gcloud: Wed Oct 9 09:55:07 UTC 2024

gcloud/alpha/container/clusters/create-auto

@@ -14,9 +14,10 @@ SYNOPSIS
         [--containerd-config-from-file=PATH_TO_FILE]
         [--create-subnetwork=[KEY=VALUE,...]]
         [--database-encryption-key=DATABASE_ENCRYPTION_KEY]
+        [--enable-authorized-networks-on-private-endpoint]
         [--enable-backup-restore] [--enable-cilium-clusterwide-network-policy]
-        [--enable-fleet] [--enable-google-cloud-access]
-        [--enable-kubernetes-unstable-apis=API,[API,...]]
+        [--enable-dns-access] [--enable-fleet] [--enable-google-cloud-access]
+        [--enable-ip-access] [--enable-kubernetes-unstable-apis=API,[API,...]]
         [--enable-master-global-access] [--enable-ray-cluster-logging]
         [--enable-ray-cluster-monitoring] [--enable-ray-operator]
         [--enable-secret-manager] [--fleet-project=PROJECT_ID_OR_NUMBER]
@@ -220,6 +221,10 @@ FLAGS
         For more information, see
         https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets.
 
+     --enable-authorized-networks-on-private-endpoint
+        Enable enforcement of --master-authorized-networks CIDR ranges for
+        traffic reaching cluster's control plane via private IP.
+
      --enable-backup-restore
         Enable the Backup for GKE add-on. This add-on is disabled by default.
         To learn more, see the Backup for GKE overview:
@@ -229,6 +234,11 @@ FLAGS
         Enable Cilium Clusterwide Network Policies on the cluster. Disabled by
         default.
 
+     --enable-dns-access
+        Enable access to the cluster's control plane over DNS-based endpoint.
+
+        DNS-based control plane access is recommended.
+
      --enable-fleet
         Set cluster project as the fleet host project. This will register the
         cluster to the same project. To register the cluster to a fleet in a
@@ -240,6 +250,10 @@ FLAGS
         Google Cloud can reach the public control plane endpoint of your
         cluster.
 
+     --enable-ip-access
+        Enable access to the cluster's control plane over private IP and public
+        IP if --enable-private-endpoint is not enabled.
+
      --enable-kubernetes-unstable-apis=API,[API,...]
         Enable Kubernetes beta API features on this cluster. Beta APIs are not
         expected to be production ready and should be avoided in