud/beta/memorystore/backup-collections/backups/list b/gcloud/beta/memorystore/backup-collections/backups/list
new file mode 100644
index 000000000..69da8d129
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/backups/list
@@ -0,0 +1,103 @@
+NAME
+    gcloud beta memorystore backup-collections backups list - list backups
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections backups list
+        (--backup-collection=BACKUP_COLLECTION : --location=LOCATION)
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List backups
+
+EXAMPLES
+    To list all backups, run:
+
+        $ gcloud beta memorystore backup-collections backups list
+
+REQUIRED FLAGS
+     BackupCollection resource - The resource name of the backupCollection
+     using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --backup-collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument --backup-collection on the command line.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument --backup-collection on the command line with
+            a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections backups list
+
+        $ gcloud alpha memorystore backup-collections backups list
+
diff --git a/gcloud/beta/memorystore/backup-collections/describe b/gcloud/beta/memorystore/backup-collections/describe
new file mode 100644
index 000000000..672b1af96
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/describe
@@ -0,0 +1,71 @@
+NAME
+    gcloud beta memorystore backup-collections describe - describe
+        backupCollections
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections describe
+        (BACKUP_COLLECTION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Describe a backupCollection
+
+EXAMPLES
+    To describe the backupCollection, run:
+
+        $ gcloud beta memorystore backup-collections describe
+
+POSITIONAL ARGUMENTS
+     BackupCollection resource - Instance backupCollection resource name using
+     the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup_collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup_collection attribute:
+          ▸ provide the argument backup_collection on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup_collection on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections describe
+
+        $ gcloud alpha memorystore backup-collections describe
+
diff --git a/gcloud/beta/memorystore/backup-collections/help b/gcloud/beta/memorystore/backup-collections/help
new file mode 100644
index 000000000..59da1746e
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud beta memorystore backup-collections - manage Backup Collection
+        resources
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections GROUP | COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Backup Collection resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     backups
+        (BETA) Manage Backup resources.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (BETA) Describe backupCollections.
+
+     list
+        (BETA) List backupCollections.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections
+
+        $ gcloud alpha memorystore backup-collections
+
diff --git a/gcloud/beta/memorystore/backup-collections/list b/gcloud/beta/memorystore/backup-collections/list
new file mode 100644
index 000000000..f0e692297
--- /dev/null
+++ b/gcloud/beta/memorystore/backup-collections/list
@@ -0,0 +1,89 @@
+NAME
+    gcloud beta memorystore backup-collections list - list backupCollections
+
+SYNOPSIS
+    gcloud beta memorystore backup-collections list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List backupCollections
+
+EXAMPLES
+    To list all backupCollections, run:
+
+        $ gcloud beta memorystore backup-collections list
+
+REQUIRED FLAGS
+     Location resource - The resource name of the backupCollection location
+     using the form: projects/{project_id}/locations/{location_id} where
+     location_id refers to a Google Cloud region. This represents a Cloud
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore backup-collections list
+
+        $ gcloud alpha memorystore backup-collections list
+
diff --git a/gcloud/beta/memorystore/help b/gcloud/beta/memorystore/help
index a5cf7e73e..1814b8eb2 100644
--- a/gcloud/beta/memorystore/help
+++ b/gcloud/beta/memorystore/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     backup-collections
+        (BETA) Manage Backup Collection resources.
+
      instances
         (BETA) Manage Instance resources.
 
diff --git a/gcloud/beta/memorystore/instances/backup b/gcloud/beta/memorystore/instances/backup
new file mode 100644
index 000000000..4ded70ff3
--- /dev/null
+++ b/gcloud/beta/memorystore/instances/backup
@@ -0,0 +1,81 @@
+NAME
+    gcloud beta memorystore instances backup - backup instances
+
+SYNOPSIS
+    gcloud beta memorystore instances backup (INSTANCE : --location=LOCATION)
+        [--async] [--backup-id=BACKUP_ID] [--ttl=TTL] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) backup instances
+
+EXAMPLES
+    To backup all instances, run:
+
+        $ gcloud beta memorystore instances backup
+
+POSITIONAL ARGUMENTS
+     Instance resource - Instance resource name using the form:
+     projects/{project_id}/locations/{location_id}/instances/{instance_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument instance on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the instance resource.
+
+          To set the location attribute:
+          ▸ provide the argument instance on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --backup-id=BACKUP_ID
+        The id of the backup to be created. If not specified, the default value
+        ([YYYYMMDDHHMMSS][Shortened Instance UID] is used.
+
+     --ttl=TTL
+        TTL for the backup to expire. Value range is 1 day to 100 years. If not
+        specified, the default value is 100 years.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1beta API. The full documentation for
+    this API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud memorystore instances backup
+
+        $ gcloud alpha memorystore instances backup
+
diff --git a/gcloud/beta/memorystore/instances/create b/gcloud/beta/memorystore/instances/create
index e1be0fef9..32a317fdb 100644
--- a/gcloud/beta/memorystore/instances/create
+++ b/gcloud/beta/memorystore/instances/create
@@ -19,7 +19,12 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          (--fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS)]
         [--cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE : --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --primary-instance=PRIMARY_INSTANCE]
+        [--gcs-source-uris=[GCS_SOURCE_URIS,...]
+          | --managed-backup-source=MANAGED_BACKUP_SOURCE]
         [--zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
           --zone-distribution-config-mode=ZONE_DISTRIBUTION_CONFIG_MODE]
         [GCLOUD_WIDE_FLAG ...]
@@ -262,7 +267,8 @@ FLAGS
           Ondemand maintenance for the instance.
 
      --psc-auto-connections=[network=NETWORK],[port=PORT],[projectId=PROJECTID]
-        User inputs and resource details of the auto-created PSC connections.
+        Deprecated: Use the endpoints.connections.psc_auto_connection value
+        instead.
 
          network
             The network where the PSC endpoints are created, in the form of
@@ -369,6 +375,53 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+           At least one of these must be specified:
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE
@@ -439,6 +492,27 @@ FLAGS
               To set the instance attribute:
               ◇ provide the argument --primary-instance on the command line.
 
+     Arguments for the import sources.
+
+     At most one of these can be specified:
+
+       Backups that stored in Cloud Storage buckets. The Cloud Storage buckets
+       need to be the same region as the instances.
+
+         --gcs-source-uris=[GCS_SOURCE_URIS,...]
+            Example: gs://bucket1/object1, gs://bucket2/folder2/object2
+
+       Backups that generated and managed by memorystore.
+
+         --managed-backup-source=MANAGED_BACKUP_SOURCE
+            Example:
+            //memorystore.googleapis.com/projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup}
+            A shorter version (without the prefix) of the backup name is also
+            supported, like
+            projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup_id}
+            In this case, it assumes the backup is under
+            memorystore.googleapis.com.
+
      Zone distribution configuration for allocation of instance resources.
 
        --zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
diff --git a/gcloud/beta/memorystore/instances/help b/gcloud/beta/memorystore/instances/help
index 1fb88afee..22f0a58c7 100644
--- a/gcloud/beta/memorystore/instances/help
+++ b/gcloud/beta/memorystore/instances/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 COMMANDS
     COMMAND is one of the following:
 
+     backup
+        (BETA) backup instances.
+
      create
         (BETA) Create a Memorystore instance.
 
diff --git a/gcloud/beta/memorystore/instances/update b/gcloud/beta/memorystore/instances/update
index 0a09e05dd..ffd171433 100644
--- a/gcloud/beta/memorystore/instances/update
+++ b/gcloud/beta/memorystore/instances/update
@@ -14,6 +14,10 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          --clear-automated-backup-config
+          --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS]
         [--clear-cross-instance-replication-config
           --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE --clear-primary-instance | --primary-instance=PRIMARY_INSTANCE --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] | --add-cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --clear-cross-instance-replication-config-secondary-instances | --remove-cross-instance-replication-config-secondary-instances=[instance=INSTANCE]]
         [--clear-maintenance-policy
@@ -209,6 +213,54 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       --clear-automated-backup-config
+          Set instance.automatedBackupConfig back to default value.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --clear-cross-instance-replication-config
@@ -520,6 +572,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -531,11 +587,11 @@ FLAGS
 
           Shorthand Example:
 
-              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -565,6 +621,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -576,11 +636,11 @@ FLAGS
 
           Shorthand Example:
 
-              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -616,6 +676,10 @@ FLAGS
                         the form of
                         projects/{project_id}/global/networks/{network_id}.
 
+                     port
+                        port will only be set for Primary/Reader or Discovery
+                        endpoint.
+
                      pscConnectionId
                         The PSC connection id of the forwarding rule connected
                         to the service attachment.
@@ -627,11 +691,11 @@ FLAGS
 
             Shorthand Example:
 
-                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
             JSON Example:
 
-                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
             File Example:
 
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/help b/gcloud/beta/network-services/multicast-group-range-activations/help
index 341ca8d21..9380af4d1 100644
--- a/gcloud/beta/network-services/multicast-group-range-activations/help
+++ b/gcloud/beta/network-services/multicast-group-range-activations/help
@@ -29,6 +29,9 @@ COMMANDS
      list
         (BETA) List multicast group range activations.
 
+     update
+        (BETA) Update a multicast group range activation.
+
 NOTES
     This command is currently in beta and might change without notice. This
     variant is also available:
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/update b/gcloud/beta/network-services/multicast-group-range-activations/update
new file mode 100644
index 000000000..c09d8670e
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/update
@@ -0,0 +1,117 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations update -
+        update a multicast group range activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations update
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION) [--async]
+        [--description=DESCRIPTION] [--[no-]enable-logging]
+        [--update-labels=[KEY=VALUE,...]]
+        [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Update a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    Update a multicast group range activation with the name
+    'my-multicast-group-range-activation' and location 'zone'.
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            update my-multicast-group-range-activation --enable-logging \
+            --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - Name of the multicast group
+     range to be updated. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group range activation.
+
+     --[no-]enable-logging
+        Whether to enable logging for this multicast group range activation.
+        Use --enable-logging to enable and --no-enable-logging to disable.
+
+     --update-labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to update. If a label exists, its value
+        is modified. Otherwise, a new label is created.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     At most one of these can be specified:
+
+       --clear-labels
+          Remove all labels. If --update-labels is also specified then
+          --clear-labels is applied first.
+
+          For example, to remove all labels:
+
+              $ gcloud beta network-services multicast-group-range-activations \
+                update --clear-labels
+
+          To remove all existing labels and create two new labels, foo and baz:
+
+              $ gcloud beta network-services multicast-group-range-activations \
+                update --clear-labels --update-labels foo=bar,baz=qux
+
+       --remove-labels=[KEY,...]
+          List of label keys to remove. If a label does not exist it is
+          silently ignored. If --update-labels is also specified then
+          --update-labels is applied first.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            update
+
diff --git a/gcloud/beta/redis/clusters/backup-collections/describe b/gcloud/beta/redis/clusters/backup-collections/describe
index b8adff904..e0cb955d1 100644
--- a/gcloud/beta/redis/clusters/backup-collections/describe
+++ b/gcloud/beta/redis/clusters/backup-collections/describe
@@ -69,8 +69,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backup-collections describe
 
         $ gcloud alpha redis clusters backup-collections describe
 
diff --git a/gcloud/beta/redis/clusters/backup-collections/help b/gcloud/beta/redis/clusters/backup-collections/help
index 853323a96..9c1922f6f 100644
--- a/gcloud/beta/redis/clusters/backup-collections/help
+++ b/gcloud/beta/redis/clusters/backup-collections/help
@@ -25,8 +25,10 @@ COMMANDS
         (BETA) List backup collections in a region.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backup-collections
 
         $ gcloud alpha redis clusters backup-collections
 
diff --git a/gcloud/beta/redis/clusters/backup-collections/list b/gcloud/beta/redis/clusters/backup-collections/list
index e3b5f2b4a..22978b47c 100644
--- a/gcloud/beta/redis/clusters/backup-collections/list
+++ b/gcloud/beta/redis/clusters/backup-collections/list
@@ -82,8 +82,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backup-collections list
 
         $ gcloud alpha redis clusters backup-collections list
 
diff --git a/gcloud/beta/redis/clusters/backups/delete b/gcloud/beta/redis/clusters/backups/delete
index 0307ab495..efb660064 100644
--- a/gcloud/beta/redis/clusters/backups/delete
+++ b/gcloud/beta/redis/clusters/backups/delete
@@ -81,8 +81,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backups delete
 
         $ gcloud alpha redis clusters backups delete
 
diff --git a/gcloud/beta/redis/clusters/backups/describe b/gcloud/beta/redis/clusters/backups/describe
index 9c68c0381..6b24ccbaa 100644
--- a/gcloud/beta/redis/clusters/backups/describe
+++ b/gcloud/beta/redis/clusters/backups/describe
@@ -78,8 +78,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backups describe
 
         $ gcloud alpha redis clusters backups describe
 
diff --git a/gcloud/beta/redis/clusters/backups/export b/gcloud/beta/redis/clusters/backups/export
index c575a1631..54e43f822 100644
--- a/gcloud/beta/redis/clusters/backups/export
+++ b/gcloud/beta/redis/clusters/backups/export
@@ -84,8 +84,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backups export
 
         $ gcloud alpha redis clusters backups export
 
diff --git a/gcloud/beta/redis/clusters/backups/help b/gcloud/beta/redis/clusters/backups/help
index f3fddf998..8fcad148f 100644
--- a/gcloud/beta/redis/clusters/backups/help
+++ b/gcloud/beta/redis/clusters/backups/help
@@ -29,8 +29,10 @@ COMMANDS
         (BETA) List backups under a backup collection in a region.
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backups
 
         $ gcloud alpha redis clusters backups
 
diff --git a/gcloud/beta/redis/clusters/backups/list b/gcloud/beta/redis/clusters/backups/list
index 3c1a18e7a..ad57f38bc 100644
--- a/gcloud/beta/redis/clusters/backups/list
+++ b/gcloud/beta/redis/clusters/backups/list
@@ -98,8 +98,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters backups list
 
         $ gcloud alpha redis clusters backups list
 
diff --git a/gcloud/beta/redis/clusters/create-backup b/gcloud/beta/redis/clusters/create-backup
index 0b319aafd..5f2c123f9 100644
--- a/gcloud/beta/redis/clusters/create-backup
+++ b/gcloud/beta/redis/clusters/create-backup
@@ -73,8 +73,10 @@ API REFERENCE
     API can be found at: https://cloud.google.com/memorystore/docs/redis/
 
 NOTES
-    This command is currently in beta and might change without notice. This
-    variant is also available:
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud redis clusters create-backup
 
         $ gcloud alpha redis clusters create-backup
 
diff --git a/gcloud/beta/run/deploy b/gcloud/beta/run/deploy
index 03d5284a7..d7b3a38fe 100644
--- a/gcloud/beta/run/deploy
+++ b/gcloud/beta/run/deploy
@@ -9,10 +9,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url]
         [--[no-]deploy-health-check] [--description=DESCRIPTION]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -187,6 +188,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
diff --git a/gcloud/beta/run/multi-region-services/update b/gcloud/beta/run/multi-region-services/update
index 44bb548aa..9e3613eda 100644
--- a/gcloud/beta/run/multi-region-services/update
+++ b/gcloud/beta/run/multi-region-services/update
@@ -11,10 +11,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url]
         [--[no-]deploy-health-check]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -157,6 +158,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
diff --git a/gcloud/beta/run/services/update b/gcloud/beta/run/services/update
index 7b562a6ad..71447a318 100644
--- a/gcloud/beta/run/services/update
+++ b/gcloud/beta/run/services/update
@@ -9,10 +9,11 @@ SYNOPSIS
         [--[no-]cpu-throttling] [--[no-]default-url]
         [--[no-]deploy-health-check]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES]
-        [--mesh=MESH] [--min=MIN] [--min-instances=MIN_INSTANCES]
-        [--region=REGION] [--remove-containers=[CONTAINER,...]]
+        [--[no-]gpu-zonal-redundancy] [--[no-]iap]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max-instances=MAX_INSTANCES] [--mesh=MESH] [--min=MIN]
+        [--min-instances=MIN_INSTANCES] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING]
         [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity]
         [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic]
@@ -155,6 +156,10 @@ FLAGS
         Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
         --no-gpu-zonal-redundancy to disable.
 
+     --[no-]iap
+        Whether to enable IAP for the Service. Use --iap to enable and --no-iap
+        to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
diff --git a/gcloud/beta/saas-runtime/help b/gcloud/beta/saas-runtime/help
index f2208e13f..464d497ab 100644
--- a/gcloud/beta/saas-runtime/help
+++ b/gcloud/beta/saas-runtime/help
@@ -25,7 +25,7 @@ GROUPS
         (BETA) Manage SaaS Runtime rollouts.
 
      saas
-        (BETA) Manage SaaS Runtime saas-types.
+        (BETA) Manage SaaS Runtime saas.
 
      tenants
         (BETA) Manage SaaS Runtime tenants.
diff --git a/gcloud/beta/saas-runtime/rollout-kinds/create b/gcloud/beta/saas-runtime/rollout-kinds/create
index 2b9c291c1..75c51b54b 100644
--- a/gcloud/beta/saas-runtime/rollout-kinds/create
+++ b/gcloud/beta/saas-runtime/rollout-kinds/create
@@ -106,9 +106,10 @@ OPTIONAL FLAGS
         The strategy to use for executing rollouts.
 
      --unit-filter=UNIT_FILTER
-        AIP/160 formatted filter string against Unit. The filter will be
-        applied to determine the eligible unit population. This filter can only
-        reduce, but not expand the scope of the rollout.
+        CEL(https://github.com/google/cel-spec) formatted filter string against
+        Unit. The filter will be applied to determine the eligible unit
+        population. This filter can only reduce, but not expand the scope of
+        the rollout.
 
      --update-unit-kind-strategy=UPDATE_UNIT_KIND_STRATEGY
         The config for updating the unit kind. By default, the unit kind will
diff --git a/gcloud/beta/saas-runtime/rollout-kinds/update b/gcloud/beta/saas-runtime/rollout-kinds/update
index d9fd0b4c6..7501b8167 100644
--- a/gcloud/beta/saas-runtime/rollout-kinds/update
+++ b/gcloud/beta/saas-runtime/rollout-kinds/update
@@ -59,9 +59,10 @@ FLAGS
         The strategy to use for executing rollouts.
 
      --unit-filter=UNIT_FILTER
-        AIP/160 formatted filter string against Unit. The filter will be
-        applied to determine the eligible unit population. This filter can only
-        reduce, but not expand the scope of the rollout.
+        CEL(https://github.com/google/cel-spec) formatted filter string against
+        Unit. The filter will be applied to determine the eligible unit
+        population. This filter can only reduce, but not expand the scope of
+        the rollout.
 
      --update-unit-kind-strategy=UPDATE_UNIT_KIND_STRATEGY
         The config for updating the unit kind. By default, the unit kind will
diff --git a/gcloud/beta/saas-runtime/saas/help b/gcloud/beta/saas-runtime/saas/help
index 0d2e99590..05e1315d3 100644
--- a/gcloud/beta/saas-runtime/saas/help
+++ b/gcloud/beta/saas-runtime/saas/help
@@ -1,5 +1,5 @@
 NAME
-    gcloud beta saas-runtime saas - manage SaaS Runtime saas-types
+    gcloud beta saas-runtime saas - manage SaaS Runtime saas
 
 SYNOPSIS
     gcloud beta saas-runtime saas COMMAND [GCLOUD_WIDE_FLAG ...]
diff --git a/gcloud/beta/sql/instances/create b/gcloud/beta/sql/instances/create
index fe8064cfa..aa2b1ffde 100644
--- a/gcloud/beta/sql/instances/create
+++ b/gcloud/beta/sql/instances/create
@@ -278,9 +278,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies
diff --git a/gcloud/beta/sql/instances/patch b/gcloud/beta/sql/instances/patch
index ec547d192..13b000749 100644
--- a/gcloud/beta/sql/instances/patch
+++ b/gcloud/beta/sql/instances/patch
@@ -220,9 +220,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --[no-]enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies
diff --git a/gcloud/bigtable/app-profiles/create b/gcloud/bigtable/app-profiles/create
index 1a8eecd5d..62d81b213 100644
--- a/gcloud/bigtable/app-profiles/create
+++ b/gcloud/bigtable/app-profiles/create
@@ -74,7 +74,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/bigtable/app-profiles/delete b/gcloud/bigtable/app-profiles/delete
index 43d1011b7..564642479 100644
--- a/gcloud/bigtable/app-profiles/delete
+++ b/gcloud/bigtable/app-profiles/delete
@@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/bigtable/app-profiles/describe b/gcloud/bigtable/app-profiles/describe
index 1faeff18c..fd3bc195e 100644
--- a/gcloud/bigtable/app-profiles/describe
+++ b/gcloud/bigtable/app-profiles/describe
@@ -40,7 +40,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/bigtable/app-profiles/update b/gcloud/bigtable/app-profiles/update
index ff1c01f33..75c0946f6 100644
--- a/gcloud/bigtable/app-profiles/update
+++ b/gcloud/bigtable/app-profiles/update
@@ -74,7 +74,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the app profile.
+          Bigtable instance for the app profile.
 
           To set the instance attribute:
           ▸ provide the argument app_profile on the command line with a fully
diff --git a/gcloud/bigtable/backups/copy b/gcloud/bigtable/backups/copy
index 83282c1e0..2d5c2dd57 100644
--- a/gcloud/bigtable/backups/copy
+++ b/gcloud/bigtable/backups/copy
@@ -60,7 +60,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --destination-cluster=DESTINATION_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -68,7 +68,7 @@ REQUIRED FLAGS
           ▸ provide the argument --destination-cluster on the command line.
 
        --destination-instance=DESTINATION_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --destination-backup on the command line
@@ -114,7 +114,7 @@ REQUIRED FLAGS
           this group are specified.
 
        --source-cluster=SOURCE_CLUSTER
-          Cloud Bigtable cluster for the backup.
+          Bigtable cluster for the backup.
 
           To set the cluster attribute:
           ▸ provide the argument --source-backup on the command line with a
@@ -122,7 +122,7 @@ REQUIRED FLAGS
           ▸ provide the argument --source-cluster on the command line.
 
        --source-instance=SOURCE_INSTANCE
-          Cloud Bigtable instance for the backup.
+          Bigtable instance for the backup.
 
           To set the instance attribute:
           ▸ provide the argument --source-backup on the command line with a
diff --git a/gcloud/bigtable/clusters/create b/gcloud/bigtable/clusters/create
index 09de7a142..f82694db7 100644
--- a/gcloud/bigtable/clusters/create
+++ b/gcloud/bigtable/clusters/create
@@ -54,7 +54,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/bigtable/clusters/delete b/gcloud/bigtable/clusters/delete
index 21e403c4c..4d38088c7 100644
--- a/gcloud/bigtable/clusters/delete
+++ b/gcloud/bigtable/clusters/delete
@@ -37,7 +37,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/bigtable/clusters/describe b/gcloud/bigtable/clusters/describe
index 21c91904a..7b60acf27 100644
--- a/gcloud/bigtable/clusters/describe
+++ b/gcloud/bigtable/clusters/describe
@@ -38,7 +38,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/bigtable/clusters/update b/gcloud/bigtable/clusters/update
index 9b4eb68c4..5ab4b9410 100644
--- a/gcloud/bigtable/clusters/update
+++ b/gcloud/bigtable/clusters/update
@@ -43,7 +43,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/bigtable/help b/gcloud/bigtable/help
index 4f57ae970..fb159d9c2 100644
--- a/gcloud/bigtable/help
+++ b/gcloud/bigtable/help
@@ -33,6 +33,9 @@ GROUPS
      instances
         Manage Cloud Bigtable instances.
 
+     logical-views
+        Manage Bigtable logical views.
+
      operations
         Manage Cloud Bigtable operations.
 
diff --git a/gcloud/bigtable/hot-tablets/list b/gcloud/bigtable/hot-tablets/list
index bb7ee9a45..8c97d5539 100644
--- a/gcloud/bigtable/hot-tablets/list
+++ b/gcloud/bigtable/hot-tablets/list
@@ -53,7 +53,7 @@ POSITIONAL ARGUMENTS
           arguments in this group are specified.
 
        --instance=INSTANCE
-          Cloud Bigtable instance for the cluster.
+          Bigtable instance for the cluster.
 
           To set the instance attribute:
           ▸ provide the argument cluster on the command line with a fully
diff --git a/gcloud/bigtable/logical-views/create b/gcloud/bigtable/logical-views/create
new file mode 100644
index 000000000..341dc5b40
--- /dev/null
+++ b/gcloud/bigtable/logical-views/create
@@ -0,0 +1,73 @@
+NAME
+    gcloud bigtable logical-views create - create a new Bigtable logical view
+
+SYNOPSIS
+    gcloud bigtable logical-views create (LOGICAL_VIEW : --instance=INSTANCE)
+        --query=QUERY [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a new Bigtable logical view.
+
+EXAMPLES
+    To create a logical view, run:
+
+        $ gcloud bigtable logical-views create my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to create. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views create
+
+        $ gcloud beta bigtable logical-views create
+
diff --git a/gcloud/bigtable/logical-views/delete b/gcloud/bigtable/logical-views/delete
new file mode 100644
index 000000000..593b86690
--- /dev/null
+++ b/gcloud/bigtable/logical-views/delete
@@ -0,0 +1,63 @@
+NAME
+    gcloud bigtable logical-views delete - delete a Bigtable logical view
+
+SYNOPSIS
+    gcloud bigtable logical-views delete (LOGICAL_VIEW : --instance=INSTANCE)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a Bigtable logical view.
+
+EXAMPLES
+    To delete a logical view, run:
+
+        $ gcloud bigtable logical-views delete my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to delete. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views delete
+
+        $ gcloud beta bigtable logical-views delete
+
diff --git a/gcloud/bigtable/logical-views/describe b/gcloud/bigtable/logical-views/describe
new file mode 100644
index 000000000..56f4fcfe5
--- /dev/null
+++ b/gcloud/bigtable/logical-views/describe
@@ -0,0 +1,64 @@
+NAME
+    gcloud bigtable logical-views describe - describe an existing Bigtable
+        logical view
+
+SYNOPSIS
+    gcloud bigtable logical-views describe (LOGICAL_VIEW : --instance=INSTANCE)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Describe an existing Bigtable logical view.
+
+EXAMPLES
+    To view a logical view's description, run:
+
+        $ gcloud bigtable logical-views describe my-logical-view-id \
+            --instance=my-instance-id
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to describe. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views describe
+
+        $ gcloud beta bigtable logical-views describe
+
diff --git a/gcloud/bigtable/logical-views/help b/gcloud/bigtable/logical-views/help
new file mode 100644
index 000000000..99ddfd396
--- /dev/null
+++ b/gcloud/bigtable/logical-views/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud bigtable logical-views - manage Bigtable logical views
+
+SYNOPSIS
+    gcloud bigtable logical-views COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Bigtable logical views.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Create a new Bigtable logical view.
+
+     delete
+        Delete a Bigtable logical view.
+
+     describe
+        Describe an existing Bigtable logical view.
+
+     list
+        List existing Bigtable logical views.
+
+     update
+        Update a Bigtable logical view.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views
+
+        $ gcloud beta bigtable logical-views
+
diff --git a/gcloud/bigtable/logical-views/list b/gcloud/bigtable/logical-views/list
new file mode 100644
index 000000000..73af21f41
--- /dev/null
+++ b/gcloud/bigtable/logical-views/list
@@ -0,0 +1,82 @@
+NAME
+    gcloud bigtable logical-views list - list existing Bigtable logical views
+
+SYNOPSIS
+    gcloud bigtable logical-views list --instance=INSTANCE
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List existing Bigtable logical views.
+
+EXAMPLES
+    To list all logical views for an instance, run:
+
+        $ gcloud bigtable logical-views list --instance=my-instance-id
+
+REQUIRED FLAGS
+     Instance resource - The instance to list logical views for. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --instance=INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument --instance on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views list
+
+        $ gcloud beta bigtable logical-views list
+
diff --git a/gcloud/bigtable/logical-views/update b/gcloud/bigtable/logical-views/update
new file mode 100644
index 000000000..68eaa9c1b
--- /dev/null
+++ b/gcloud/bigtable/logical-views/update
@@ -0,0 +1,73 @@
+NAME
+    gcloud bigtable logical-views update - update a Bigtable logical view
+
+SYNOPSIS
+    gcloud bigtable logical-views update (LOGICAL_VIEW : --instance=INSTANCE)
+        --query=QUERY [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Update a Bigtable logical view.
+
+EXAMPLES
+    To update a logical view to a new query, run:
+
+        $ gcloud bigtable logical-views update my-logical-view-id \
+            --instance=my-instance-id \
+            --query="SELECT my-column-family2 FROM my-table"
+
+POSITIONAL ARGUMENTS
+     Logical view resource - The logical view to update. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument logical_view on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       LOGICAL_VIEW
+          ID of the logical view or fully qualified identifier for the logical
+          view.
+
+          To set the name attribute:
+          ▸ provide the argument logical_view on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --instance=INSTANCE
+          Bigtable instance for the logical view.
+
+          To set the instance attribute:
+          ▸ provide the argument logical_view on the command line with a
+            fully specified name;
+          ▸ provide the argument --instance on the command line.
+
+REQUIRED FLAGS
+     --query=QUERY
+        The query of the view.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha bigtable logical-views update
+
+        $ gcloud beta bigtable logical-views update
+
diff --git a/gcloud/compute/firewall-policies/export-rules b/gcloud/compute/firewall-policies/export-rules
new file mode 100644
index 000000000..89ed07e85
--- /dev/null
+++ b/gcloud/compute/firewall-policies/export-rules
@@ -0,0 +1,48 @@
+NAME
+    gcloud compute firewall-policies export-rules - export Compute Engine
+        organization firewall policy rules
+
+SYNOPSIS
+    gcloud compute firewall-policies export-rules FIREWALL_POLICY
+        [--destination=DESTINATION] [--organization=ORGANIZATION]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Exports Firewall Policy rules configuration to a file.
+
+EXAMPLES
+    Firewall Policy rules can be exported by running:
+
+        $ gcloud compute firewall-policies export-rules FIREWALL_POLICY \
+            --destination=<path-to-file> --organization=<organization>
+
+POSITIONAL ARGUMENTS
+     FIREWALL_POLICY
+        Short name or ID of the firewall policy to export rules from.
+
+FLAGS
+     --destination=DESTINATION
+        Path to a YAML file where the configuration will be exported.
+        Alternatively, you may omit this flag to write to standard output. For
+        a schema describing the export/import format, see:
+        $CLOUDSDKROOT/lib/googlecloudsdk/schemas/compute/v1/FirewallPolicy.yaml.
+
+     --organization=ORGANIZATION
+        Organization in which the organization firewall policy rules export
+        from. Must be set if FIREWALL_POLICY is short name.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute firewall-policies export-rules
+
+        $ gcloud beta compute firewall-policies export-rules
+
diff --git a/gcloud/compute/firewall-policies/help b/gcloud/compute/firewall-policies/help
index 560bc6344..7f4d0055f 100644
--- a/gcloud/compute/firewall-policies/help
+++ b/gcloud/compute/firewall-policies/help
@@ -40,6 +40,12 @@ COMMANDS
      describe
         Describe a Compute Engine organization firewall policy.
 
+     export-rules
+        Export Compute Engine organization firewall policy rules.
+
+     import-rules
+        Import Compute Engine organization firewall policy rules.
+
      list
         List Compute Engine organization firewall policies.
 
diff --git a/gcloud/compute/firewall-policies/import-rules b/gcloud/compute/firewall-policies/import-rules
new file mode 100644
index 000000000..05c47df6f
--- /dev/null
+++ b/gcloud/compute/firewall-policies/import-rules
@@ -0,0 +1,49 @@
+NAME
+    gcloud compute firewall-policies import-rules - import Compute Engine
+        organization firewall policy rules
+
+SYNOPSIS
+    gcloud compute firewall-policies import-rules FIREWALL_POLICY
+        [--organization=ORGANIZATION] [--source=SOURCE] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Imports Firewall Policy rules configuration from a file.
+
+EXAMPLES
+    Firewall Policy rules can be imported by running:
+
+        $ gcloud compute firewall-policies import-rules FIREWALL_POLICY \
+            --source=<path-to-file> --organization=<organization>
+
+POSITIONAL ARGUMENTS
+     FIREWALL_POLICY
+        Short name or ID of the firewall policy to imports rules to.
+
+FLAGS
+     --organization=ORGANIZATION
+        Organization in which the organization firewall policy rules import to.
+        Must be set if FIREWALL_POLICY is short name.
+
+     --source=SOURCE
+        Path to a YAML file containing configuration export data.
+        Alternatively, you may omit this flag to read from standard input.For a
+        schema describing the export/import format, see:
+        $CLOUDSDKROOT/lib/googlecloudsdk/schemas/compute/v1/FirewallPolicy.yaml.
+
+            Note: $CLOUDSDKROOT represents the Google Cloud CLI's installation directory.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute firewall-policies import-rules
+
+        $ gcloud beta compute firewall-policies import-rules
+
diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create
index 15e1bce38..47004c56f 100644
--- a/gcloud/compute/instance-templates/create
+++ b/gcloud/compute/instance-templates/create
@@ -755,6 +755,11 @@ FLAGS
         affects the price, availability, and how long your VM instances can
         run. PROVISIONING_MODEL must be one of:
 
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/compute/instances/bulk/create b/gcloud/compute/instances/bulk/create
index d5d82ab73..d716f55f1 100644
--- a/gcloud/compute/instances/bulk/create
+++ b/gcloud/compute/instances/bulk/create
@@ -703,6 +703,11 @@ OPTIONAL FLAGS
         affects the price, availability, and how long your VM instances can
         run. PROVISIONING_MODEL must be one of:
 
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/compute/instances/create b/gcloud/compute/instances/create
index 077061d33..ae1f47582 100644
--- a/gcloud/compute/instances/create
+++ b/gcloud/compute/instances/create
@@ -856,6 +856,11 @@ FLAGS
         affects the price, availability, and how long your VM instances can
         run. PROVISIONING_MODEL must be one of:
 
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/compute/instances/create-with-container b/gcloud/compute/instances/create-with-container
index 39e8e6cc4..e26aee77c 100644
--- a/gcloud/compute/instances/create-with-container
+++ b/gcloud/compute/instances/create-with-container
@@ -761,6 +761,11 @@ FLAGS
         affects the price, availability, and how long your VM instances can
         run. PROVISIONING_MODEL must be one of:
 
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/compute/instances/report-host-as-faulty b/gcloud/compute/instances/report-host-as-faulty
index e3e138fc8..81663fbab 100644
--- a/gcloud/compute/instances/report-host-as-faulty
+++ b/gcloud/compute/instances/report-host-as-faulty
@@ -5,7 +5,7 @@ NAME
 SYNOPSIS
     gcloud compute instances report-host-as-faulty INSTANCE_NAME
         --disruption-schedule=DISRUPTION_SCHEDULE
-        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION]
+        --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] [--async]
         [--zone=ZONE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -38,6 +38,10 @@ REQUIRED FLAGS
         fault being reported.
 
 OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
      --zone=ZONE
         Zone of the instance to operate on. If not specified, you might be
         prompted to select a zone (interactive mode only). gcloud attempts to
diff --git a/gcloud/compute/instances/set-scheduling b/gcloud/compute/instances/set-scheduling
index be73e36d3..9acded584 100644
--- a/gcloud/compute/instances/set-scheduling
+++ b/gcloud/compute/instances/set-scheduling
@@ -83,6 +83,11 @@ FLAGS
         affects the price, availability, and how long your VM instances can
         run. PROVISIONING_MODEL must be one of:
 
+         RESERVATION_BOUND
+            The VM instances run for the entire duration of their associated
+            reservation. You can only specify this provisioning model if you
+            want your VM instances to consume a specific reservation with
+            either a calendar reservation mode or a dense deployment type.
          SPOT
             Compute Engine may stop a Spot VM instance whenever it needs
             capacity. Because Spot VM instances don't have a guaranteed
diff --git a/gcloud/compute/network-firewall-policies/export-rules b/gcloud/compute/network-firewall-policies/export-rules
new file mode 100644
index 000000000..cdc98f276
--- /dev/null
+++ b/gcloud/compute/network-firewall-policies/export-rules
@@ -0,0 +1,53 @@
+NAME
+    gcloud compute network-firewall-policies export-rules - export Compute
+        Engine network firewall policy rules
+
+SYNOPSIS
+    gcloud compute network-firewall-policies export-rules FIREWALL_POLICY
+        [--destination=DESTINATION] [--global | --region=REGION]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Exports Firewall Policy rules configuration to a file.
+
+EXAMPLES
+    Firewall Policy rules can be exported by running:
+
+        $ gcloud compute network-firewall-policies export-rules \
+            FIREWALL_POLICY --destination=<path-to-file> --global
+
+POSITIONAL ARGUMENTS
+     FIREWALL_POLICY
+        name of the network firewall policy to export rules from.
+
+FLAGS
+     --destination=DESTINATION
+        Path to a YAML file where the configuration will be exported.
+        Alternatively, you may omit this flag to write to standard output. For
+        a schema describing the export/import format, see:
+        $CLOUDSDKROOT/lib/googlecloudsdk/schemas/compute/v1/FirewallPolicy.yaml.
+
+     At most one of these can be specified:
+
+       --global
+          If set, the firewall policy is global.
+
+       --region=REGION
+          Region of the firewall policy to export-rules. Overrides the default
+          compute/region property value for this command invocation.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute network-firewall-policies export-rules
+
+        $ gcloud beta compute network-firewall-policies export-rules
+
diff --git a/gcloud/compute/network-firewall-policies/help b/gcloud/compute/network-firewall-policies/help
index edbc3df17..e23992159 100644
--- a/gcloud/compute/network-firewall-policies/help
+++ b/gcloud/compute/network-firewall-policies/help
@@ -45,9 +45,15 @@ COMMANDS
      describe
         Describe a Compute Engine network firewall policy.
 
+     export-rules
+        Export Compute Engine network firewall policy rules.
+
      get-effective-firewalls
         Get the effective firewalls for a network.
 
+     import-rules
+        Import a Compute Engine network firewall policy rules.
+
      list
         List Compute Engine network firewall policies.
 
diff --git a/gcloud/compute/network-firewall-policies/import-rules b/gcloud/compute/network-firewall-policies/import-rules
new file mode 100644
index 000000000..a9485349c
--- /dev/null
+++ b/gcloud/compute/network-firewall-policies/import-rules
@@ -0,0 +1,54 @@
+NAME
+    gcloud compute network-firewall-policies import-rules - import a Compute
+        Engine network firewall policy rules
+
+SYNOPSIS
+    gcloud compute network-firewall-policies import-rules FIREWALL_POLICY
+        [--source=SOURCE] [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Imports Firewall Policy rules configuration from a file.
+
+EXAMPLES
+    Firewall Policy rules can be imported by running:
+
+        $ gcloud compute network-firewall-policies import-rules \
+            FIREWALL_POLICY --source=<path-to-file> --global
+
+POSITIONAL ARGUMENTS
+     FIREWALL_POLICY
+        name of the network firewall policy to import rules to.
+
+FLAGS
+     --source=SOURCE
+        Path to a YAML file containing configuration export data.
+        Alternatively, you may omit this flag to read from standard input.For a
+        schema describing the export/import format, see:
+        $CLOUDSDKROOT/lib/googlecloudsdk/schemas/compute/v1/FirewallPolicy.yaml.
+
+            Note: $CLOUDSDKROOT represents the Google Cloud CLI's installation directory.
+
+     At most one of these can be specified:
+
+       --global
+          If set, the firewall policy is global.
+
+       --region=REGION
+          Region of the firewall policy to import-rules. Overrides the default
+          compute/region property value for this command invocation.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute network-firewall-policies import-rules
+
+        $ gcloud beta compute network-firewall-policies import-rules
+
diff --git a/gcloud/compute/networks/subnets/create b/gcloud/compute/networks/subnets/create
index 7c28529f0..a4cc5bda9 100644
--- a/gcloud/compute/networks/subnets/create
+++ b/gcloud/compute/networks/subnets/create
@@ -5,8 +5,9 @@ NAME
 SYNOPSIS
     gcloud compute networks subnets create NAME --network=NETWORK
         [--description=DESCRIPTION] [--enable-flow-logs]
-        [--enable-private-ip-google-access] [--ip-collection=IP_COLLECTION]
-        [--ipv6-access-type=IPV6_ACCESS_TYPE]
+        [--enable-private-ip-google-access]
+        [--external-ipv6-prefix=EXTERNAL_IPV6_PREFIX]
+        [--ip-collection=IP_COLLECTION] [--ipv6-access-type=IPV6_ACCESS_TYPE]
         [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL]
         [--logging-filter-expr=LOGGING_FILTER_EXPR]
         [--logging-flow-sampling=LOGGING_FLOW_SAMPLING]
@@ -51,6 +52,15 @@ OPTIONAL FLAGS
         Enable/disable access to Google Cloud APIs from this subnet for
         instances without a public ip address.
 
+     --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
+
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
+
      --ip-collection=IP_COLLECTION
         Resource reference to a public delegated prefix. The
         PublicDelegatedPrefix must be a sub-prefix in
diff --git a/gcloud/compute/networks/subnets/update b/gcloud/compute/networks/subnets/update
index 1cc3181c7..dd6ba83c3 100644
--- a/gcloud/compute/networks/subnets/update
+++ b/gcloud/compute/networks/subnets/update
@@ -6,6 +6,7 @@ SYNOPSIS
     gcloud compute networks subnets update NAME
         [--add-secondary-ranges-with-reserved-internal-range=RANGE_NAME=INTERNAL_RANGE_URL,
           [...]] [--drain-timeout=DRAIN_TIMEOUT; default="0s"]
+        [--external-ipv6-prefix=EXTERNAL_IPV6_PREFIX]
         [--ip-collection=IP_COLLECTION] [--ipv6-access-type=IPV6_ACCESS_TYPE]
         [--logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL]
         [--logging-filter-expr=LOGGING_FILTER_EXPR]
@@ -56,6 +57,15 @@ FLAGS
         availability of proxies for load balancing. The drain timeout is only
         applicable when the [--role=ACTIVE] flag is being used.
 
+     --external-ipv6-prefix=EXTERNAL_IPV6_PREFIX
+        The /64 external IPv6 CIDR range to assign to this subnet. The range
+        must be associated with an IPv6 BYOIP sub-prefix that is defined by the
+        --ip-collection flag. If you specify --ip-collection but not
+        --external-ipv6-prefix, a random /64 range is allocated from the
+        sub-prefix.
+
+        For example, --external-ipv6-prefix=2600:1901:0:0:0:0:0:0/64
+
      --ip-collection=IP_COLLECTION
         Resource reference to a public delegated prefix. The
         PublicDelegatedPrefix must be a sub-prefix in
diff --git a/gcloud/compute/os-config/help b/gcloud/compute/os-config/help
index 6d544de5f..1c85783c3 100644
--- a/gcloud/compute/os-config/help
+++ b/gcloud/compute/os-config/help
@@ -31,6 +31,9 @@ GROUPS
      patch-jobs
         Manage OS patches for Compute Engine VMs.
 
+     policy-orchestrators
+        Manage VM Manager policy orchestrators.
+
      project-feature-settings
         Manage VM Manager project feature settings.
 
diff --git a/gcloud/compute/os-config/policy-orchestrators/create b/gcloud/compute/os-config/policy-orchestrators/create
new file mode 100644
index 000000000..2ba9bad2d
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/create
@@ -0,0 +1,148 @@
+NAME
+    gcloud compute os-config policy-orchestrators create - create a policy
+        orchestrator
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators create
+        (POLICY_ORCHESTRATOR : --folder=FOLDER --organization=ORGANIZATION)
+        --policy-type=POLICY_TYPE [--action=ACTION; default="upsert"] [--async]
+        [--include-folders=INCLUDE_FOLDERS]
+        [--include-locations=INCLUDE_LOCATIONS]
+        [--include-projects=INCLUDE_PROJECTS] [--policy-file=POLICY_FILE]
+        [--policy-id=POLICY_ID] [--state=STATE; default="ACTIVE"]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a policy orchestrator.
+
+EXAMPLES
+    To create a policy orchestrator my-orchestrator in folder 123456 for OS
+    policy assignment with config file /path/to/file/config.yaml, run:
+
+        $ gcloud compute os-config policy-orchestrators create \
+            my-orchestrator --folder=123456 \
+            --policy-type os_policy_assignment_v1 \
+            --policy-file=/path/to/file/config.yaml
+
+    To create a policy orchestrator my-orchestrator in folder 123456 that
+    deletes OS Policy assignments with id my-policy, run:
+
+        $ gcloud compute os-config policy-orchestrators create \
+            my-orchestrator --folder=123456 \
+            --policy-type os_policy_assignment_v1 --action delete \
+            --policy-id my-policy
+
+POSITIONAL ARGUMENTS
+     Policy orchestrator resource - Policy orchestrator to create. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument policy_orchestrator on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project. This resource can be one of the
+        following types: [policy_orchestrator_project,
+        policy_orchestrator_folder, policy_orchestrator_organization].
+
+     This must be specified.
+
+       POLICY_ORCHESTRATOR
+          ID of the policy_orchestrator or fully qualified identifier for the
+          policy_orchestrator.
+
+          To set the policy_orchestrator attribute:
+          ▸ provide the argument policy_orchestrator on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --folder=FOLDER
+          Folder of the policy_orchestrator.
+
+          To set the folder attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --folder on the command line. Must be
+            specified for resource of type [policy_orchestrator_folder].
+
+       --organization=ORGANIZATION
+          Organization of the policy_orchestrator.
+
+          To set the organization attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --organization on the command line. Must be
+            specified for resource of type [policy_orchestrator_organization].
+
+REQUIRED FLAGS
+     --policy-type=POLICY_TYPE
+        Policy type to use. POLICY_TYPE must be (only one value is supported):
+
+         os_policy_assignment_v1
+            OS policy assignment v1.
+
+OPTIONAL FLAGS
+     --action=ACTION; default="upsert"
+        Action to be taken on policy. ACTION must be one of:
+
+         delete
+            Delete a policy with a given name. policy-id must be specified.
+         upsert
+            Create or update a policy. policy-file must be specified.
+
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --include-folders=INCLUDE_FOLDERS
+        Applies policy to selected folders. Comma-separated list of folder
+        numbers. Can beused together with --include-projects.
+
+     --include-locations=INCLUDE_LOCATIONS
+        Applies policy to selected locations, e.g. us-central1-a.
+
+     --include-projects=INCLUDE_PROJECTS
+        Applies policy to selected projects. Comma-separated list of project
+        numbers. Can be used together with --include-folders.
+
+     --policy-file=POLICY_FILE
+        Absolute path to the OS policy assignment file on your local client.
+        File must be in either JSON or YAML format. This file defines the OS
+        policies that you want to apply to your VMs, the target VMs that you
+        want to apply the policies to, and the rollout rate at which to apply
+        the OS policies on a zonal level. For more information about this
+        resource and sample OS policy assignment files, see
+        https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment.
+
+     --policy-id=POLICY_ID
+        Policy id. Must be specified for DELETE action.
+
+     --state=STATE; default="ACTIVE"
+        State of the policy orchestrator. STATE must be one of:
+
+         active
+            Creates a policy orchestrator in ACTIVE state.
+         stopped
+            Creates a policy orchestrator in STOPPED state.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the osconfig/v2 API. The full documentation for this API
+    can be found at: https://cloud.google.com/compute/docs/osconfig/rest
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators create
+
+        $ gcloud beta compute os-config policy-orchestrators create
+
diff --git a/gcloud/compute/os-config/policy-orchestrators/delete b/gcloud/compute/os-config/policy-orchestrators/delete
new file mode 100644
index 000000000..2fa4892b1
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/delete
@@ -0,0 +1,86 @@
+NAME
+    gcloud compute os-config policy-orchestrators delete - delete a policy
+        orchestrator
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators delete
+        (POLICY_ORCHESTRATOR : --folder=FOLDER --organization=ORGANIZATION)
+        [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a policy orchestrator and cancel ongoing rollouts (best-effort).
+
+EXAMPLES
+    To delete a policy orchestrator my-orchestrator in the folder 123456:
+
+        $ gcloud compute os-config policy-orchestrators delete \
+            my-orchestrator --folder=123456
+
+POSITIONAL ARGUMENTS
+     Policy orchestrator resource - policy orchestrator to delete. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument policy_orchestrator on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project. This resource can be one of the
+        following types: [policy_orchestrator_project,
+        policy_orchestrator_folder, policy_orchestrator_organization].
+
+     This must be specified.
+
+       POLICY_ORCHESTRATOR
+          ID of the policy_orchestrator or fully qualified identifier for the
+          policy_orchestrator.
+
+          To set the policy_orchestrator attribute:
+          ▸ provide the argument policy_orchestrator on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --folder=FOLDER
+          Folder of the policy_orchestrator.
+
+          To set the folder attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --folder on the command line. Must be
+            specified for resource of type [policy_orchestrator_folder].
+
+       --organization=ORGANIZATION
+          Organization of the policy_orchestrator.
+
+          To set the organization attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --organization on the command line. Must be
+            specified for resource of type [policy_orchestrator_organization].
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the osconfig/v2 API. The full documentation for this API
+    can be found at: https://cloud.google.com/compute/docs/osconfig/rest
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators delete
+
+        $ gcloud beta compute os-config policy-orchestrators delete
+
diff --git a/gcloud/compute/os-config/policy-orchestrators/describe b/gcloud/compute/os-config/policy-orchestrators/describe
new file mode 100644
index 000000000..b0cae8916
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/describe
@@ -0,0 +1,81 @@
+NAME
+    gcloud compute os-config policy-orchestrators describe - describe a policy
+        orchestrator
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators describe
+        (POLICY_ORCHESTRATOR : --folder=FOLDER --organization=ORGANIZATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Get the details of a policy orchestrator.
+
+EXAMPLES
+    To describe a policy orchestrator my-orchestrator:
+
+        $ gcloud compute os-config policy-orchestrators describe \
+            my-orchestrator
+
+POSITIONAL ARGUMENTS
+     Policy orchestrator resource - The policy orchestrator to describe. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument policy_orchestrator on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project. This resource can be one of the
+        following types: [policy_orchestrator_project,
+        policy_orchestrator_folder, policy_orchestrator_organization].
+
+     This must be specified.
+
+       POLICY_ORCHESTRATOR
+          ID of the policy_orchestrator or fully qualified identifier for the
+          policy_orchestrator.
+
+          To set the policy_orchestrator attribute:
+          ▸ provide the argument policy_orchestrator on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --folder=FOLDER
+          Folder of the policy_orchestrator.
+
+          To set the folder attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --folder on the command line. Must be
+            specified for resource of type [policy_orchestrator_folder].
+
+       --organization=ORGANIZATION
+          Organization of the policy_orchestrator.
+
+          To set the organization attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --organization on the command line. Must be
+            specified for resource of type [policy_orchestrator_organization].
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the osconfig/v2 API. The full documentation for this API
+    can be found at: https://cloud.google.com/compute/docs/osconfig/rest
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators describe
+
+        $ gcloud beta compute os-config policy-orchestrators describe
+
diff --git a/gcloud/compute/os-config/policy-orchestrators/help b/gcloud/compute/os-config/policy-orchestrators/help
new file mode 100644
index 000000000..a0387e45b
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/help
@@ -0,0 +1,41 @@
+NAME
+    gcloud compute os-config policy-orchestrators - manage VM Manager policy
+        orchestrators
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage VM Manager policy orchestrators.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Create a policy orchestrator.
+
+     delete
+        Delete a policy orchestrator.
+
+     describe
+        Describe a policy orchestrator.
+
+     list
+        List policy orchestrators.
+
+     update
+        Update a policy orchestrator.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators
+
+        $ gcloud beta compute os-config policy-orchestrators
+
diff --git a/gcloud/compute/os-config/policy-orchestrators/list b/gcloud/compute/os-config/policy-orchestrators/list
new file mode 100644
index 000000000..08132df23
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/list
@@ -0,0 +1,96 @@
+NAME
+    gcloud compute os-config policy-orchestrators list - list policy
+        orchestrators
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators list
+        [--folder=FOLDER --organization=ORGANIZATION] [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List policy orchestrators.
+
+EXAMPLES
+    To list the policy orchestrators in folder 123456, run:
+
+        $ gcloud compute os-config policy-orchestrators list --folder 123456
+
+FLAGS
+     Project folder organization resource - Project, folder or organization to
+     list policy orchestrators from. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project. This resource can be one of the
+        following types: [project_a, folder_a, organization_a].
+
+       --folder=FOLDER
+          ID of the project_folder_organization or fully qualified identifier
+          for the project_folder_organization.
+
+          To set the folder attribute:
+          ▸ provide the argument --folder on the command line. Must be
+            specified for resource of type [folder_a].
+
+       --organization=ORGANIZATION
+          ID of the project_folder_organization or fully qualified identifier
+          for the project_folder_organization.
+
+          To set the organization attribute:
+          ▸ provide the argument --organization on the command line. Must be
+            specified for resource of type [organization_a].
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the osconfig/v2 API. The full documentation for this API
+    can be found at: https://cloud.google.com/compute/docs/osconfig/rest
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators list
+
+        $ gcloud beta compute os-config policy-orchestrators list
+
diff --git a/gcloud/compute/os-config/policy-orchestrators/update b/gcloud/compute/os-config/policy-orchestrators/update
new file mode 100644
index 000000000..94609e457
--- /dev/null
+++ b/gcloud/compute/os-config/policy-orchestrators/update
@@ -0,0 +1,162 @@
+NAME
+    gcloud compute os-config policy-orchestrators update - update a policy
+        orchestrator
+
+SYNOPSIS
+    gcloud compute os-config policy-orchestrators update
+        (POLICY_ORCHESTRATOR : --folder=FOLDER --organization=ORGANIZATION)
+        [--action=ACTION] [--async] [--policy-file=POLICY_FILE]
+        [--policy-id=POLICY_ID] [--state=STATE]
+        [--clear-folders | --include-folders=INCLUDE_FOLDERS]
+        [--clear-locations | --include-locations=INCLUDE_LOCATIONS]
+        [--clear-projects | --include-projects=INCLUDE_PROJECTS]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Update a policy orchestrator.
+
+EXAMPLES
+    To update an policy orchestrator my-orchestrator in folder 123456 with
+    config file /path/to/file/config.yaml, run:
+
+        $ gcloud compute os-config policy-orchestrators update \
+            my-orchestrator --folder=123456 \
+            --policy-file=/path/to/file/config.yaml
+
+    To update an policy orchestrator my-orchestrator in folder 123456 with
+    state STOPPED, run:
+
+        $ gcloud compute os-config policy-orchestrators update \
+            my-orchestrator --folder=123456 --state=stopped
+
+POSITIONAL ARGUMENTS
+     Policy orchestrator resource - Policy orchestrator to update. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument policy_orchestrator on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project. This resource can be one of the
+        following types: [policy_orchestrator_project,
+        policy_orchestrator_folder, policy_orchestrator_organization].
+
+     This must be specified.
+
+       POLICY_ORCHESTRATOR
+          ID of the policy_orchestrator or fully qualified identifier for the
+          policy_orchestrator.
+
+          To set the policy_orchestrator attribute:
+          ▸ provide the argument policy_orchestrator on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --folder=FOLDER
+          Folder of the policy_orchestrator.
+
+          To set the folder attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --folder on the command line. Must be
+            specified for resource of type [policy_orchestrator_folder].
+
+       --organization=ORGANIZATION
+          Organization of the policy_orchestrator.
+
+          To set the organization attribute:
+          ▸ provide the argument policy_orchestrator on the command line with
+            a fully specified name;
+          ▸ provide the argument --organization on the command line. Must be
+            specified for resource of type [policy_orchestrator_organization].
+
+FLAGS
+     --action=ACTION
+        Action to be taken on policy. ACTION must be one of:
+
+         delete
+            Delete a policy with a given name. policy-id must be specified.
+         upsert
+            Create or update a policy. policy-file must be specified.
+
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --policy-file=POLICY_FILE
+        Absolute path to the OS policy assignment file on your local client.
+        File must be in either JSON or YAML format. This file defines the OS
+        policies that you want to apply to your VMs, the target VMs that you
+        want to apply the policies to, and the rollout rate at which to apply
+        the OS policies on a zonal level. For more information about this
+        resource and sample OS policy assignment files, see
+        https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment.
+
+     --policy-id=POLICY_ID
+        Policy id. Must be specified for DELETE action.
+
+     --state=STATE
+        State of the policy orchestrator. STATE must be one of:
+
+         active
+            Updates the policy orchestrator to ACTIVE state.
+         stopped
+            Updates the policy orchestrator to STOPPED state.
+
+     Folders to include in the policy orchestrator. Comma-separated list of
+     folder numbers. If --include-folders is set, --clear-folders must not be
+     set.
+
+     At most one of these can be specified:
+
+       --clear-folders
+          Clears included folders from policy orchestrator selectors.
+
+       --include-folders=INCLUDE_FOLDERS
+          Applies policy to selected folders only.
+
+     Locations to include in the policy orchestrator, e.g. us-central1-a. If
+     include-locations is set, clear-locations must not be set.
+
+     At most one of these can be specified:
+
+       --clear-locations
+          Clears included locations from policy orchestrator selectors.
+
+       --include-locations=INCLUDE_LOCATIONS
+          Applies policy to selected locations only.
+
+     Projects to include in the policy orchestrator. Comma separated list of
+     project numbers. If include-projects is set, clear-projects must not be
+     set.
+
+     At most one of these can be specified:
+
+       --clear-projects
+          Clears included projects from policy orchestrator selectors.
+
+       --include-projects=INCLUDE_PROJECTS
+          Applies policy to selected projects only.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the osconfig/v2 API. The full documentation for this API
+    can be found at: https://cloud.google.com/compute/docs/osconfig/rest
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha compute os-config policy-orchestrators update
+
+        $ gcloud beta compute os-config policy-orchestrators update
+
diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create
index a441ea045..bdb72534f 100644
--- a/gcloud/container/clusters/create
+++ b/gcloud/container/clusters/create
@@ -46,7 +46,7 @@ SYNOPSIS
         [--enable-service-externalips] [--enable-shielded-nodes]
         [--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling]
         [--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API]
-        [--image-type=IMAGE_TYPE]
+        [--hpa-profile=HPA_PROFILE] [--image-type=IMAGE_TYPE]
         [--in-transit-encryption=IN_TRANSIT_ENCRYPTION]
         [--ipv6-access-type=IPV6_ACCESS_TYPE] [--issue-client-certificate]
         [--labels=[KEY=VALUE,...]] [--logging=[COMPONENT,...]]
@@ -724,6 +724,11 @@ FLAGS
             definitions from the standard OSS Gateway API release channel will
             be installed.
 
+     --hpa-profile=HPA_PROFILE
+        Set Horizontal Pod Autoscaler behavior. Accepted values are: none,
+        performance. For more information, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/horizontal-pod-autoscaling#hpa-profile.
+
      --image-type=IMAGE_TYPE
         The image type to use for the cluster. Defaults to server-specified.
 
diff --git a/gcloud/container/clusters/create-auto b/gcloud/container/clusters/create-auto
index bc8fa38e4..7d2cec798 100644
--- a/gcloud/container/clusters/create-auto
+++ b/gcloud/container/clusters/create-auto
@@ -24,13 +24,14 @@ SYNOPSIS
         [--enable-master-global-access] [--enable-multi-networking]
         [--enable-ray-cluster-logging] [--enable-ray-cluster-monitoring]
         [--enable-ray-operator] [--enable-secret-manager]
-        [--fleet-project=PROJECT_ID_OR_NUMBER] [--labels=[KEY=VALUE,...]]
-        [--logging=[COMPONENT,...]] [--monitoring=[COMPONENT,...]]
-        [--network=NETWORK] [--private-endpoint-subnetwork=NAME]
-        [--release-channel=[CHANNEL]] [--security-group=SECURITY_GROUP]
-        [--security-posture=SECURITY_POSTURE] [--services-ipv4-cidr=CIDR]
-        [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK]
-        [--tier=TIER] [--workload-policies=WORKLOAD_POLICIES]
+        [--fleet-project=PROJECT_ID_OR_NUMBER] [--hpa-profile=HPA_PROFILE]
+        [--labels=[KEY=VALUE,...]] [--logging=[COMPONENT,...]]
+        [--monitoring=[COMPONENT,...]] [--network=NETWORK]
+        [--private-endpoint-subnetwork=NAME] [--release-channel=[CHANNEL]]
+        [--security-group=SECURITY_GROUP] [--security-posture=SECURITY_POSTURE]
+        [--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
+        [--subnetwork=SUBNETWORK] [--tier=TIER]
+        [--workload-policies=WORKLOAD_POLICIES]
         [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
         [--additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
           | --disable-additive-vpc-scope]
@@ -318,6 +319,11 @@ FLAGS
         Example: $ gcloud container clusters create-auto
         --fleet-project=my-project
 
+     --hpa-profile=HPA_PROFILE
+        Set Horizontal Pod Autoscaler behavior. Accepted values are: none,
+        performance. For more information, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/horizontal-pod-autoscaling#hpa-profile.
+
      --labels=[KEY=VALUE,...]
         Labels to apply to the Google Cloud resources in use by the Kubernetes
         Engine cluster. These are unrelated to Kubernetes labels.
diff --git a/gcloud/container/clusters/update b/gcloud/container/clusters/update
index e593b6870..d896f0729 100644
--- a/gcloud/container/clusters/update
+++ b/gcloud/container/clusters/update
@@ -29,7 +29,8 @@ SYNOPSIS
           | --enable-service-externalips | --enable-shielded-nodes
           | --enable-stackdriver-kubernetes | --enable-vertical-pod-autoscaling
           | --fleet-project=PROJECT_ID_OR_NUMBER | --gateway-api=GATEWAY_API
-          | --generate-password | --in-transit-encryption=IN_TRANSIT_ENCRYPTION
+          | --generate-password | --hpa-profile=HPA_PROFILE
+          | --in-transit-encryption=IN_TRANSIT_ENCRYPTION
           | --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME
           | --network-performance-configs=[PROPERTY1=VALUE1,...]
           | --node-locations=ZONE,[ZONE,...]
@@ -480,6 +481,11 @@ REQUIRED FLAGS
           Ask the server to generate a secure password and use that as the
           basic auth password, keeping the existing username.
 
+       --hpa-profile=HPA_PROFILE
+          Set Horizontal Pod Autoscaler behavior. Accepted values are: none,
+          performance. For more information, see
+          https://cloud.google.com/kubernetes-engine/docs/how-to/horizontal-pod-autoscaling#hpa-profile.
+
        --in-transit-encryption=IN_TRANSIT_ENCRYPTION
           Enable Dataplane V2 in-transit encryption. Dataplane v2 in-transit
           encryption is disabled by default. IN_TRANSIT_ENCRYPTION must be one
diff --git a/gcloud/dataflow/flex-template/run b/gcloud/dataflow/flex-template/run
index ebd3189bb..379325730 100644
--- a/gcloud/dataflow/flex-template/run
+++ b/gcloud/dataflow/flex-template/run
@@ -5,6 +5,7 @@ SYNOPSIS
     gcloud dataflow flex-template run JOB_NAME
         --template-file-gcs-location=TEMPLATE_FILE_GCS_LOCATION
         [--additional-experiments=[ADDITIONAL_EXPERIMENTS,...]]
+        [--additional-pipeline-options=[ADDITIONAL_PIPELINE_OPTIONS,...]]
         [--additional-user-labels=[ADDITIONAL_USER_LABELS,...]]
         [--dataflow-kms-key=DATAFLOW_KMS_KEY] [--disable-public-ips]
         [--enable-streaming-engine] [--flexrs-goal=FLEXRS_GOAL]
@@ -43,7 +44,12 @@ REQUIRED FLAGS
 
 OPTIONAL FLAGS
      --additional-experiments=[ADDITIONAL_EXPERIMENTS,...]
-        Additional experiments to pass to the job.
+        Additional experiments to pass to the job. Example:
+        --additional-experiments=experiment1,experiment2=value2
+
+     --additional-pipeline-options=[ADDITIONAL_PIPELINE_OPTIONS,...]
+        Additional pipeline options to pass to the job. Example:
+        --additional-pipeline-options=option1=value1,option2=value2
 
      --additional-user-labels=[ADDITIONAL_USER_LABELS,...]
         Additional user labels to pass to the job. Example:
diff --git a/gcloud/datastream/streams/create b/gcloud/datastream/streams/create
index 78241c202..ae4d67238 100644
--- a/gcloud/datastream/streams/create
+++ b/gcloud/datastream/streams/create
@@ -296,6 +296,20 @@ REQUIRED FLAGS
                   "dataFreshness": "3600s"
                 }
 
+            BigQuery configuration with Big Lake table configuration:                {
+                  "singleTargetDataset": {
+                    "datasetId": "projectId:datasetId"
+                  },
+                  "appendOnly": {},
+                  "blmtConfig": {
+                    "bucket": "bucketName",
+                    "tableFormat": "ICEBERG",
+                    "fileFormat": "PARQUET",
+                    "connectionName": "projectId.region.connectionName",
+                    "rootPath": "/root"
+                  }
+                }
+
          --gcs-destination-config=GCS_DESTINATION_CONFIG
             Path to a YAML (or JSON) file containing the configuration for
             Google Cloud Storage Destination Config.
diff --git a/gcloud/datastream/streams/update b/gcloud/datastream/streams/update
index e9b82527d..231cb82ab 100644
--- a/gcloud/datastream/streams/update
+++ b/gcloud/datastream/streams/update
@@ -314,6 +314,20 @@ FLAGS
                 "dataFreshness": "3600s"
               }
 
+          BigQuery configuration with Big Lake table configuration:              {
+                "singleTargetDataset": {
+                  "datasetId": "projectId:datasetId"
+                },
+                "appendOnly": {},
+                "blmtConfig": {
+                  "bucket": "bucketName",
+                  "tableFormat": "ICEBERG",
+                  "fileFormat": "PARQUET",
+                  "connectionName": "projectId.region.connectionName",
+                  "rootPath": "/root"
+                }
+              }
+
        --gcs-destination-config=GCS_DESTINATION_CONFIG
           Path to a YAML (or JSON) file containing the configuration for Google
           Cloud Storage Destination Config.
diff --git a/gcloud/firestore/bulk-delete b/gcloud/firestore/bulk-delete
new file mode 100644
index 000000000..4d560b21a
--- /dev/null
+++ b/gcloud/firestore/bulk-delete
@@ -0,0 +1,69 @@
+NAME
+    gcloud firestore bulk-delete - bulk delete Cloud Firestore documents
+
+SYNOPSIS
+    gcloud firestore bulk-delete [--async]
+        [--collection-ids=[COLLECTION_IDS,...]]
+        [--database=DATABASE; default="(default)"]
+        [--namespace-ids=[NAMESPACE_IDS,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    bulk delete Cloud Firestore documents.
+
+EXAMPLES
+    To bulk delete a specific set of collections groups asynchronously, run:
+
+        $ gcloud firestore bulk-delete \
+            --collection-ids='specific collection group1','specific
+         collection group2' --async
+
+    To bulk delete all collection groups from certain namespace, run:
+
+        $ gcloud firestore bulk-delete \
+            --namespace-ids='specific namespace id'
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --collection-ids=[COLLECTION_IDS,...]
+        List specifying which collections will be included in the operation.
+        When omitted, all collections are included.
+
+        For example, to operate on only the customers and orders collections:
+
+            $ gcloud firestore bulk-delete --collection-ids='customers','orders'
+
+     --database=DATABASE; default="(default)"
+        The database to operate on. The default value is (default).
+
+        For example, to operate on database foo:
+
+            $ gcloud firestore bulk-delete --database='foo'
+
+     --namespace-ids=[NAMESPACE_IDS,...]
+        List specifying which namespaces will be included in the operation.
+        When omitted, all namespaces are included.
+
+        This is only supported for Datastore Mode databases.
+
+        For example, to operate on only the customers and orders namespaces:
+
+            $ gcloud firestore bulk-delete --namespaces-ids='customers','orders'
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha firestore bulk-delete
+
+        $ gcloud beta firestore bulk-delete
+
diff --git a/gcloud/firestore/help b/gcloud/firestore/help
index de581e6f8..3a522a401 100644
--- a/gcloud/firestore/help
+++ b/gcloud/firestore/help
@@ -44,6 +44,9 @@ GROUPS
 COMMANDS
     COMMAND is one of the following:
 
+     bulk-delete
+        bulk delete Cloud Firestore documents.
+
      export
         export Cloud Firestore documents to Google Cloud Storage.
 
diff --git a/gcloud/memorystore/backup-collections/backups/delete b/gcloud/memorystore/backup-collections/backups/delete
new file mode 100644
index 000000000..80163c8f7
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/backups/delete
@@ -0,0 +1,83 @@
+NAME
+    gcloud memorystore backup-collections backups delete - delete backups
+
+SYNOPSIS
+    gcloud memorystore backup-collections backups delete
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a backup
+
+EXAMPLES
+    To delete the backup, run:
+
+        $ gcloud memorystore backup-collections backups delete
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --request-id=REQUEST_ID
+        Idempotent request UUID.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections backups delete
+
+        $ gcloud beta memorystore backup-collections backups delete
+
diff --git a/gcloud/memorystore/backup-collections/backups/describe b/gcloud/memorystore/backup-collections/backups/describe
new file mode 100644
index 000000000..bccc05455
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/backups/describe
@@ -0,0 +1,75 @@
+NAME
+    gcloud memorystore backup-collections backups describe - describe backups
+
+SYNOPSIS
+    gcloud memorystore backup-collections backups describe
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Describe a backup
+
+EXAMPLES
+    To describe the backup, run:
+
+        $ gcloud memorystore backup-collections backups describe
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections backups describe
+
+        $ gcloud beta memorystore backup-collections backups describe
+
diff --git a/gcloud/memorystore/backup-collections/backups/export b/gcloud/memorystore/backup-collections/backups/export
new file mode 100644
index 000000000..7bb890c59
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/backups/export
@@ -0,0 +1,83 @@
+NAME
+    gcloud memorystore backup-collections backups export - export backups
+
+SYNOPSIS
+    gcloud memorystore backup-collections backups export
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --location=LOCATION)
+        [--async] [--gcs-bucket=GCS_BUCKET] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    export backups
+
+EXAMPLES
+    To export all backups, run:
+
+        $ gcloud memorystore backup-collections backups export
+
+POSITIONAL ARGUMENTS
+     Backup resource - Instance backup resource name using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}/backups/{backup_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The backupCollection id of the backup resource.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --location=LOCATION
+          The location id of the backup resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --gcs-bucket=GCS_BUCKET
+        Google Cloud Storage bucket, like "my-bucket".
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections backups export
+
+        $ gcloud beta memorystore backup-collections backups export
+
diff --git a/gcloud/memorystore/backup-collections/backups/help b/gcloud/memorystore/backup-collections/backups/help
new file mode 100644
index 000000000..5b9cdc104
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/backups/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud memorystore backup-collections backups - manage Backup resources
+
+SYNOPSIS
+    gcloud memorystore backup-collections backups COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Backup resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     delete
+        Delete backups.
+
+     describe
+        Describe backups.
+
+     export
+        export backups.
+
+     list
+        List backups.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections backups
+
+        $ gcloud beta memorystore backup-collections backups
+
diff --git a/gcloud/memorystore/backup-collections/backups/list b/gcloud/memorystore/backup-collections/backups/list
new file mode 100644
index 000000000..d00cddcd6
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/backups/list
@@ -0,0 +1,102 @@
+NAME
+    gcloud memorystore backup-collections backups list - list backups
+
+SYNOPSIS
+    gcloud memorystore backup-collections backups list
+        (--backup-collection=BACKUP_COLLECTION : --location=LOCATION)
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List backups
+
+EXAMPLES
+    To list all backups, run:
+
+        $ gcloud memorystore backup-collections backups list
+
+REQUIRED FLAGS
+     BackupCollection resource - The resource name of the backupCollection
+     using the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --backup-collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument --backup-collection on the command line.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument --backup-collection on the command line with
+            a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections backups list
+
+        $ gcloud beta memorystore backup-collections backups list
+
diff --git a/gcloud/memorystore/backup-collections/describe b/gcloud/memorystore/backup-collections/describe
new file mode 100644
index 000000000..ca36c917b
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/describe
@@ -0,0 +1,69 @@
+NAME
+    gcloud memorystore backup-collections describe - describe backupCollections
+
+SYNOPSIS
+    gcloud memorystore backup-collections describe
+        (BACKUP_COLLECTION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Describe a backupCollection
+
+EXAMPLES
+    To describe the backupCollection, run:
+
+        $ gcloud memorystore backup-collections describe
+
+POSITIONAL ARGUMENTS
+     BackupCollection resource - Instance backupCollection resource name using
+     the form:
+     projects/{project_id}/locations/{location_id}/backupCollections/{backup_collection_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup_collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP_COLLECTION
+          ID of the backupCollection or fully qualified identifier for the
+          backupCollection.
+
+          To set the backup_collection attribute:
+          ▸ provide the argument backup_collection on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the backupCollection resource.
+
+          To set the location attribute:
+          ▸ provide the argument backup_collection on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections describe
+
+        $ gcloud beta memorystore backup-collections describe
+
diff --git a/gcloud/memorystore/backup-collections/help b/gcloud/memorystore/backup-collections/help
new file mode 100644
index 000000000..fcd3e1955
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud memorystore backup-collections - manage Backup Collection resources
+
+SYNOPSIS
+    gcloud memorystore backup-collections GROUP | COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Backup Collection resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     backups
+        Manage Backup resources.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        Describe backupCollections.
+
+     list
+        List backupCollections.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections
+
+        $ gcloud beta memorystore backup-collections
+
diff --git a/gcloud/memorystore/backup-collections/list b/gcloud/memorystore/backup-collections/list
new file mode 100644
index 000000000..3ed577e4d
--- /dev/null
+++ b/gcloud/memorystore/backup-collections/list
@@ -0,0 +1,88 @@
+NAME
+    gcloud memorystore backup-collections list - list backupCollections
+
+SYNOPSIS
+    gcloud memorystore backup-collections list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List backupCollections
+
+EXAMPLES
+    To list all backupCollections, run:
+
+        $ gcloud memorystore backup-collections list
+
+REQUIRED FLAGS
+     Location resource - The resource name of the backupCollection location
+     using the form: projects/{project_id}/locations/{location_id} where
+     location_id refers to a Google Cloud region. This represents a Cloud
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore backup-collections list
+
+        $ gcloud beta memorystore backup-collections list
+
diff --git a/gcloud/memorystore/help b/gcloud/memorystore/help
index 822d4f3d9..18f482a71 100644
--- a/gcloud/memorystore/help
+++ b/gcloud/memorystore/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     backup-collections
+        Manage Backup Collection resources.
+
      instances
         Manage Instance resources.
 
diff --git a/gcloud/memorystore/instances/backup b/gcloud/memorystore/instances/backup
new file mode 100644
index 000000000..ccfc73577
--- /dev/null
+++ b/gcloud/memorystore/instances/backup
@@ -0,0 +1,80 @@
+NAME
+    gcloud memorystore instances backup - backup instances
+
+SYNOPSIS
+    gcloud memorystore instances backup (INSTANCE : --location=LOCATION)
+        [--async] [--backup-id=BACKUP_ID] [--ttl=TTL] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    backup instances
+
+EXAMPLES
+    To backup all instances, run:
+
+        $ gcloud memorystore instances backup
+
+POSITIONAL ARGUMENTS
+     Instance resource - Instance resource name using the form:
+     projects/{project_id}/locations/{location_id}/instances/{instance_id}
+     where location_id refers to a Google Cloud region. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument instance on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       INSTANCE
+          ID of the instance or fully qualified identifier for the instance.
+
+          To set the instance attribute:
+          ▸ provide the argument instance on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the instance resource.
+
+          To set the location attribute:
+          ▸ provide the argument instance on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --backup-id=BACKUP_ID
+        The id of the backup to be created. If not specified, the default value
+        ([YYYYMMDDHHMMSS][Shortened Instance UID] is used.
+
+     --ttl=TTL
+        TTL for the backup to expire. Value range is 1 day to 100 years. If not
+        specified, the default value is 100 years.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the memorystore/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/memorystore/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha memorystore instances backup
+
+        $ gcloud beta memorystore instances backup
+
diff --git a/gcloud/memorystore/instances/create b/gcloud/memorystore/instances/create
index 8eaaf6754..65246720d 100644
--- a/gcloud/memorystore/instances/create
+++ b/gcloud/memorystore/instances/create
@@ -19,7 +19,12 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          (--fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS)]
         [--cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE : --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --primary-instance=PRIMARY_INSTANCE]
+        [--gcs-source-uris=[GCS_SOURCE_URIS,...]
+          | --managed-backup-source=MANAGED_BACKUP_SOURCE]
         [--zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
           --zone-distribution-config-mode=ZONE_DISTRIBUTION_CONFIG_MODE]
         [GCLOUD_WIDE_FLAG ...]
@@ -262,7 +267,8 @@ FLAGS
           Ondemand maintenance for the instance.
 
      --psc-auto-connections=[network=NETWORK],[port=PORT],[projectId=PROJECTID]
-        User inputs and resource details of the auto-created PSC connections.
+        Deprecated: Use the endpoints.connections.psc_auto_connection value
+        instead.
 
          network
             The network where the PSC endpoints are created, in the form of
@@ -369,6 +375,53 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+           At least one of these must be specified:
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE
@@ -439,6 +492,27 @@ FLAGS
               To set the instance attribute:
               ◇ provide the argument --primary-instance on the command line.
 
+     Arguments for the import sources.
+
+     At most one of these can be specified:
+
+       Backups that stored in Cloud Storage buckets. The Cloud Storage buckets
+       need to be the same region as the instances.
+
+         --gcs-source-uris=[GCS_SOURCE_URIS,...]
+            Example: gs://bucket1/object1, gs://bucket2/folder2/object2
+
+       Backups that generated and managed by memorystore.
+
+         --managed-backup-source=MANAGED_BACKUP_SOURCE
+            Example:
+            //memorystore.googleapis.com/projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup}
+            A shorter version (without the prefix) of the backup name is also
+            supported, like
+            projects/{project}/locations/{location}/backupCollections/{collection}/backups/{backup_id}
+            In this case, it assumes the backup is under
+            memorystore.googleapis.com.
+
      Zone distribution configuration for allocation of instance resources.
 
        --zone-distribution-config=ZONE_DISTRIBUTION_CONFIG
diff --git a/gcloud/memorystore/instances/help b/gcloud/memorystore/instances/help
index a3bee50cf..b1178ebef 100644
--- a/gcloud/memorystore/instances/help
+++ b/gcloud/memorystore/instances/help
@@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS
 COMMANDS
     COMMAND is one of the following:
 
+     backup
+        backup instances.
+
      create
         Create a Memorystore instance.
 
diff --git a/gcloud/memorystore/instances/update b/gcloud/memorystore/instances/update
index edde6dcef..eeba14b06 100644
--- a/gcloud/memorystore/instances/update
+++ b/gcloud/memorystore/instances/update
@@ -14,6 +14,10 @@ SYNOPSIS
           --persistence-config-mode=PERSISTENCE_CONFIG_MODE
           --rdb-config-snapshot-period=RDB_CONFIG_SNAPSHOT_PERIOD
           --rdb-config-snapshot-start-time=RDB_CONFIG_SNAPSHOT_START_TIME]
+        [--automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          --clear-automated-backup-config
+          --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS]
         [--clear-cross-instance-replication-config
           --cross-instance-replication-config-role=CROSS_INSTANCE_REPLICATION_CONFIG_ROLE --clear-primary-instance | --primary-instance=PRIMARY_INSTANCE --cross-instance-replication-config-secondary-instances=[instance=INSTANCE] | --add-cross-instance-replication-config-secondary-instances=[instance=INSTANCE] --clear-cross-instance-replication-config-secondary-instances | --remove-cross-instance-replication-config-secondary-instances=[instance=INSTANCE]]
         [--clear-maintenance-policy
@@ -209,6 +213,54 @@ FLAGS
             future snapshots will be aligned. If not provided, the current time
             will be used.
 
+     The automated backup config for an instance.
+
+       --automated-backup-config-mode=AUTOMATED_BACKUP_CONFIG_MODE
+          The automated backup mode. If the mode is disabled, the other fields
+          will be ignored. AUTOMATED_BACKUP_CONFIG_MODE must be one of:
+
+           disabled
+              Automated backup config disabled.
+           enabled
+              Automated backup config enabled.
+
+       --automated-backup-config-retention=AUTOMATED_BACKUP_CONFIG_RETENTION
+          How long to keep automated backups before the backups are deleted.
+          The value should be between 1 day and 365 days. If not specified, the
+          default value is 35 days.
+
+       --clear-automated-backup-config
+          Set instance.automatedBackupConfig back to default value.
+
+       Arguments for the schedule.
+
+         This schedule allows the backup to be triggered at a fixed frequency
+         (currently only daily is supported).
+
+           Represents a time of day. The date and time zone are either not
+           significant or are specified elsewhere. An API may choose to allow
+           leap seconds. Related types are [google.type.Date][google.type.Date]
+           and google.protobuf.Timestamp.
+
+             --fixed-frequency-schedule-start-time-hours=FIXED_FREQUENCY_SCHEDULE_START_TIME_HOURS
+                Hours of a day in 24 hour format. Must be greater than or equal
+                to 0 and typically must be less than or equal to 23. An API may
+                choose to allow the value "24:00:00" for scenarios like
+                business closing time.
+
+             --fixed-frequency-schedule-start-time-minutes=FIXED_FREQUENCY_SCHEDULE_START_TIME_MINUTES
+                Minutes of an hour. Must be greater than or equal to 0 and less
+                than or equal to 59.
+
+             --fixed-frequency-schedule-start-time-nanos=FIXED_FREQUENCY_SCHEDULE_START_TIME_NANOS
+                Fractions of seconds, in nanoseconds. Must be greater than or
+                equal to 0 and less than or equal to 999,999,999.
+
+             --fixed-frequency-schedule-start-time-seconds=FIXED_FREQUENCY_SCHEDULE_START_TIME_SECONDS
+                Seconds of a minute. Must be greater than or equal to 0 and
+                typically must be less than or equal to 59. An API may allow
+                the value 60 if it allows leap-seconds.
+
      Cross instance replication config.
 
        --clear-cross-instance-replication-config
@@ -520,6 +572,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -531,11 +587,11 @@ FLAGS
 
           Shorthand Example:
 
-              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -565,6 +621,10 @@ FLAGS
                       form of
                       projects/{project_id}/global/networks/{network_id}.
 
+                   port
+                      port will only be set for Primary/Reader or Discovery
+                      endpoint.
+
                    pscConnectionId
                       The PSC connection id of the forwarding rule connected to
                       the service attachment.
@@ -576,11 +636,11 @@ FLAGS
 
           Shorthand Example:
 
-              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+              --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --add-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
           JSON Example:
 
-              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+              --add-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
           File Example:
 
@@ -616,6 +676,10 @@ FLAGS
                         the form of
                         projects/{project_id}/global/networks/{network_id}.
 
+                     port
+                        port will only be set for Primary/Reader or Discovery
+                        endpoint.
+
                      pscConnectionId
                         The PSC connection id of the forwarding rule connected
                         to the service attachment.
@@ -627,11 +691,11 @@ FLAGS
 
             Shorthand Example:
 
-                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,pscConnectionId=string,serviceAttachment=string}}]
+                --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}] --remove-endpoints=connections=[{pscConnection={forwardingRule=string,ipAddress=string,network=string,port=int,pscConnectionId=string,serviceAttachment=string}}]
 
             JSON Example:
 
-                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
+                --remove-endpoints='[{"connections": [{"pscConnection": {"forwardingRule": "string", "ipAddress": "string", "network": "string", "port": int, "pscConnectionId": "string", "serviceAttachment": "string"}}]}]'
 
             File Example:
 
diff --git a/gcloud/parametermanager/help b/gcloud/parametermanager/help
new file mode 100644
index 000000000..196d743f1
--- /dev/null
+++ b/gcloud/parametermanager/help
@@ -0,0 +1,21 @@
+NAME
+    gcloud parametermanager - parameter Manager is a single source of truth to
+        store, access and manage the lifecycle of your application parameters
+
+SYNOPSIS
+    gcloud parametermanager GROUP [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Parameter Manager aims to make management of sensitive application
+    parameters effortless for customers without diminishing focus on security.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     parameters
+        Manage Parameter Manager parameter resources.
diff --git a/gcloud/parametermanager/parameters/create b/gcloud/parametermanager/parameters/create
new file mode 100644
index 000000000..0df74febb
--- /dev/null
+++ b/gcloud/parametermanager/parameters/create
@@ -0,0 +1,123 @@
+NAME
+    gcloud parametermanager parameters create - creates a Parameter Manager
+        parameter
+
+SYNOPSIS
+    gcloud parametermanager parameters create (PARAMETER : --location=LOCATION)
+        [--kms-key=KMS_KEY] [--labels=[LABELS,...]]
+        [--parameter-format=PARAMETER_FORMAT] [--request-id=REQUEST_ID]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Creates a parameter resource with the specified name and properties. If a
+    parameter of the given name already exists, this command will return an
+    error.
+
+EXAMPLES
+    To create a parameter my-parameter in location global run:
+
+        $ gcloud parametermanager parameters create my-parameter \
+            --location=global
+
+POSITIONAL ARGUMENTS
+     Parameter resource - Identifier. [Output only] The resource name of the
+     Parameter in the format projects/*/locations/*/parameters/*. The arguments
+     in this group can be used to specify the attributes of this resource.
+     (NOTE) Some attributes are not given arguments in this group but can be
+     set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument parameter on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       PARAMETER
+          ID of the parameter or fully qualified identifier for the parameter.
+
+          To set the parameter attribute:
+          ▸ provide the argument parameter on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the parameter resource.
+
+          To set the location attribute:
+          ▸ provide the argument parameter on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     Arguments for the kms key.
+
+       --kms-key=KMS_KEY
+          Customer managed encryption key (CMEK) to use for encrypting the
+          Parameter Versions. If not set, the default Google-managed encryption
+          key will be used. Cloud KMS CryptoKeys must reside in the same
+          location as the Parameter. The expected format is
+          projects/*/locations/*/keyRings/*/cryptoKeys/*.
+
+     --labels=[LABELS,...]
+        Labels as key value pairs.
+
+         KEY
+            Keys must start with a lowercase character and contain only hyphens
+            (-), underscores (_), lowercase characters, and numbers.
+
+         VALUE
+            Values must contain only hyphens (-), underscores (_), lowercase
+            characters, and numbers.
+
+        Shorthand Example:
+
+            --labels=string=string
+
+        JSON Example:
+
+            --labels='{"string": "string"}'
+
+        File Example:
+
+            --labels=path_to_file.(yaml|json)
+
+     --parameter-format=PARAMETER_FORMAT
+        Specifies the format of a Parameter. PARAMETER_FORMAT must be one of:
+
+         json
+            JSON format.
+         unformatted
+            Unformatted.
+         yaml
+            YAML format.
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/delete b/gcloud/parametermanager/parameters/delete
new file mode 100644
index 000000000..52b26933a
--- /dev/null
+++ b/gcloud/parametermanager/parameters/delete
@@ -0,0 +1,76 @@
+NAME
+    gcloud parametermanager parameters delete - deletes a single Parameter
+        Manager parameter resource
+
+SYNOPSIS
+    gcloud parametermanager parameters delete (PARAMETER : --location=LOCATION)
+        [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Deletes a parameter. This action is irreversible.
+
+EXAMPLES
+    To delete a parameter my-parameter in location global run:
+
+        $ gcloud parametermanager parameters delete my-parameter \
+            --location=global
+
+POSITIONAL ARGUMENTS
+     Parameter resource - Name of the resource in the format
+     projects/*/locations/*/parameters/*. The arguments in this group can be
+     used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument parameter on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       PARAMETER
+          ID of the parameter or fully qualified identifier for the parameter.
+
+          To set the parameter attribute:
+          ▸ provide the argument parameter on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the parameter resource.
+
+          To set the location attribute:
+          ▸ provide the argument parameter on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes after the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/describe b/gcloud/parametermanager/parameters/describe
new file mode 100644
index 000000000..9b05b04ac
--- /dev/null
+++ b/gcloud/parametermanager/parameters/describe
@@ -0,0 +1,60 @@
+NAME
+    gcloud parametermanager parameters describe - gets a single Parameter
+        Manager parameter
+
+SYNOPSIS
+    gcloud parametermanager parameters describe
+        (PARAMETER : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Gets a single parameter resource.
+
+EXAMPLES
+    To get a single parameter my-parameter in location global run:
+
+        $ gcloud parametermanager parameters describe my-parameter \
+            --location=global
+
+POSITIONAL ARGUMENTS
+     Parameter resource - Name of the resource in the format
+     projects/*/locations/*/parameters/*. The arguments in this group can be
+     used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument parameter on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       PARAMETER
+          ID of the parameter or fully qualified identifier for the parameter.
+
+          To set the parameter attribute:
+          ▸ provide the argument parameter on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the parameter resource.
+
+          To set the location attribute:
+          ▸ provide the argument parameter on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/help b/gcloud/parametermanager/parameters/help
new file mode 100644
index 000000000..3f4ff11bd
--- /dev/null
+++ b/gcloud/parametermanager/parameters/help
@@ -0,0 +1,38 @@
+NAME
+    gcloud parametermanager parameters - manage Parameter Manager parameter
+        resources
+
+SYNOPSIS
+    gcloud parametermanager parameters GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Parameter Manager parameter resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     versions
+        Manage Parameter Manager parameter version resources.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Creates a Parameter Manager parameter.
+
+     delete
+        Deletes a single Parameter Manager parameter resource.
+
+     describe
+        Gets a single Parameter Manager parameter.
+
+     list
+        Lists Parameter Manager parameters.
+
+     update
+        Updates the metadata of an Parameter Manager parameter resource.
diff --git a/gcloud/parametermanager/parameters/list b/gcloud/parametermanager/parameters/list
new file mode 100644
index 000000000..8c10b9d1e
--- /dev/null
+++ b/gcloud/parametermanager/parameters/list
@@ -0,0 +1,81 @@
+NAME
+    gcloud parametermanager parameters list - lists Parameter Manager
+        parameters
+
+SYNOPSIS
+    gcloud parametermanager parameters list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List all parameter names belonging to a location within a project.
+
+EXAMPLES
+    To list all parameters in location global run:
+
+        $ gcloud parametermanager parameters list --location=global
+
+REQUIRED FLAGS
+     Location resource - Parent value for ListParametersRequest in the format
+     projects/*/locations/*. This represents a Cloud resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/update b/gcloud/parametermanager/parameters/update
new file mode 100644
index 000000000..10773f45b
--- /dev/null
+++ b/gcloud/parametermanager/parameters/update
@@ -0,0 +1,159 @@
+NAME
+    gcloud parametermanager parameters update - updates the metadata of an
+        Parameter Manager parameter resource
+
+SYNOPSIS
+    gcloud parametermanager parameters update (PARAMETER : --location=LOCATION)
+        [--kms-key=KMS_KEY] [--parameter-format=PARAMETER_FORMAT]
+        [--request-id=REQUEST_ID]
+        [--labels=[LABELS,...]
+          | --update-labels=[UPDATE_LABELS,...] --clear-labels
+          | --remove-labels=[__REMOVE_LABELS,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Update the metadata of a parameter (e.g. labels). This command will return
+    an error if you specify a parameter that does not exist.
+
+EXAMPLES
+    To update a parameter my-parameter in location global run:
+
+        $ gcloud parametermanager parameters update my-parameter \
+            --location=global
+
+POSITIONAL ARGUMENTS
+     Parameter resource - Identifier. [Output only] The resource name of the
+     Parameter in the format projects/*/locations/*/parameters/*. The arguments
+     in this group can be used to specify the attributes of this resource.
+     (NOTE) Some attributes are not given arguments in this group but can be
+     set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument parameter on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       PARAMETER
+          ID of the parameter or fully qualified identifier for the parameter.
+
+          To set the parameter attribute:
+          ▸ provide the argument parameter on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the parameter resource.
+
+          To set the location attribute:
+          ▸ provide the argument parameter on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     Arguments for the kms key.
+
+       --kms-key=KMS_KEY
+          Customer managed encryption key (CMEK) to use for encrypting the
+          Parameter Versions. If not set, the default Google-managed encryption
+          key will be used. Cloud KMS CryptoKeys must reside in the same
+          location as the Parameter. The expected format is
+          projects/*/locations/*/keyRings/*/cryptoKeys/*.
+
+     --parameter-format=PARAMETER_FORMAT
+        Specifies the format of a Parameter. PARAMETER_FORMAT must be one of:
+
+         json
+            JSON format.
+         unformatted
+            Unformatted.
+         yaml
+            YAML format.
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+     Update labels.
+
+     At most one of these can be specified:
+
+       --labels=[LABELS,...]
+          Set labels to new value. Labels as key value pairs.
+
+           KEY
+              Keys must start with a lowercase character and contain only
+              hyphens (-), underscores (_), lowercase characters, and numbers.
+
+           VALUE
+              Values must contain only hyphens (-), underscores (_), lowercase
+              characters, and numbers.
+
+          Shorthand Example:
+
+              --labels=string=string
+
+          JSON Example:
+
+              --labels='{"string": "string"}'
+
+          File Example:
+
+              --labels=path_to_file.(yaml|json)
+
+       --update-labels=[UPDATE_LABELS,...]
+          Update labels value or add key value pair. Labels as key value pairs.
+
+           KEY
+              Keys must start with a lowercase character and contain only
+              hyphens (-), underscores (_), lowercase characters, and numbers.
+
+           VALUE
+              Values must contain only hyphens (-), underscores (_), lowercase
+              characters, and numbers.
+
+          Shorthand Example:
+
+              --update-labels=string=string
+
+          JSON Example:
+
+              --update-labels='{"string": "string"}'
+
+          File Example:
+
+              --update-labels=path_to_file.(yaml|json)
+
+       At most one of these can be specified:
+
+         --clear-labels
+            Clear labels value and set to empty map.
+
+         --remove-labels=[__REMOVE_LABELS,...]
+            Remove existing value from map labels.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/create b/gcloud/parametermanager/parameters/versions/create
new file mode 100644
index 000000000..6460ce99c
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/create
@@ -0,0 +1,110 @@
+NAME
+    gcloud parametermanager parameters versions create - creates an Parameter
+        Manager parameter version
+
+SYNOPSIS
+    gcloud parametermanager parameters versions create
+        (VERSION : --location=LOCATION --parameter=PARAMETER)
+        ((--payload-data=PAYLOAD_DATA | --payload-data-from-file=PATH_TO_FILE))
+        [--disabled] [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Creates a new parameter version using the provided parameter data.
+
+EXAMPLES
+    To create a parameter version my-parameter-version of parameter
+    my-parameter in location global run:
+
+        $ gcloud parametermanager parameters versions create \
+            my-parameter-version --parameter=my-parameter --location=global
+
+POSITIONAL ARGUMENTS
+     Version resource - Identifier. [Output only] The resource name of the
+     ParameterVersion in the format
+     projects/*/locations/*/parameters/*/versions/*. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the version or fully qualified identifier for the version.
+
+          To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the version resource.
+
+          To set the location attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+       --parameter=PARAMETER
+          The parameter id of the version resource.
+
+          To set the parameter attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --parameter on the command line.
+
+REQUIRED FLAGS
+     Message for storing a ParameterVersion resource's payload data
+
+     This must be specified.
+
+       Exactly one of these must be specified:
+
+         --payload-data=PAYLOAD_DATA
+            bytes data for storing payload.
+
+         --payload-data-from-file=PATH_TO_FILE
+            bytes data for storing payload. Use a full or relative path to a
+            local file containing the value of payload_data.
+
+OPTIONAL FLAGS
+     --disabled
+        Disabled boolean to determine if a ParameterVersion acts as a metadata
+        only resource (payload is never returned if disabled is true). If true
+        any calls will always default to BASIC view even if the user explicitly
+        passes FULL view as part of the request. A render call on a disabled
+        resource fails with an error. Default value is False.
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/delete b/gcloud/parametermanager/parameters/versions/delete
new file mode 100644
index 000000000..8c14b3d00
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/delete
@@ -0,0 +1,88 @@
+NAME
+    gcloud parametermanager parameters versions delete - deletes a single
+        Parameter Manager parameter version
+
+SYNOPSIS
+    gcloud parametermanager parameters versions delete
+        (VERSION : --location=LOCATION --parameter=PARAMETER)
+        [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Deletes a single parameter version along with its metadata. This action is
+    irreversible.
+
+EXAMPLES
+    To delete a parameter version my-parameter-version of parameter
+    my-parameter in location global run:
+
+        $ gcloud parametermanager parameters versions delete \
+            my-parameter-version --parameter=my-parameter --location=global
+
+POSITIONAL ARGUMENTS
+     Version resource - Name of the resource in the format
+     projects/*/locations/*/parameters/*/versions/*. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the version or fully qualified identifier for the version.
+
+          To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the version resource.
+
+          To set the location attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+       --parameter=PARAMETER
+          The parameter id of the version resource.
+
+          To set the parameter attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --parameter on the command line.
+
+FLAGS
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes after the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/describe b/gcloud/parametermanager/parameters/versions/describe
new file mode 100644
index 000000000..cdabfa234
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/describe
@@ -0,0 +1,85 @@
+NAME
+    gcloud parametermanager parameters versions describe - gets a single
+        Parameter Manager parameter version
+
+SYNOPSIS
+    gcloud parametermanager parameters versions describe
+        (VERSION : --location=LOCATION --parameter=PARAMETER) [--view=VIEW]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Gets a single parameter version, along with payload supplied by the user at
+    the time of creation. If the payload contains any references to secrets,
+    these will not be rendered in the output.
+
+EXAMPLES
+    To get a single parameter version my-parameter-version of parameter
+    my-parameter in location global run:
+
+        $ gcloud parametermanager parameters versions describe \
+            my-parameter-version --parameter=my-parameter --location=global
+
+POSITIONAL ARGUMENTS
+     Version resource - Name of the resource in the format
+     projects/*/locations/*/parameters/*/versions/*. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the version or fully qualified identifier for the version.
+
+          To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the version resource.
+
+          To set the location attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+       --parameter=PARAMETER
+          The parameter id of the version resource.
+
+          To set the parameter attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --parameter on the command line.
+
+FLAGS
+     --view=VIEW
+        View of the ParameterVersion. In the default FULL view, all metadata &
+        payload associated with the ParameterVersion will be returned. VIEW
+        must be one of:
+
+         basic
+            Include only the metadata for the resource.
+         full
+            Include metadata & other relevant payload data as well. This is the
+            default view.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/help b/gcloud/parametermanager/parameters/versions/help
new file mode 100644
index 000000000..170a5b456
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/help
@@ -0,0 +1,35 @@
+NAME
+    gcloud parametermanager parameters versions - manage Parameter Manager
+        parameter version resources
+
+SYNOPSIS
+    gcloud parametermanager parameters versions COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Parameter Manager parameter version resources.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Creates an Parameter Manager parameter version.
+
+     delete
+        Deletes a single Parameter Manager parameter version.
+
+     describe
+        Gets a single Parameter Manager parameter version.
+
+     list
+        List Parameter Manager parameter versions.
+
+     render
+        Gets a single Parameter Manager parameter version render.
+
+     update
+        Updates the properties of a single Parameter Manager parameter version.
diff --git a/gcloud/parametermanager/parameters/versions/list b/gcloud/parametermanager/parameters/versions/list
new file mode 100644
index 000000000..3dce963cd
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/list
@@ -0,0 +1,96 @@
+NAME
+    gcloud parametermanager parameters versions list - list Parameter Manager
+        parameter versions
+
+SYNOPSIS
+    gcloud parametermanager parameters versions list
+        (--parameter=PARAMETER : --location=LOCATION) [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List all parameter versions belonging to a parameter and their status.
+
+EXAMPLES
+    To list all parameter versions of a parameter my-parameter in location
+    global run:
+
+        $ gcloud parametermanager parameters versions list \
+            --parameter=my-parameter --location=global
+
+REQUIRED FLAGS
+     Parameter resource - Parent value for ListParameterVersionsRequest in the
+     format projects/*/locations/*/parameters/*. The arguments in this group
+     can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument --parameter on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --parameter=PARAMETER
+          ID of the parameter or fully qualified identifier for the parameter.
+
+          To set the parameter attribute:
+          ▸ provide the argument --parameter on the command line.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location id of the parameter resource.
+
+          To set the location attribute:
+          ▸ provide the argument --parameter on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/render b/gcloud/parametermanager/parameters/versions/render
new file mode 100644
index 000000000..ed58c3015
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/render
@@ -0,0 +1,69 @@
+NAME
+    gcloud parametermanager parameters versions render - gets a single
+        Parameter Manager parameter version render
+
+SYNOPSIS
+    gcloud parametermanager parameters versions render
+        (VERSION : --location=LOCATION --parameter=PARAMETER)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Gets a single parameter version render resource.
+
+EXAMPLES
+    To get a single parameter version render my-parameter-version of a
+    parameter my-parameter in location global run:
+
+        $ gcloud parametermanager parameters versions render \
+            my-parameter-version --parameter=my-parameter --location=global
+
+POSITIONAL ARGUMENTS
+     Version resource - Name of the resource The arguments in this group can be
+     used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the version or fully qualified identifier for the version.
+
+          To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the version resource.
+
+          To set the location attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+       --parameter=PARAMETER
+          The parameter id of the version resource.
+
+          To set the parameter attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --parameter on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/parametermanager/parameters/versions/update b/gcloud/parametermanager/parameters/versions/update
new file mode 100644
index 000000000..b9c780cae
--- /dev/null
+++ b/gcloud/parametermanager/parameters/versions/update
@@ -0,0 +1,97 @@
+NAME
+    gcloud parametermanager parameters versions update - updates the properties
+        of a single Parameter Manager parameter version
+
+SYNOPSIS
+    gcloud parametermanager parameters versions update
+        (VERSION : --location=LOCATION --parameter=PARAMETER) [--[no-]disabled]
+        [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Updates the properties of a single parameter version, including status of
+    the parameter version (enabled/disabled).
+
+EXAMPLES
+    To update a parameter version my-parameter-version of parameter
+    my-parameter in location global run:
+
+        $ gcloud parametermanager parameters versions update \
+            my-parameter-version --parameter=my-parameter --location=global
+
+POSITIONAL ARGUMENTS
+     Version resource - Identifier. [Output only] The resource name of the
+     ParameterVersion in the format
+     projects/*/locations/*/parameters/*/versions/*. The arguments in this
+     group can be used to specify the attributes of this resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the version or fully qualified identifier for the version.
+
+          To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location id of the version resource.
+
+          To set the location attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+       --parameter=PARAMETER
+          The parameter id of the version resource.
+
+          To set the parameter attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --parameter on the command line.
+
+FLAGS
+     --[no-]disabled
+        Disabled boolean to determine if a ParameterVersion acts as a metadata
+        only resource (payload is never returned if disabled is true). If true
+        any calls will always default to BASIC view even if the user explicitly
+        passes FULL view as part of the request. A render call on a disabled
+        resource fails with an error. Default value is False. Use --disabled to
+        enable and --no-disabled to disable.
+
+     --request-id=REQUEST_ID
+        An optional request ID to identify requests. Specify a unique request
+        ID so that if you must retry your request, the server will know to
+        ignore the request if it has already been completed. The server will
+        guarantee that for at least 60 minutes since the first request.
+
+        For example, consider a situation where you make an initial request and
+        the request times out. If you make the request again with the same
+        request ID, the server can check if original operation with the same
+        request ID was received, and if so, will ignore the second request.
+        This prevents clients from accidentally creating duplicate commitments.
+
+        The request ID must be a valid UUID with the exception that zero UUID
+        is not supported (00000000-0000-0000-0000-000000000000).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the parametermanager/v1 API. The full documentation for
+    this API can be found at:
+    https://cloud.google.com/secret-manager/parameter-manager/docs/overview
diff --git a/gcloud/redis/clusters/backup-collections/describe b/gcloud/redis/clusters/backup-collections/describe
new file mode 100644
index 000000000..cfbda057f
--- /dev/null
+++ b/gcloud/redis/clusters/backup-collections/describe
@@ -0,0 +1,77 @@
+NAME
+    gcloud redis clusters backup-collections describe - show metadata for a
+        backup collection
+
+SYNOPSIS
+    gcloud redis clusters backup-collections describe
+        (BACKUP_COLLECTION : --region=REGION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Show metadata for a backup collection.
+
+    Displays all metadata associated with a backup collection.
+
+    This command can fail for the following reasons:
+      ▪ The backup collection specified does not exist.
+      ▪ The active account does not have permission to access the given
+        backup collection.
+
+EXAMPLES
+    To display the metadata for a backup collection with the name
+    my-backup-collection in the us-central1 region, run:
+
+        $ {commmand} my-backup-collection --region=us-central1
+
+POSITIONAL ARGUMENTS
+     Backup collection resource - Arguments and flags that specify the backup
+     collection you want to describe. The arguments in this group can be used
+     to specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup_collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP_COLLECTION
+          ID of the backup collection or fully qualified identifier for the
+          backup collection.
+
+          To set the backup_collection attribute:
+          ▸ provide the argument backup_collection on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --region=REGION
+          The name of the Redis region of the backup collection. Overrides the
+          default redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument backup_collection on the command line with a
+            fully specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backup-collections describe
+
+        $ gcloud beta redis clusters backup-collections describe
+
diff --git a/gcloud/redis/clusters/backup-collections/help b/gcloud/redis/clusters/backup-collections/help
new file mode 100644
index 000000000..e6d29d94b
--- /dev/null
+++ b/gcloud/redis/clusters/backup-collections/help
@@ -0,0 +1,31 @@
+NAME
+    gcloud redis clusters backup-collections - manage backup collections of
+        Memorystore for Redis Cluster instances
+
+SYNOPSIS
+    gcloud redis clusters backup-collections COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage backup collections of Memorystore for Redis Cluster instances.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        Show metadata for a backup collection.
+
+     list
+        List backup collections in a region.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backup-collections
+
+        $ gcloud beta redis clusters backup-collections
+
diff --git a/gcloud/redis/clusters/backup-collections/list b/gcloud/redis/clusters/backup-collections/list
new file mode 100644
index 000000000..456b12c22
--- /dev/null
+++ b/gcloud/redis/clusters/backup-collections/list
@@ -0,0 +1,90 @@
+NAME
+    gcloud redis clusters backup-collections list - list backup collections in
+        a region
+
+SYNOPSIS
+    gcloud redis clusters backup-collections list [--region=REGION]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List all backup collections under the specified project and region.
+
+    To specify the maximum number of results, use the --limit flag.
+
+EXAMPLES
+    To list up to 5 backup collections in the us-central1 region, run:
+
+        $ gcloud redis clusters backup-collections list \
+            --region=us-central1 --limit=5
+
+FLAGS
+     Region resource - The region of the backup collections to display. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --region on the command line with a fully
+        specified name;
+      ◆ set the property redis/region with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --region=REGION
+          ID of the region or fully qualified identifier for the region.
+
+          To set the region attribute:
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backup-collections list
+
+        $ gcloud beta redis clusters backup-collections list
+
diff --git a/gcloud/redis/clusters/backups/delete b/gcloud/redis/clusters/backups/delete
new file mode 100644
index 000000000..2b3452e33
--- /dev/null
+++ b/gcloud/redis/clusters/backups/delete
@@ -0,0 +1,89 @@
+NAME
+    gcloud redis clusters backups delete - delete a Memorystore for Redis
+        Cluster backup
+
+SYNOPSIS
+    gcloud redis clusters backups delete
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --region=REGION)
+        [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a Memorystore for Redis Cluster backup.
+
+    This command can fail for the following reasons:
+      ▪ The backup specified does not exist.
+      ▪ The active account does not have permission to access the given
+        backup.
+
+EXAMPLES
+    To delete a backup with the name my-backup under backup collection
+    my-backup-collection in us-central1 region, run:
+
+        $ gcloud redis clusters backups delete my-backup \
+            --backup-collection=my-backup-collection --region=us-central1
+
+POSITIONAL ARGUMENTS
+     Backup resource - Arguments and flags that specify the Redis backup you
+     want to delete. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The name of the Redis cluster backup collection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --region=REGION
+          The name of the Redis region of the backup. Overrides the default
+          redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backups delete
+
+        $ gcloud beta redis clusters backups delete
+
diff --git a/gcloud/redis/clusters/backups/describe b/gcloud/redis/clusters/backups/describe
new file mode 100644
index 000000000..7f84a5275
--- /dev/null
+++ b/gcloud/redis/clusters/backups/describe
@@ -0,0 +1,86 @@
+NAME
+    gcloud redis clusters backups describe - show metadata for a Memorystore
+        for Redis Cluster backup
+
+SYNOPSIS
+    gcloud redis clusters backups describe
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --region=REGION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Show metadata for a Memorystore for Redis Cluster backup.
+
+    Displays all metadata associated with a backup given a valid backup name.
+
+    This command can fail for the following reasons:
+      ▪ The backup specified does not exist.
+      ▪ The active account does not have permission to access the given
+        backup.
+
+EXAMPLES
+    To display the metadata for a backup named my-backup, under my-collection
+    backup collection, in us-central1 region, run:
+
+        $ gcloud redis clusters backups describe my-backup \
+            --backup_collection=my-collection --region=us-central1
+
+POSITIONAL ARGUMENTS
+     Backup resource - Arguments and flags that specify the backup you want to
+     describe. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The name of the Redis cluster backup collection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --region=REGION
+          The name of the Redis region of the backup. Overrides the default
+          redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backups describe
+
+        $ gcloud beta redis clusters backups describe
+
diff --git a/gcloud/redis/clusters/backups/export b/gcloud/redis/clusters/backups/export
new file mode 100644
index 000000000..10315d56c
--- /dev/null
+++ b/gcloud/redis/clusters/backups/export
@@ -0,0 +1,92 @@
+NAME
+    gcloud redis clusters backups export - export a Redis cluster backup to a
+        Google Cloud Storage bucket
+
+SYNOPSIS
+    gcloud redis clusters backups export
+        (BACKUP : --backup-collection=BACKUP_COLLECTION --region=REGION)
+        --gcs-bucket=GCS_BUCKET [--async] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    This command exports a Redis cluster backup to a Google Cloud Storage
+    bucket. A new folder will be created in the bucket with the backup name.
+    And the backup files will be stored in the folder.
+
+EXAMPLES
+    To export a backup with name my-backup under backup collection
+    my-collection in us-central region to my-bucket Google Cloud Storage
+    bucket, run:
+
+        $ gcloud redis clusters backups export my-backup \
+            --backup-collection=my-collection --region=us-central1 \
+            --bucket-name=my-bucket
+
+POSITIONAL ARGUMENTS
+     Backup resource - Arguments and flags that specify the Redis backup you
+     want to export. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument backup on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       BACKUP
+          ID of the backup or fully qualified identifier for the backup.
+
+          To set the backup attribute:
+          ▸ provide the argument backup on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          The name of the Redis cluster backup collection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --backup-collection on the command line.
+
+       --region=REGION
+          The name of the Redis region of the backup. Overrides the default
+          redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument backup on the command line with a fully
+            specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+REQUIRED FLAGS
+     --gcs-bucket=GCS_BUCKET
+        The name of the Google Cloud Storage bucket to export the backup to.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backups export
+
+        $ gcloud beta redis clusters backups export
+
diff --git a/gcloud/redis/clusters/backups/help b/gcloud/redis/clusters/backups/help
new file mode 100644
index 000000000..77904ba67
--- /dev/null
+++ b/gcloud/redis/clusters/backups/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud redis clusters backups - manage backups of Memorystore for Redis
+        Cluster instances
+
+SYNOPSIS
+    gcloud redis clusters backups COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage backups of Memorystore for Redis Cluster instances.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     delete
+        Delete a Memorystore for Redis Cluster backup.
+
+     describe
+        Show metadata for a Memorystore for Redis Cluster backup.
+
+     export
+        Export a Redis cluster backup to a Google Cloud Storage bucket.
+
+     list
+        List backups under a backup collection in a region.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backups
+
+        $ gcloud beta redis clusters backups
+
diff --git a/gcloud/redis/clusters/backups/list b/gcloud/redis/clusters/backups/list
new file mode 100644
index 000000000..de2784779
--- /dev/null
+++ b/gcloud/redis/clusters/backups/list
@@ -0,0 +1,106 @@
+NAME
+    gcloud redis clusters backups list - list backups under a backup collection
+        in a region
+
+SYNOPSIS
+    gcloud redis clusters backups list
+        (--backup-collection=BACKUP_COLLECTION : --region=REGION)
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List backups under a backup collection in a region.
+
+    To specify the maximum number of results, use the --limit flag.
+
+EXAMPLES
+    To list up to 5 backups in the us-central1 region, run:
+
+        $ gcloud redis clusters backups list \
+            --backup-collection=my-collection --region=us-central1 --limit=5
+
+REQUIRED FLAGS
+     Backup collection resource - The backup collection of the backups to
+     display. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --backup-collection on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --backup-collection=BACKUP_COLLECTION
+          ID of the backup collection or fully qualified identifier for the
+          backup collection.
+
+          To set the backup-collection attribute:
+          ▸ provide the argument --backup-collection on the command line.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --region=REGION
+          The name of the Redis region of the backup collection. Overrides the
+          default redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument --backup-collection on the command line with
+            a fully specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters backups list
+
+        $ gcloud beta redis clusters backups list
+
diff --git a/gcloud/redis/clusters/create b/gcloud/redis/clusters/create
index 3fe0cfa59..fc2c6ce52 100644
--- a/gcloud/redis/clusters/create
+++ b/gcloud/redis/clusters/create
@@ -5,6 +5,9 @@ NAME
 SYNOPSIS
     gcloud redis clusters create (CLUSTER : --region=REGION)
         [--aof-append-fsync=AOF_APPEND_FSYNC] [--async] [--auth-mode=AUTH_MODE]
+        [--automated-backup-mode=AUTOMATED_BACKUP_MODE]
+        [--automated-backup-start-time=AUTOMATED_BACKUP_START_TIME]
+        [--automated-backup-ttl=AUTOMATED_BACKUP_TTL]
         [--cross-cluster-replication-role=CROSS_CLUSTER_REPLICATION_ROLE]
         [--deletion-protection]
         [--maintenance-window-day=MAINTENANCE_WINDOW_DAY]
@@ -17,6 +20,8 @@ SYNOPSIS
         [--shard-count=SHARD_COUNT]
         [--transit-encryption-mode=TRANSIT_ENCRYPTION_MODE] [--zone=ZONE]
         [--zone-distribution-mode=ZONE_DISTRIBUTION_MODE]
+        [--import-gcs-object-uris=[IMPORT_GCS_OBJECT_URIS,...]
+          | --import-managed-backup=IMPORT_MANAGED_BACKUP]
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -109,6 +114,25 @@ FLAGS
          iam-auth
             IAM basic authorization is enabled for the cluster.
 
+     --automated-backup-mode=AUTOMATED_BACKUP_MODE
+        Automated backup mode. AUTOMATED_BACKUP_MODE must be one of:
+
+         disabled
+            (default) Automated backup is disabled.
+
+         enabled
+            Automated backup is enabled.
+
+     --automated-backup-start-time=AUTOMATED_BACKUP_START_TIME
+        One-hour window when you want automated-backup operations to start.
+        Specify the time in the format HH:00 on a 24-hour cycle in UTC time.
+
+     --automated-backup-ttl=AUTOMATED_BACKUP_TTL
+        Time to live for automated backups. A backup will be deleted
+        automatically after the TTL is reached. It ranges from 1 day to 365
+        days. For example, "10d" for 10 days. If not specified, the default
+        value is 35 days.
+
      --cross-cluster-replication-role=CROSS_CLUSTER_REPLICATION_ROLE
         The role of the cluster in cross cluster replication.
         CROSS_CLUSTER_REPLICATION_ROLE must be (only one value is supported):
@@ -214,6 +238,16 @@ FLAGS
          single-zone
             Allocate cluster nodes in a single zone.
 
+     At most one of these can be specified:
+
+       --import-gcs-object-uris=[IMPORT_GCS_OBJECT_URIS,...]
+          URIs of Google Cloud Storage objects to import from. For example,
+          gs://bucket/folder/file1.rdb,gs://bucket/folder/file2.rdb.
+
+       --import-managed-backup=IMPORT_MANAGED_BACKUP
+          Managed backup to import from. For example,
+          projects/PROJECT_ID/locations/REGION/backupCollections/BACKUP_COLLECTION_ID/backups/BACKUP_ID.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/redis/clusters/create-backup b/gcloud/redis/clusters/create-backup
new file mode 100644
index 000000000..2a5ae5d1f
--- /dev/null
+++ b/gcloud/redis/clusters/create-backup
@@ -0,0 +1,80 @@
+NAME
+    gcloud redis clusters create-backup - create a backup of a Redis cluster
+
+SYNOPSIS
+    gcloud redis clusters create-backup (CLUSTER : --region=REGION) [--async]
+        [--backup-id=BACKUP_ID] [--ttl=TTL] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a backup of a Redis cluster. The backup can be used to seed a new
+    cluster or exported to a Google Cloud Storage bucket.
+
+    The created backup will be added into the backup collection associated with
+    the cluster. Describe the cluster to get the backup collection name.
+
+POSITIONAL ARGUMENTS
+     Cluster resource - Arguments and flags that specify the Memorystore Redis
+     cluster to create a backup for. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument cluster on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       CLUSTER
+          ID of the cluster or fully qualified identifier for the cluster.
+
+          To set the cluster attribute:
+          ▸ provide the argument cluster on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --region=REGION
+          The name of the Redis region of the cluster. Overrides the default
+          redis/region property value for this command invocation.
+
+          To set the region attribute:
+          ▸ provide the argument cluster on the command line with a fully
+            specified name;
+          ▸ provide the argument --region on the command line;
+          ▸ set the property redis/region.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --backup-id=BACKUP_ID
+        The ID of the backup.
+
+     --ttl=TTL
+        The time to live for the backup. The backup will be deleted
+        automatically after the TTL is reached. For example, "10d" for 10 days.
+        The minimum value is 1 day. If not specified, the default value is 100
+        years.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the redis/v1 API. The full documentation for this API can
+    be found at: https://cloud.google.com/memorystore/docs/redis/
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha redis clusters create-backup
+
+        $ gcloud beta redis clusters create-backup
+
diff --git a/gcloud/redis/clusters/help b/gcloud/redis/clusters/help
index db1e54d7d..9c8cabbe2 100644
--- a/gcloud/redis/clusters/help
+++ b/gcloud/redis/clusters/help
@@ -2,7 +2,7 @@ NAME
     gcloud redis clusters - manage Memorystore for Redis Cluster instances
 
 SYNOPSIS
-    gcloud redis clusters COMMAND [GCLOUD_WIDE_FLAG ...]
+    gcloud redis clusters GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Manage Memorystore for Redis Cluster instances.
@@ -12,6 +12,15 @@ GCLOUD WIDE FLAGS
 
     Run $ gcloud help for details.
 
+GROUPS
+    GROUP is one of the following:
+
+     backup-collections
+        Manage backup collections of Memorystore for Redis Cluster instances.
+
+     backups
+        Manage backups of Memorystore for Redis Cluster instances.
+
 COMMANDS
     COMMAND is one of the following:
 
@@ -21,6 +30,9 @@ COMMANDS
      create
         Create a new Memorystore for Redis Cluster instance.
 
+     create-backup
+        Create a backup of a Redis cluster.
+
      delete
         Delete a Memorystore for Redis Cluster instance.
 
diff --git a/gcloud/redis/clusters/update b/gcloud/redis/clusters/update
index f31dbd037..99171b520 100644
--- a/gcloud/redis/clusters/update
+++ b/gcloud/redis/clusters/update
@@ -4,7 +4,10 @@ NAME
 
 SYNOPSIS
     gcloud redis clusters update (CLUSTER : --region=REGION)
-        [--aof-append-fsync=AOF_APPEND_FSYNC] [--async] [--deletion-protection]
+        [--aof-append-fsync=AOF_APPEND_FSYNC] [--async]
+        [--automated-backup-mode=AUTOMATED_BACKUP_MODE]
+        [--automated-backup-start-time=AUTOMATED_BACKUP_START_TIME]
+        [--automated-backup-ttl=AUTOMATED_BACKUP_TTL] [--deletion-protection]
         [--node-type=NODE_TYPE] [--ondemand-maintenance]
         [--persistence-mode=PERSISTENCE_MODE]
         [--rdb-snapshot-period=RDB_SNAPSHOT_PERIOD]
@@ -80,6 +83,25 @@ FLAGS
         Return immediately, without waiting for the operation in progress to
         complete.
 
+     --automated-backup-mode=AUTOMATED_BACKUP_MODE
+        Automated backup mode. AUTOMATED_BACKUP_MODE must be one of:
+
+         disabled
+            (default) Automated backup is disabled.
+
+         enabled
+            Automated backup is enabled.
+
+     --automated-backup-start-time=AUTOMATED_BACKUP_START_TIME
+        One-hour window when you want automated-backup operations to start.
+        Specify the time in the format HH:00 on a 24-hour cycle in UTC time.
+
+     --automated-backup-ttl=AUTOMATED_BACKUP_TTL
+        Time to live for automated backups. A backup will be deleted
+        automatically after the TTL is reached. It ranges from 1 day to 365
+        days. For example, "10d" for 10 days. If not specified, the default
+        value is 35 days.
+
      --deletion-protection
         Enable deletion protection for the Redis Cluster. Use
         --deletion-protection/--no-deletion-protection to enable/disable it.
diff --git a/gcloud/run/deploy b/gcloud/run/deploy
index bb6a18761..52a6b5ae9 100644
--- a/gcloud/run/deploy
+++ b/gcloud/run/deploy
@@ -8,8 +8,8 @@ SYNOPSIS
         [--concurrency=CONCURRENCY] [--container=CONTAINER] [--[no-]cpu-boost]
         [--[no-]cpu-throttling] [--description=DESCRIPTION]
         [--execution-environment=EXECUTION_ENVIRONMENT] [--gpu-type=GPU_TYPE]
-        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
-        [--max-instances=MAX_INSTANCES] [--min=MIN]
+        [--[no-]gpu-zonal-redundancy] [--ingress=INGRESS; default="all"]
+        [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES] [--min=MIN]
         [--min-instances=MIN_INSTANCES] [--region=REGION]
         [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT]
@@ -169,6 +169,10 @@ FLAGS
      --gpu-type=GPU_TYPE
         The GPU type to use.
 
+     --[no-]gpu-zonal-redundancy
+        Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
+        --no-gpu-zonal-redundancy to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
diff --git a/gcloud/run/jobs/create b/gcloud/run/jobs/create
index 4a8a4cc95..d89e10f8a 100644
--- a/gcloud/run/jobs/create
+++ b/gcloud/run/jobs/create
@@ -2,22 +2,26 @@ NAME
     gcloud run jobs create - create a Cloud Run job
 
 SYNOPSIS
-    gcloud run jobs create [JOB] --image=IMAGE [--args=[ARG,...]]
-        [--binary-authorization=POLICY] [--breakglass=JUSTIFICATION]
-        [--command=[COMMAND,...]] [--cpu=CPU] [--key=KEY]
+    gcloud run jobs create [JOB] [--binary-authorization=POLICY]
+        [--breakglass=JUSTIFICATION] [--container=CONTAINER] [--key=KEY]
         [--labels=[KEY=VALUE,...]] [--max-retries=MAX_RETRIES]
-        [--memory=MEMORY] [--parallelism=PARALLELISM] [--region=REGION]
+        [--parallelism=PARALLELISM] [--region=REGION]
         [--service-account=SERVICE_ACCOUNT]
         [--set-cloudsql-instances=[CLOUDSQL-INSTANCES,...]]
-        [--set-secrets=[KEY=SECRET_NAME:SECRET_VERSION,...]]
         [--task-timeout=TASK_TIMEOUT] [--tasks=TASKS; default=1]
         [--vpc-connector=VPC_CONNECTOR] [--vpc-egress=VPC_EGRESS]
         [--add-volume=[KEY=VALUE,...]
           --clear-volumes --remove-volume=[VOLUME,...]]
         [--add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-          --clear-volume-mounts --remove-volume-mount=[MOUNT_PATH,...]]
+          --args=[ARG,...] --clear-volume-mounts --command=[COMMAND,...]
+          --cpu=CPU --depends-on=[CONTAINER,...] --image=IMAGE --memory=MEMORY
+          --remove-volume-mount=[MOUNT_PATH,...] --clear-env-vars
+          | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...]
+          | --remove-env-vars=[KEY,...]
+          --update-env-vars=[KEY=VALUE,...] --clear-secrets
+          | --set-secrets=[KEY=VALUE,...]
+          | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]]
         [--async | --execute-now --wait]
-        [--env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...]]
         [--network=NETWORK --network-tags=[TAG,...] --subnet=SUBNET]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -55,18 +59,7 @@ POSITIONAL ARGUMENTS
           ▸ provide the argument JOB on the command line;
           ▸ specify the job name from an interactive prompt.
 
-REQUIRED FLAGS
-     --image=IMAGE
-        Name of the container image to deploy (e.g.
-        us-docker.pkg.dev/cloudrun/container/job:latest).
-
-OPTIONAL FLAGS
-     --args=[ARG,...]
-        Comma-separated arguments passed to the command run by the container
-        image. If not specified and no '--command' is provided, the container
-        image's default Cmd is used. Otherwise, if not specified, no arguments
-        are passed. To reset this field to its default, pass an empty string.
-
+FLAGS
      --binary-authorization=POLICY
         Binary Authorization policy to check against. This must be set to
         "default".
@@ -78,16 +71,12 @@ OPTIONAL FLAGS
         more information. Next update or deploy command will automatically
         clear existing breakglass justification.
 
-     --command=[COMMAND,...]
-        Entrypoint for the container image. If not specified, the container
-        image's default Entrypoint is run. To reset this field to its default,
-        pass an empty string.
+     --container=CONTAINER
+        Specifies a container by name. Flags following --container will apply
+        to the specified container.
 
-     --cpu=CPU
-        Set a CPU limit in Kubernetes cpu units.
-
-        Cloud Run supports values fractional values below 1, 1, 2, 4, and 8.
-        Some CPU values requires a minimum Memory --memory value.
+        Flags that are not container-specific must be specified before
+        --container.
 
      --key=KEY
         CMEK key reference to encrypt the container with.
@@ -100,9 +89,6 @@ OPTIONAL FLAGS
         being failed permanently. This applies per-task, not per-job. If set to
         0, tasks will only run once and never be retried on failure.
 
-     --memory=MEMORY
-        Set a memory limit. Ex: 1024Mi, 4Gi.
-
      --parallelism=PARALLELISM
         Number of tasks that may run concurrently. Must be less than or equal
         to the number of tasks. Set to 0 to unset.
@@ -121,13 +107,6 @@ OPTIONAL FLAGS
         project and region as your Cloud Run resource; otherwise specify
         <project>:<region>:<instance> for the instance.
 
-     --set-secrets=[KEY=SECRET_NAME:SECRET_VERSION,...]
-        Specify secrets to provide as environment variables. For example:
-        '--set-secrets=ENV=mysecret:latest,OTHER_ENV=othersecret:1' will create
-        an environment variable named ENV whose value is the latest version of
-        secret 'mysecret' and an environment variable OTHER_ENV whose value is
-        version of 1 of secret 'othersecret'.
-
      --task-timeout=TASK_TIMEOUT
         Set the maximum time (deadline) a job task attempt can run for. In the
         case of retries, this deadline applies to each attempt of a task. If
@@ -205,18 +184,104 @@ OPTIONAL FLAGS
      --remove-volume=[VOLUME,...]
         Removes volumes from the Cloud Run resource.
 
-     --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-        Adds a mount to the current container. Must contain the keys
-        volume=NAME and mount-path=/PATH where NAME is the name of a volume on
-        this resource and PATH is the path within the container's filesystem to
-        mount this volume.
+    Container Flags
 
-     --clear-volume-mounts
-        Remove all existing mounts from the current container.
+        If the --container is specified the following arguments may only be specified after a --container flag.
 
-     --remove-volume-mount=[MOUNT_PATH,...]
-        Removes the volume mounted at the specified path from the current
-        container.
+         --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
+            Adds a mount to the current container. Must contain the keys
+            volume=NAME and mount-path=/PATH where NAME is the name of a volume
+            on this resource and PATH is the path within the container's
+            filesystem to mount this volume.
+
+         --args=[ARG,...]
+            Comma-separated arguments passed to the command run by the
+            container image. If not specified and no '--command' is provided,
+            the container image's default Cmd is used. Otherwise, if not
+            specified, no arguments are passed. To reset this field to its
+            default, pass an empty string.
+
+         --clear-volume-mounts
+            Remove all existing mounts from the current container.
+
+         --command=[COMMAND,...]
+            Entrypoint for the container image. If not specified, the container
+            image's default Entrypoint is run. To reset this field to its
+            default, pass an empty string.
+
+         --cpu=CPU
+            Set a CPU limit in Kubernetes cpu units.
+
+            Cloud Run supports values fractional values below 1, 1, 2, 4, and
+            8. Some CPU values requires a minimum Memory --memory value.
+
+         --depends-on=[CONTAINER,...]
+            List of container dependencies to add to the current container.
+
+         --image=IMAGE
+            Name of the container image to deploy (e.g.
+            us-docker.pkg.dev/cloudrun/container/job:latest).
+
+         --memory=MEMORY
+            Set a memory limit. Ex: 1024Mi, 4Gi.
+
+         --remove-volume-mount=[MOUNT_PATH,...]
+            Removes the volume mounted at the specified path from the current
+            container.
+
+         At most one of these can be specified:
+
+           --clear-env-vars
+              Remove all environment variables.
+
+           --env-vars-file=FILE_PATH
+              Path to a local YAML file with definitions for all environment
+              variables. All existing environment variables will be removed
+              before the new environment variables are added. Example YAML
+              content:
+
+                  KEY_1: "value1"
+                  KEY_2: "value 2"
+
+           --set-env-vars=[KEY=VALUE,...]
+              List of key-value pairs to set as environment variables. All
+              existing environment variables will be removed first.
+
+           Only --update-env-vars and --remove-env-vars can be used together.
+           If both are specified, --remove-env-vars will be applied first.
+
+             --remove-env-vars=[KEY,...]
+                List of environment variables to be removed.
+
+             --update-env-vars=[KEY=VALUE,...]
+                List of key-value pairs to set as environment variables.
+
+         Specify secrets to mount or provide as environment variables. Keys
+         starting with a forward slash '/' are mount paths. All other keys
+         correspond to environment variables. Values should be in the form
+         SECRET_NAME:SECRET_VERSION. For example:
+         '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1'
+         will mount a volume at '/secrets/api' containing a file 'key' with the
+         latest version of secret 'mysecret'. An environment variable named ENV
+         will also be created whose value is version 1 of secret 'othersecret'.
+
+         At most one of these can be specified:
+
+           --clear-secrets
+              Remove all secrets.
+
+           --set-secrets=[KEY=VALUE,...]
+              List of key-value pairs to set as secrets. All existing secrets
+              will be removed first.
+
+           Only --update-secrets and --remove-secrets can be used together. If
+           both are specified, --remove-secrets will be applied first.
+
+             --remove-secrets=[KEY,...]
+                List of secrets to be removed.
+
+             --update-secrets=[KEY=VALUE,...]
+                List of key-value pairs to set as secrets.
 
      At most one of these can be specified:
 
@@ -236,18 +301,6 @@ OPTIONAL FLAGS
             not set, gcloud exits successfully when the execution has started.
             Implies --execute-now.
 
-     At most one of these can be specified:
-
-       --env-vars-file=FILE_PATH
-          Path to a local YAML file with definitions for all environment
-          variables. Example YAML content:
-
-              KEY_1: "value1"
-              KEY_2: "value 2"
-
-       --set-env-vars=[KEY=VALUE,...]
-          List of key-value pairs to set as environment variables.
-
      Direct VPC egress setting flags group.
 
        --network=NETWORK
diff --git a/gcloud/run/jobs/deploy b/gcloud/run/jobs/deploy
index 48044df4a..29f791ffa 100644
--- a/gcloud/run/jobs/deploy
+++ b/gcloud/run/jobs/deploy
@@ -2,28 +2,30 @@ NAME
     gcloud run jobs deploy - create or update a Cloud Run job
 
 SYNOPSIS
-    gcloud run jobs deploy [JOB] [--args=[ARG,...]]
-        [--binary-authorization=POLICY] [--breakglass=JUSTIFICATION]
-        [--command=[COMMAND,...]] [--cpu=CPU] [--key=KEY]
+    gcloud run jobs deploy [JOB] [--binary-authorization=POLICY]
+        [--breakglass=JUSTIFICATION] [--container=CONTAINER] [--key=KEY]
         [--labels=[KEY=VALUE,...]] [--max-retries=MAX_RETRIES]
-        [--memory=MEMORY] [--parallelism=PARALLELISM] [--region=REGION]
+        [--parallelism=PARALLELISM] [--region=REGION]
+        [--remove-containers=[CONTAINER,...]]
         [--service-account=SERVICE_ACCOUNT]
         [--set-cloudsql-instances=[CLOUDSQL-INSTANCES,...]]
-        [--set-secrets=[KEY=SECRET_NAME:SECRET_VERSION,...]]
         [--task-timeout=TASK_TIMEOUT] [--tasks=TASKS; default=1]
         [--vpc-connector=VPC_CONNECTOR] [--vpc-egress=VPC_EGRESS]
         [--add-volume=[KEY=VALUE,...]
           --clear-volumes --remove-volume=[VOLUME,...]]
         [--add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-          --clear-volume-mounts --remove-volume-mount=[MOUNT_PATH,...]]
+          --args=[ARG,...] --clear-volume-mounts --command=[COMMAND,...]
+          --cpu=CPU --depends-on=[CONTAINER,...] --memory=MEMORY
+          --remove-volume-mount=[MOUNT_PATH,...] --clear-env-vars
+          | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...]
+          | --remove-env-vars=[KEY,...]
+          --update-env-vars=[KEY=VALUE,...] --clear-secrets
+          | --set-secrets=[KEY=VALUE,...] | --remove-secrets=[KEY,...]
+          --update-secrets=[KEY=VALUE,...] --image=IMAGE | --source=SOURCE]
         [--async | --execute-now --wait]
-        [--clear-env-vars | --env-vars-file=FILE_PATH
-          | --set-env-vars=[KEY=VALUE,...]
-          | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...]]
         [--clear-network
           | --network=NETWORK --subnet=SUBNET --clear-network-tags
-          | --network-tags=[TAG,...]] [--image=IMAGE | --source=SOURCE]
-        [GCLOUD_WIDE_FLAG ...]
+          | --network-tags=[TAG,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Creates or updates a Cloud Run job.
@@ -60,12 +62,6 @@ POSITIONAL ARGUMENTS
           ▸ specify the job name from an interactive prompt.
 
 FLAGS
-     --args=[ARG,...]
-        Comma-separated arguments passed to the command run by the container
-        image. If not specified and no '--command' is provided, the container
-        image's default Cmd is used. Otherwise, if not specified, no arguments
-        are passed. To reset this field to its default, pass an empty string.
-
      --binary-authorization=POLICY
         Binary Authorization policy to check against. This must be set to
         "default".
@@ -77,16 +73,12 @@ FLAGS
         more information. Next update or deploy command will automatically
         clear existing breakglass justification.
 
-     --command=[COMMAND,...]
-        Entrypoint for the container image. If not specified, the container
-        image's default Entrypoint is run. To reset this field to its default,
-        pass an empty string.
+     --container=CONTAINER
+        Specifies a container by name. Flags following --container will apply
+        to the specified container.
 
-     --cpu=CPU
-        Set a CPU limit in Kubernetes cpu units.
-
-        Cloud Run supports values fractional values below 1, 1, 2, 4, and 8.
-        Some CPU values requires a minimum Memory --memory value.
+        Flags that are not container-specific must be specified before
+        --container.
 
      --key=KEY
         CMEK key reference to encrypt the container with.
@@ -99,9 +91,6 @@ FLAGS
         being failed permanently. This applies per-task, not per-job. If set to
         0, tasks will only run once and never be retried on failure.
 
-     --memory=MEMORY
-        Set a memory limit. Ex: 1024Mi, 4Gi.
-
      --parallelism=PARALLELISM
         Number of tasks that may run concurrently. Must be less than or equal
         to the number of tasks. Set to 0 to unset.
@@ -110,6 +99,9 @@ FLAGS
         Region in which the resource can be found. Alternatively, set the
         property [run/region].
 
+     --remove-containers=[CONTAINER,...]
+        List of containers to remove.
+
      --service-account=SERVICE_ACCOUNT
         the email address of an IAM service account associated with the
         revision of the service. The service account represents the identity of
@@ -120,13 +112,6 @@ FLAGS
         project and region as your Cloud Run resource; otherwise specify
         <project>:<region>:<instance> for the instance.
 
-     --set-secrets=[KEY=SECRET_NAME:SECRET_VERSION,...]
-        Specify secrets to provide as environment variables. For example:
-        '--set-secrets=ENV=mysecret:latest,OTHER_ENV=othersecret:1' will create
-        an environment variable named ENV whose value is the latest version of
-        secret 'mysecret' and an environment variable OTHER_ENV whose value is
-        version of 1 of secret 'othersecret'.
-
      --task-timeout=TASK_TIMEOUT
         Set the maximum time (deadline) a job task attempt can run for. In the
         case of retries, this deadline applies to each attempt of a task. If
@@ -204,18 +189,123 @@ FLAGS
      --remove-volume=[VOLUME,...]
         Removes volumes from the Cloud Run resource.
 
-     --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-        Adds a mount to the current container. Must contain the keys
-        volume=NAME and mount-path=/PATH where NAME is the name of a volume on
-        this resource and PATH is the path within the container's filesystem to
-        mount this volume.
+    Container Flags
 
-     --clear-volume-mounts
-        Remove all existing mounts from the current container.
+        If the --container or --remove-containers flag is specified the following
+        arguments may only be specified after a --container flag.
 
-     --remove-volume-mount=[MOUNT_PATH,...]
-        Removes the volume mounted at the specified path from the current
-        container.
+         --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
+            Adds a mount to the current container. Must contain the keys
+            volume=NAME and mount-path=/PATH where NAME is the name of a volume
+            on this resource and PATH is the path within the container's
+            filesystem to mount this volume.
+
+         --args=[ARG,...]
+            Comma-separated arguments passed to the command run by the
+            container image. If not specified and no '--command' is provided,
+            the container image's default Cmd is used. Otherwise, if not
+            specified, no arguments are passed. To reset this field to its
+            default, pass an empty string.
+
+         --clear-volume-mounts
+            Remove all existing mounts from the current container.
+
+         --command=[COMMAND,...]
+            Entrypoint for the container image. If not specified, the container
+            image's default Entrypoint is run. To reset this field to its
+            default, pass an empty string.
+
+         --cpu=CPU
+            Set a CPU limit in Kubernetes cpu units.
+
+            Cloud Run supports values fractional values below 1, 1, 2, 4, and
+            8. Some CPU values requires a minimum Memory --memory value.
+
+         --depends-on=[CONTAINER,...]
+            List of container dependencies to add to the current container.
+
+         --memory=MEMORY
+            Set a memory limit. Ex: 1024Mi, 4Gi.
+
+         --remove-volume-mount=[MOUNT_PATH,...]
+            Removes the volume mounted at the specified path from the current
+            container.
+
+         At most one of these can be specified:
+
+           --clear-env-vars
+              Remove all environment variables.
+
+           --env-vars-file=FILE_PATH
+              Path to a local YAML file with definitions for all environment
+              variables. All existing environment variables will be removed
+              before the new environment variables are added. Example YAML
+              content:
+
+                  KEY_1: "value1"
+                  KEY_2: "value 2"
+
+           --set-env-vars=[KEY=VALUE,...]
+              List of key-value pairs to set as environment variables. All
+              existing environment variables will be removed first.
+
+           Only --update-env-vars and --remove-env-vars can be used together.
+           If both are specified, --remove-env-vars will be applied first.
+
+             --remove-env-vars=[KEY,...]
+                List of environment variables to be removed.
+
+             --update-env-vars=[KEY=VALUE,...]
+                List of key-value pairs to set as environment variables.
+
+         Specify secrets to mount or provide as environment variables. Keys
+         starting with a forward slash '/' are mount paths. All other keys
+         correspond to environment variables. Values should be in the form
+         SECRET_NAME:SECRET_VERSION. For example:
+         '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1'
+         will mount a volume at '/secrets/api' containing a file 'key' with the
+         latest version of secret 'mysecret'. An environment variable named ENV
+         will also be created whose value is version 1 of secret 'othersecret'.
+
+         At most one of these can be specified:
+
+           --clear-secrets
+              Remove all secrets.
+
+           --set-secrets=[KEY=VALUE,...]
+              List of key-value pairs to set as secrets. All existing secrets
+              will be removed first.
+
+           Only --update-secrets and --remove-secrets can be used together. If
+           both are specified, --remove-secrets will be applied first.
+
+             --remove-secrets=[KEY,...]
+                List of secrets to be removed.
+
+             --update-secrets=[KEY=VALUE,...]
+                List of key-value pairs to set as secrets.
+
+         At most one of these can be specified:
+
+           --image=IMAGE
+              Name of the container image to deploy (e.g.
+              us-docker.pkg.dev/cloudrun/container/job:latest).
+
+           --source=SOURCE
+              The location of the source to build. If a Dockerfile is present
+              in the source code directory, it will be built using that
+              Dockerfile, otherwise it will use Google Cloud buildpacks. See
+              https://cloud.google.com/run/docs/deploying-source-code for more
+              details. The location can be a directory on a local disk or a
+              gzipped archive file (.tar.gz) in Google Cloud Storage. If the
+              source is a local directory, this command skips the files
+              specified in the --ignore-file. If --ignore-file is not
+              specified, use .gcloudignore file. If a .gcloudignore file is
+              absent and a .gitignore file is present in the local source
+              directory, gcloud will use a generated Git-compatible
+              .gcloudignore file that respects your .gitignored files. The
+              global .gitignore is not respected. For more information on
+              .gcloudignore, see gcloud topic gcloudignore.
 
      At most one of these can be specified:
 
@@ -235,32 +325,6 @@ FLAGS
             not set, gcloud exits successfully when the execution has started.
             Implies --execute-now.
 
-     At most one of these can be specified:
-
-       --clear-env-vars
-          Remove all environment variables.
-
-       --env-vars-file=FILE_PATH
-          Path to a local YAML file with definitions for all environment
-          variables. All existing environment variables will be removed before
-          the new environment variables are added. Example YAML content:
-
-              KEY_1: "value1"
-              KEY_2: "value 2"
-
-       --set-env-vars=[KEY=VALUE,...]
-          List of key-value pairs to set as environment variables. All existing
-          environment variables will be removed first.
-
-       Only --update-env-vars and --remove-env-vars can be used together. If
-       both are specified, --remove-env-vars will be applied first.
-
-         --remove-env-vars=[KEY,...]
-            List of environment variables to be removed.
-
-         --update-env-vars=[KEY=VALUE,...]
-            List of key-value pairs to set as environment variables.
-
      At most one of these can be specified:
 
        --clear-network
@@ -292,27 +356,6 @@ FLAGS
               Applies the given Compute Engine tags (comma separated) to the
               Cloud Run job. To clear existing tags, use --clear-network-tags.
 
-     At most one of these can be specified:
-
-       --image=IMAGE
-          Name of the container image to deploy (e.g.
-          us-docker.pkg.dev/cloudrun/container/job:latest).
-
-       --source=SOURCE
-          The location of the source to build. If a Dockerfile is present in
-          the source code directory, it will be built using that Dockerfile,
-          otherwise it will use Google Cloud buildpacks. See
-          https://cloud.google.com/run/docs/deploying-source-code for more
-          details. The location can be a directory on a local disk or a gzipped
-          archive file (.tar.gz) in Google Cloud Storage. If the source is a
-          local directory, this command skips the files specified in the
-          --ignore-file. If --ignore-file is not specified, use .gcloudignore
-          file. If a .gcloudignore file is absent and a .gitignore file is
-          present in the local source directory, gcloud will use a generated
-          Git-compatible .gcloudignore file that respects your .gitignored
-          files. The global .gitignore is not respected. For more information
-          on .gcloudignore, see gcloud topic gcloudignore.
-
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/run/jobs/execute b/gcloud/run/jobs/execute
index 2f0a822aa..53ce9c7d7 100644
--- a/gcloud/run/jobs/execute
+++ b/gcloud/run/jobs/execute
@@ -2,9 +2,9 @@ NAME
     gcloud run jobs execute - execute a job
 
 SYNOPSIS
-    gcloud run jobs execute [JOB] [--args=[ARG,...]] [--region=REGION]
+    gcloud run jobs execute [JOB] [--container=CONTAINER] [--region=REGION]
         [--task-timeout=TASK_TIMEOUT] [--tasks=TASKS]
-        [--update-env-vars=[KEY=VALUE,...]] [--async | --wait]
+        [--args=[ARG,...] --update-env-vars=[KEY=VALUE,...]] [--async | --wait]
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -36,10 +36,12 @@ POSITIONAL ARGUMENTS
           ▸ specify the job name from an interactive prompt.
 
 FLAGS
-     --args=[ARG,...]
-        Comma-separated arguments passed to the command run by the container
-        image. If provided, an execution will be created with the input values.
-        Otherwise, the existing arguments of the job are used.
+     --container=CONTAINER
+        Specifies a container by name. Flags following --container will apply
+        to the specified container.
+
+        Flags that are not container-specific must be specified before
+        --container.
 
      --region=REGION
         Region in which the resource can be found. Alternatively, set the
@@ -60,12 +62,23 @@ FLAGS
         considered done. If provided, an execution will be created with this
         value. Otherwise the existing task count of the job is used.
 
-     --update-env-vars=[KEY=VALUE,...]
-        List of key-value pairs to set as environment variables overrides for
-        an execution of a job. If provided, an execution will be created with
-        the merge result of the input values and the existing environment
-        variables. New value overrides existing value if they have the same
-        key. If not provided, existing environment variables are used.
+    Container Flags
+
+        If the --container is specified the following arguments may only be specified after a --container flag.
+
+         --args=[ARG,...]
+            Comma-separated arguments passed to the command run by the
+            container image. If provided, an execution will be created with the
+            input values. Otherwise, the existing arguments of the job are
+            used.
+
+         --update-env-vars=[KEY=VALUE,...]
+            List of key-value pairs to set as environment variables overrides
+            for an execution of a job. If provided, an execution will be
+            created with the merge result of the input values and the existing
+            environment variables. New value overrides existing value if they
+            have the same key. If not provided, existing environment variables
+            are used.
 
      At most one of these can be specified:
 
diff --git a/gcloud/run/jobs/update b/gcloud/run/jobs/update
index 27b21bc24..089acc616 100644
--- a/gcloud/run/jobs/update
+++ b/gcloud/run/jobs/update
@@ -2,11 +2,10 @@ NAME
     gcloud run jobs update - update a Cloud Run Job
 
 SYNOPSIS
-    gcloud run jobs update [JOB] [--args=[ARG,...]]
-        [--breakglass=JUSTIFICATION] [--clear-vpc-connector]
-        [--command=[COMMAND,...]] [--cpu=CPU] [--image=IMAGE] [--key=KEY]
-        [--max-retries=MAX_RETRIES] [--memory=MEMORY]
-        [--parallelism=PARALLELISM] [--region=REGION]
+    gcloud run jobs update [JOB] [--breakglass=JUSTIFICATION]
+        [--clear-vpc-connector] [--container=CONTAINER] [--key=KEY]
+        [--max-retries=MAX_RETRIES] [--parallelism=PARALLELISM]
+        [--region=REGION] [--remove-containers=[CONTAINER,...]]
         [--service-account=SERVICE_ACCOUNT] [--task-timeout=TASK_TIMEOUT]
         [--tasks=TASKS; default=1] [--vpc-connector=VPC_CONNECTOR]
         [--vpc-egress=VPC_EGRESS]
@@ -17,20 +16,21 @@ SYNOPSIS
         [--add-volume=[KEY=VALUE,...]
           --clear-volumes --remove-volume=[VOLUME,...]]
         [--add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-          --clear-volume-mounts --remove-volume-mount=[MOUNT_PATH,...]]
+          --args=[ARG,...] --clear-volume-mounts --command=[COMMAND,...]
+          --cpu=CPU --depends-on=[CONTAINER,...] --image=IMAGE --memory=MEMORY
+          --remove-volume-mount=[MOUNT_PATH,...] --clear-env-vars
+          | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...]
+          | --remove-env-vars=[KEY,...]
+          --update-env-vars=[KEY=VALUE,...] --clear-secrets
+          | --set-secrets=[KEY=VALUE,...]
+          | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]]
         [--async | --execute-now --wait]
         [--binary-authorization=POLICY | --clear-binary-authorization]
-        [--clear-env-vars | --env-vars-file=FILE_PATH
-          | --set-env-vars=[KEY=VALUE,...]
-          | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...]]
         [--clear-labels | --remove-labels=[KEY,...] --labels=[KEY=VALUE,...]
           | --update-labels=[KEY=VALUE,...]]
         [--clear-network
           | --network=NETWORK --subnet=SUBNET --clear-network-tags
-          | --network-tags=[TAG,...]]
-        [--clear-secrets | --set-secrets=[KEY=VALUE,...]
-          | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]]
-        [GCLOUD_WIDE_FLAG ...]
+          | --network-tags=[TAG,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Updates a Cloud Run job.
@@ -62,12 +62,6 @@ POSITIONAL ARGUMENTS
           ▸ specify the job name from an interactive prompt.
 
 FLAGS
-     --args=[ARG,...]
-        Comma-separated arguments passed to the command run by the container
-        image. If not specified and no '--command' is provided, the container
-        image's default Cmd is used. Otherwise, if not specified, no arguments
-        are passed. To reset this field to its default, pass an empty string.
-
      --breakglass=JUSTIFICATION
         Justification to bypass Binary Authorization policy constraints and
         allow the operation. See
@@ -78,20 +72,12 @@ FLAGS
      --clear-vpc-connector
         Remove the VPC connector for this resource.
 
-     --command=[COMMAND,...]
-        Entrypoint for the container image. If not specified, the container
-        image's default Entrypoint is run. To reset this field to its default,
-        pass an empty string.
+     --container=CONTAINER
+        Specifies a container by name. Flags following --container will apply
+        to the specified container.
 
-     --cpu=CPU
-        Set a CPU limit in Kubernetes cpu units.
-
-        Cloud Run supports values fractional values below 1, 1, 2, 4, and 8.
-        Some CPU values requires a minimum Memory --memory value.
-
-     --image=IMAGE
-        Name of the container image to deploy (e.g.
-        us-docker.pkg.dev/cloudrun/container/job:latest).
+        Flags that are not container-specific must be specified before
+        --container.
 
      --key=KEY
         CMEK key reference to encrypt the container with.
@@ -101,9 +87,6 @@ FLAGS
         being failed permanently. This applies per-task, not per-job. If set to
         0, tasks will only run once and never be retried on failure.
 
-     --memory=MEMORY
-        Set a memory limit. Ex: 1024Mi, 4Gi.
-
      --parallelism=PARALLELISM
         Number of tasks that may run concurrently. Must be less than or equal
         to the number of tasks. Set to 0 to unset.
@@ -112,6 +95,9 @@ FLAGS
         Region in which the resource can be found. Alternatively, set the
         property [run/region].
 
+     --remove-containers=[CONTAINER,...]
+        List of containers to remove.
+
      --service-account=SERVICE_ACCOUNT
         the email address of an IAM service account associated with the
         revision of the service. The service account represents the identity of
@@ -214,18 +200,105 @@ FLAGS
      --remove-volume=[VOLUME,...]
         Removes volumes from the Cloud Run resource.
 
-     --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
-        Adds a mount to the current container. Must contain the keys
-        volume=NAME and mount-path=/PATH where NAME is the name of a volume on
-        this resource and PATH is the path within the container's filesystem to
-        mount this volume.
+    Container Flags
 
-     --clear-volume-mounts
-        Remove all existing mounts from the current container.
+        If the --container or --remove-containers flag is specified the following
+        arguments may only be specified after a --container flag.
 
-     --remove-volume-mount=[MOUNT_PATH,...]
-        Removes the volume mounted at the specified path from the current
-        container.
+         --add-volume-mount=[volume=NAME,mount-path=MOUNT_PATH,...]
+            Adds a mount to the current container. Must contain the keys
+            volume=NAME and mount-path=/PATH where NAME is the name of a volume
+            on this resource and PATH is the path within the container's
+            filesystem to mount this volume.
+
+         --args=[ARG,...]
+            Comma-separated arguments passed to the command run by the
+            container image. If not specified and no '--command' is provided,
+            the container image's default Cmd is used. Otherwise, if not
+            specified, no arguments are passed. To reset this field to its
+            default, pass an empty string.
+
+         --clear-volume-mounts
+            Remove all existing mounts from the current container.
+
+         --command=[COMMAND,...]
+            Entrypoint for the container image. If not specified, the container
+            image's default Entrypoint is run. To reset this field to its
+            default, pass an empty string.
+
+         --cpu=CPU
+            Set a CPU limit in Kubernetes cpu units.
+
+            Cloud Run supports values fractional values below 1, 1, 2, 4, and
+            8. Some CPU values requires a minimum Memory --memory value.
+
+         --depends-on=[CONTAINER,...]
+            List of container dependencies to add to the current container.
+
+         --image=IMAGE
+            Name of the container image to deploy (e.g.
+            us-docker.pkg.dev/cloudrun/container/job:latest).
+
+         --memory=MEMORY
+            Set a memory limit. Ex: 1024Mi, 4Gi.
+
+         --remove-volume-mount=[MOUNT_PATH,...]
+            Removes the volume mounted at the specified path from the current
+            container.
+
+         At most one of these can be specified:
+
+           --clear-env-vars
+              Remove all environment variables.
+
+           --env-vars-file=FILE_PATH
+              Path to a local YAML file with definitions for all environment
+              variables. All existing environment variables will be removed
+              before the new environment variables are added. Example YAML
+              content:
+
+                  KEY_1: "value1"
+                  KEY_2: "value 2"
+
+           --set-env-vars=[KEY=VALUE,...]
+              List of key-value pairs to set as environment variables. All
+              existing environment variables will be removed first.
+
+           Only --update-env-vars and --remove-env-vars can be used together.
+           If both are specified, --remove-env-vars will be applied first.
+
+             --remove-env-vars=[KEY,...]
+                List of environment variables to be removed.
+
+             --update-env-vars=[KEY=VALUE,...]
+                List of key-value pairs to set as environment variables.
+
+         Specify secrets to mount or provide as environment variables. Keys
+         starting with a forward slash '/' are mount paths. All other keys
+         correspond to environment variables. Values should be in the form
+         SECRET_NAME:SECRET_VERSION. For example:
+         '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1'
+         will mount a volume at '/secrets/api' containing a file 'key' with the
+         latest version of secret 'mysecret'. An environment variable named ENV
+         will also be created whose value is version 1 of secret 'othersecret'.
+
+         At most one of these can be specified:
+
+           --clear-secrets
+              Remove all secrets.
+
+           --set-secrets=[KEY=VALUE,...]
+              List of key-value pairs to set as secrets. All existing secrets
+              will be removed first.
+
+           Only --update-secrets and --remove-secrets can be used together. If
+           both are specified, --remove-secrets will be applied first.
+
+             --remove-secrets=[KEY,...]
+                List of secrets to be removed.
+
+             --update-secrets=[KEY=VALUE,...]
+                List of key-value pairs to set as secrets.
 
      At most one of these can be specified:
 
@@ -254,32 +327,6 @@ FLAGS
        --clear-binary-authorization
           Remove any previously set Binary Authorization policy.
 
-     At most one of these can be specified:
-
-       --clear-env-vars
-          Remove all environment variables.
-
-       --env-vars-file=FILE_PATH
-          Path to a local YAML file with definitions for all environment
-          variables. All existing environment variables will be removed before
-          the new environment variables are added. Example YAML content:
-
-              KEY_1: "value1"
-              KEY_2: "value 2"
-
-       --set-env-vars=[KEY=VALUE,...]
-          List of key-value pairs to set as environment variables. All existing
-          environment variables will be removed first.
-
-       Only --update-env-vars and --remove-env-vars can be used together. If
-       both are specified, --remove-env-vars will be applied first.
-
-         --remove-env-vars=[KEY,...]
-            List of environment variables to be removed.
-
-         --update-env-vars=[KEY=VALUE,...]
-            List of key-value pairs to set as environment variables.
-
      At most one of these can be specified:
 
        --clear-labels
@@ -342,33 +389,6 @@ FLAGS
               Applies the given Compute Engine tags (comma separated) to the
               Cloud Run job. To clear existing tags, use --clear-network-tags.
 
-     Specify secrets to mount or provide as environment variables. Keys
-     starting with a forward slash '/' are mount paths. All other keys
-     correspond to environment variables. Values should be in the form
-     SECRET_NAME:SECRET_VERSION. For example:
-     '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1' will
-     mount a volume at '/secrets/api' containing a file 'key' with the latest
-     version of secret 'mysecret'. An environment variable named ENV will also
-     be created whose value is version 1 of secret 'othersecret'.
-
-     At most one of these can be specified:
-
-       --clear-secrets
-          Remove all secrets.
-
-       --set-secrets=[KEY=VALUE,...]
-          List of key-value pairs to set as secrets. All existing secrets will
-          be removed first.
-
-       Only --update-secrets and --remove-secrets can be used together. If both
-       are specified, --remove-secrets will be applied first.
-
-         --remove-secrets=[KEY,...]
-            List of secrets to be removed.
-
-         --update-secrets=[KEY=VALUE,...]
-            List of key-value pairs to set as secrets.
-
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/run/services/update b/gcloud/run/services/update
index 605adb71c..5d961be4a 100644
--- a/gcloud/run/services/update
+++ b/gcloud/run/services/update
@@ -7,8 +7,9 @@ SYNOPSIS
         [--breakglass=JUSTIFICATION] [--clear-vpc-connector]
         [--concurrency=CONCURRENCY] [--container=CONTAINER] [--[no-]cpu-boost]
         [--[no-]cpu-throttling] [--execution-environment=EXECUTION_ENVIRONMENT]
-        [--gpu-type=GPU_TYPE] [--ingress=INGRESS; default="all"]
-        [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES] [--min=MIN]
+        [--gpu-type=GPU_TYPE] [--[no-]gpu-zonal-redundancy]
+        [--ingress=INGRESS; default="all"] [--[no-]invoker-iam-check]
+        [--max-instances=MAX_INSTANCES] [--min=MIN]
         [--min-instances=MIN_INSTANCES] [--region=REGION]
         [--remove-containers=[CONTAINER,...]]
         [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT]
@@ -135,6 +136,10 @@ FLAGS
      --gpu-type=GPU_TYPE
         The GPU type to use.
 
+     --[no-]gpu-zonal-redundancy
+        Set GPU zonal redundancy. Use --gpu-zonal-redundancy to enable and
+        --no-gpu-zonal-redundancy to disable.
+
      --ingress=INGRESS; default="all"
         Set the ingress traffic sources allowed to call the service. For Cloud
         Run the --[no-]allow-unauthenticated flag separately controls the
diff --git a/gcloud/sql/instances/create b/gcloud/sql/instances/create
index 001bc38d5..bdf0827b6 100644
--- a/gcloud/sql/instances/create
+++ b/gcloud/sql/instances/create
@@ -245,9 +245,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies
diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch
index bdaf2be40..5591f7bb0 100644
--- a/gcloud/sql/instances/patch
+++ b/gcloud/sql/instances/patch
@@ -202,9 +202,10 @@ FLAGS
         --no-enable-dataplex-integration to disable.
 
      --[no-]enable-google-ml-integration
-        Enable Vertex AI integration for Google Cloud SQL. Currently, only
-        PostgreSQL is supported. Use --enable-google-ml-integration to enable
-        and --no-enable-google-ml-integration to disable.
+        Enable Vertex AI integration for Google Cloud SQL. You can integrate
+        Vertex AI with Cloud SQL for MySQL and Cloud SQL for PostgreSQL
+        instances only. Use --enable-google-ml-integration to enable and
+        --no-enable-google-ml-integration to disable.
 
      --[no-]enable-google-private-path
         Enable a private path for Google Cloud services. This flag specifies