diff --git a/gcloud/_version b/gcloud/_version
index 473ef8c47..68f43aa85 100644
--- a/gcloud/_version
+++ b/gcloud/_version
@@ -1,8 +1,8 @@
-Google Cloud SDK 507.0.0
-alpha 2025.01.17
-beta 2025.01.17
+Google Cloud SDK 508.0.0
+alpha 2025.01.24
+beta 2025.01.24
 bq 2.1.12
 bundled-python3-unix 3.11.9
-core 2025.01.17
+core 2025.01.24
 gcloud-crc32c 1.0.0
 gsutil 5.33
diff --git a/gcloud/alloydb/users/set-roles b/gcloud/alloydb/users/set-roles
index ebb1a7a65..fd9911ad7 100644
--- a/gcloud/alloydb/users/set-roles
+++ b/gcloud/alloydb/users/set-roles
@@ -4,7 +4,8 @@ NAME
 
 SYNOPSIS
     gcloud alloydb users set-roles USERNAME --cluster=CLUSTER
-        --db-roles=[ROLE,...] --region=REGION [GCLOUD_WIDE_FLAG ...]
+        --db-roles=[ROLE,...] --region=REGION
+        [--keep-extra-roles=KEEP_EXTRA_ROLES] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Update an AlloyDB user's database roles within a given cluster and region.
@@ -31,6 +32,10 @@ REQUIRED FLAGS
         Regional location (e.g. asia-east1, us-east1). See the full list of
         regions at https://cloud.google.com/sql/docs/instance-locations.
 
+OPTIONAL FLAGS
+     --keep-extra-roles=KEEP_EXTRA_ROLES
+        If the user already exists and has extra roles, keep them.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/alpha/alloydb/users/set-roles b/gcloud/alpha/alloydb/users/set-roles
index 48af79eb6..2e8aa209a 100644
--- a/gcloud/alpha/alloydb/users/set-roles
+++ b/gcloud/alpha/alloydb/users/set-roles
@@ -4,7 +4,8 @@ NAME
 
 SYNOPSIS
     gcloud alpha alloydb users set-roles USERNAME --cluster=CLUSTER
-        --db-roles=[ROLE,...] --region=REGION [GCLOUD_WIDE_FLAG ...]
+        --db-roles=[ROLE,...] --region=REGION
+        [--keep-extra-roles=KEEP_EXTRA_ROLES] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Update an AlloyDB user's database roles within a given cluster and
@@ -32,6 +33,10 @@ REQUIRED FLAGS
         Regional location (e.g. asia-east1, us-east1). See the full list of
         regions at https://cloud.google.com/sql/docs/instance-locations.
 
+OPTIONAL FLAGS
+     --keep-extra-roles=KEEP_EXTRA_ROLES
+        If the user already exists and has extra roles, keep them.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/alpha/compute/security-policies/rules/create b/gcloud/alpha/compute/security-policies/rules/create
index 185f310aa..a071390ff 100644
--- a/gcloud/alpha/compute/security-policies/rules/create
+++ b/gcloud/alpha/compute/security-policies/rules/create
@@ -20,8 +20,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-action-rpc-status-code=EXCEED_ACTION_RPC_STATUS_CODE]
@@ -189,11 +190,14 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -214,6 +218,8 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/alpha/compute/security-policies/rules/update b/gcloud/alpha/compute/security-policies/rules/update
index 4ff7851a8..78c6049af 100644
--- a/gcloud/alpha/compute/security-policies/rules/update
+++ b/gcloud/alpha/compute/security-policies/rules/update
@@ -10,8 +10,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-action-rpc-status-code=EXCEED_ACTION_RPC_STATUS_CODE]
@@ -139,11 +140,14 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -164,6 +168,8 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/alpha/container/backup-restore/help b/gcloud/alpha/container/backup-restore/help
index c9f3757c4..6796d818b 100644
--- a/gcloud/alpha/container/backup-restore/help
+++ b/gcloud/alpha/container/backup-restore/help
@@ -24,6 +24,9 @@ GROUPS
      locations
         (ALPHA) Backup for GKE Locations.
 
+     operations
+        (ALPHA) Backup for GKE Operations.
+
      restore-plans
         (ALPHA) Backup for GKE Restore Plans.
 
diff --git a/gcloud/alpha/container/backup-restore/operations/help b/gcloud/alpha/container/backup-restore/operations/help
new file mode 100644
index 000000000..77d7e8a54
--- /dev/null
+++ b/gcloud/alpha/container/backup-restore/operations/help
@@ -0,0 +1,30 @@
+NAME
+    gcloud alpha container backup-restore operations - backup for GKE
+        Operations
+
+SYNOPSIS
+    gcloud alpha container backup-restore operations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Backup for GKE Operations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (ALPHA) List operations.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta container backup-restore operations
+
diff --git a/gcloud/alpha/container/backup-restore/operations/list b/gcloud/alpha/container/backup-restore/operations/list
new file mode 100644
index 000000000..e8de7fb7c
--- /dev/null
+++ b/gcloud/alpha/container/backup-restore/operations/list
@@ -0,0 +1,96 @@
+NAME
+    gcloud alpha container backup-restore operations list - list operations
+
+SYNOPSIS
+    gcloud alpha container backup-restore operations list [--location=LOCATION]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List Backup for GKE operations.
+
+EXAMPLES
+    To list all operations in project my-project in location us-central1, run:
+
+        $ gcloud alpha container backup-restore operations list \
+            --project=my-project --location=us-central1
+
+    To list all operations in project my-project across all locations, run:
+
+        $ gcloud alpha container backup-restore operations list \
+            --project=my-project
+
+FLAGS
+     Location resource - Name of the location from which to list operations
+     (provided via options or through properties): --project=<project>
+     --location=<location>. This represents a Cloud resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ set the property gkebackup/location with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line;
+          ▸ set the property gkebackup/location.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the gkebackup/v1 API. The full documentation for this API
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta container backup-restore operations list
+
diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create
index fed334968..5048e8082 100644
--- a/gcloud/alpha/container/clusters/create
+++ b/gcloud/alpha/container/clusters/create
@@ -618,10 +618,20 @@ FLAGS
         IP if --enable-private-endpoint is not enabled.
 
      --enable-ip-alias
-        Enable use of alias IPs
-        (https://cloud.google.com/compute/docs/alias-ip/) for Pod IPs. This
-        will require at least two secondary ranges in the subnetwork, one for
-        the pod IPs and another to reserve space for the services range.
+        --enable-ip-alias creates a VPC-native cluster. If you set this option,
+        you can optionally specify the IP address ranges to use for Pods and
+        Services. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/alias-ips.
+
+        --no-enable-ip-alias creates a routes-based cluster. This type of
+        cluster routes traffic between Pods using Google Cloud Routes. This
+        option is not recommended; use the default VPC-native cluster type
+        instead. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
+
+        You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
+        you omit both --enable-ip-alias and --no-enable-ip-alias, the default
+        is a VPC-native cluster.
 
      --enable-kubernetes-alpha
         Enable Kubernetes alpha features on this cluster. Selecting this option
diff --git a/gcloud/alpha/dns/policies/create b/gcloud/alpha/dns/policies/create
index 2c72bb1cb..c4bb6ff33 100644
--- a/gcloud/alpha/dns/policies/create
+++ b/gcloud/alpha/dns/policies/create
@@ -5,7 +5,8 @@ SYNOPSIS
     gcloud alpha dns policies create POLICY --description=DESCRIPTION
         --networks=[NETWORKS,...]
         [--alternative-name-servers=[NAME_SERVERS,...]]
-        [--enable-inbound-forwarding] [--enable-logging]
+        [--enable-dns64-all-queries] [--enable-inbound-forwarding]
+        [--enable-logging]
         [--private-alternative-name-servers=[NAME_SERVERS,...]]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -25,7 +26,8 @@ EXAMPLES
             --networks=network1,network2 \
             --alternative-name-servers=192.168.1.1,192.168.1.2 \
             --private-alternative-name-servers=100.64.0.1 \
-            --enable-inbound-forwarding --enable-logging
+            --enable-inbound-forwarding --enable-logging \
+            --enable-dns64-all-queries
 
 POSITIONAL ARGUMENTS
      Policy resource - The policy to create. This represents a Cloud resource.
@@ -58,6 +60,10 @@ OPTIONAL FLAGS
         will forward to the target through the Internet.RFC1918 addresses will
         forward through the VPC.
 
+     --enable-dns64-all-queries
+        Specifies whether to allow networks bound to this policy to use DNS64
+        for IPv6-only VM instances.
+
      --enable-inbound-forwarding
         Specifies whether to allow networks bound to this policy to receive DNS
         queries sent by VMs or applications over VPN connections. Defaults to
diff --git a/gcloud/alpha/dns/policies/update b/gcloud/alpha/dns/policies/update
index 39ceda11b..120ad910b 100644
--- a/gcloud/alpha/dns/policies/update
+++ b/gcloud/alpha/dns/policies/update
@@ -4,8 +4,9 @@ NAME
 SYNOPSIS
     gcloud alpha dns policies update POLICY
         [--alternative-name-servers=[NAME_SERVERS,...]]
-        [--description=DESCRIPTION] [--enable-inbound-forwarding]
-        [--enable-logging] [--networks=[NETWORKS,...]]
+        [--description=DESCRIPTION] [--enable-dns64-all-queries]
+        [--enable-inbound-forwarding] [--enable-logging]
+        [--networks=[NETWORKS,...]]
         [--private-alternative-name-servers=[NAME_SERVERS,...]]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -45,6 +46,10 @@ FLAGS
      --description=DESCRIPTION
         A description of the policy.
 
+     --enable-dns64-all-queries
+        Specifies whether to allow networks bound to this policy to use DNS64
+        for IPv6-only VM instances.
+
      --enable-inbound-forwarding
         Specifies whether to allow networks bound to this policy to receive DNS
         queries sent by VMs or applications over VPN connections. Defaults to
diff --git a/gcloud/alpha/filestore/instances/create b/gcloud/alpha/filestore/instances/create
index 7ab51d0e9..7fc68dc5a 100644
--- a/gcloud/alpha/filestore/instances/create
+++ b/gcloud/alpha/filestore/instances/create
@@ -206,8 +206,7 @@ REQUIRED FLAGS
             network.
          connect-mode
             Network connection mode used by instances. CONNECT_MODE must be one
-            of: DIRECT_PEERING, PRIVATE_SERVICE_ACCESS or
-            PRIVATE_SERVICE_CONNECT.
+            of: DIRECT_PEERING or PRIVATE_SERVICE_ACCESS.
 
 OPTIONAL FLAGS
      --async
diff --git a/gcloud/alpha/kms/autokey-config/describe b/gcloud/alpha/kms/autokey-config/describe
index e4d437003..69d8546f8 100644
--- a/gcloud/alpha/kms/autokey-config/describe
+++ b/gcloud/alpha/kms/autokey-config/describe
@@ -32,5 +32,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms autokey-config describe
 
diff --git a/gcloud/alpha/kms/autokey-config/help b/gcloud/alpha/kms/autokey-config/help
index b395cec1b..3d7d1ab7f 100644
--- a/gcloud/alpha/kms/autokey-config/help
+++ b/gcloud/alpha/kms/autokey-config/help
@@ -30,5 +30,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms autokey-config
 
diff --git a/gcloud/alpha/kms/autokey-config/show-effective-config b/gcloud/alpha/kms/autokey-config/show-effective-config
index e2f3e8990..aa42dc7bc 100644
--- a/gcloud/alpha/kms/autokey-config/show-effective-config
+++ b/gcloud/alpha/kms/autokey-config/show-effective-config
@@ -31,5 +31,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms autokey-config show-effective-config
 
diff --git a/gcloud/alpha/kms/autokey-config/update b/gcloud/alpha/kms/autokey-config/update
index c7c6cc018..342001197 100644
--- a/gcloud/alpha/kms/autokey-config/update
+++ b/gcloud/alpha/kms/autokey-config/update
@@ -31,5 +31,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms autokey-config update
 
diff --git a/gcloud/alpha/kms/key-handles/create b/gcloud/alpha/kms/key-handles/create
index 7aedfab2d..6eb021576 100644
--- a/gcloud/alpha/kms/key-handles/create
+++ b/gcloud/alpha/kms/key-handles/create
@@ -43,7 +43,7 @@ REQUIRED FLAGS
 
      --resource-type=RESOURCE_TYPE
         The resource type selector for key handles of the form
-        {SERVICE}.googleapis.com/{TYPE}.
+        {SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.
 
      Exactly one of these must be specified:
 
@@ -65,5 +65,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms key-handles create
 
diff --git a/gcloud/alpha/kms/key-handles/describe b/gcloud/alpha/kms/key-handles/describe
index 67e1d421a..610da8bb2 100644
--- a/gcloud/alpha/kms/key-handles/describe
+++ b/gcloud/alpha/kms/key-handles/describe
@@ -63,5 +63,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms key-handles describe
 
diff --git a/gcloud/alpha/kms/key-handles/help b/gcloud/alpha/kms/key-handles/help
index e9a16d13b..9d801a046 100644
--- a/gcloud/alpha/kms/key-handles/help
+++ b/gcloud/alpha/kms/key-handles/help
@@ -29,5 +29,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms key-handles
 
diff --git a/gcloud/alpha/kms/key-handles/list b/gcloud/alpha/kms/key-handles/list
index 3094febff..87d4c4e08 100644
--- a/gcloud/alpha/kms/key-handles/list
+++ b/gcloud/alpha/kms/key-handles/list
@@ -44,7 +44,7 @@ REQUIRED FLAGS
 
      --resource-type=RESOURCE_TYPE
         The resource type selector for key handles of the form
-        {SERVICE}.googleapis.com/{TYPE}.
+        {SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.
 
 LIST COMMAND FLAGS
      --filter=EXPRESSION
@@ -90,5 +90,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta kms key-handles list
 
diff --git a/gcloud/alpha/network-services/help b/gcloud/alpha/network-services/help
index 5730b5636..da423b441 100644
--- a/gcloud/alpha/network-services/help
+++ b/gcloud/alpha/network-services/help
@@ -54,6 +54,12 @@ GROUPS
      multicast-group-producer-activations
         (ALPHA) Manage Network Services MulticastGroupProducerActivations.
 
+     multicast-group-range-activations
+        (ALPHA) Manage Network Services MulticastGroupRangeActivations.
+
+     multicast-group-ranges
+        (ALPHA) Manage Network Services MulticastGroupRanges.
+
      multicast-groups
         (ALPHA) Manage Network Services MulticastGroups.
 
diff --git a/gcloud/alpha/network-services/multicast-consumer-associations/create b/gcloud/alpha/network-services/multicast-consumer-associations/create
index 4cddcccd1..65ab704e6 100644
--- a/gcloud/alpha/network-services/multicast-consumer-associations/create
+++ b/gcloud/alpha/network-services/multicast-consumer-associations/create
@@ -95,5 +95,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-consumer-associations create
 
diff --git a/gcloud/alpha/network-services/multicast-consumer-associations/delete b/gcloud/alpha/network-services/multicast-consumer-associations/delete
index 1fcff690b..83b346c34 100644
--- a/gcloud/alpha/network-services/multicast-consumer-associations/delete
+++ b/gcloud/alpha/network-services/multicast-consumer-associations/delete
@@ -71,5 +71,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-consumer-associations delete
 
diff --git a/gcloud/alpha/network-services/multicast-consumer-associations/describe b/gcloud/alpha/network-services/multicast-consumer-associations/describe
index 70ee155b6..6142ab5e7 100644
--- a/gcloud/alpha/network-services/multicast-consumer-associations/describe
+++ b/gcloud/alpha/network-services/multicast-consumer-associations/describe
@@ -67,5 +67,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-consumer-associations \
+            describe
 
diff --git a/gcloud/alpha/network-services/multicast-consumer-associations/help b/gcloud/alpha/network-services/multicast-consumer-associations/help
index 2b76a2c9e..0b44de535 100644
--- a/gcloud/alpha/network-services/multicast-consumer-associations/help
+++ b/gcloud/alpha/network-services/multicast-consumer-associations/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-consumer-associations
 
diff --git a/gcloud/alpha/network-services/multicast-consumer-associations/list b/gcloud/alpha/network-services/multicast-consumer-associations/list
index c365d57c6..e8223d5d2 100644
--- a/gcloud/alpha/network-services/multicast-consumer-associations/list
+++ b/gcloud/alpha/network-services/multicast-consumer-associations/list
@@ -86,5 +86,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-consumer-associations list
 
diff --git a/gcloud/alpha/network-services/multicast-domain-activations/create b/gcloud/alpha/network-services/multicast-domain-activations/create
index 9d333d67b..f5407b8c4 100644
--- a/gcloud/alpha/network-services/multicast-domain-activations/create
+++ b/gcloud/alpha/network-services/multicast-domain-activations/create
@@ -7,6 +7,11 @@ SYNOPSIS
         (MULTICAST_DOMAIN_ACTIVATION : --location=LOCATION)
         --multicast-domain=MULTICAST_DOMAIN [--async]
         [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--aggr-egress-pps=AGGR_EGRESS_PPS
+          : --aggr-ingress-pps=AGGR_INGRESS_PPS
+          --avg-packet-size=AVG_PACKET_SIZE
+          --max-per-group-ingress-pps=MAX_PER_GROUP_INGRESS_PPS
+          --max-per-group-subscribers=MAX_PER_GROUP_SUBSCRIBERS]
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -75,6 +80,25 @@ OPTIONAL FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     --aggr-egress-pps=AGGR_EGRESS_PPS
+        Aggregated egress Packet-Per-Second for all multicast groups in the
+        domain in this zone.
+
+     --aggr-ingress-pps=AGGR_INGRESS_PPS
+        Aggregated ingress Packet-Per-Second for all multicast groups in the
+        domain in this zone.
+
+     --avg-packet-size=AVG_PACKET_SIZE
+        Average packet size (defaults to 512 bytes).
+
+     --max-per-group-ingress-pps=MAX_PER_GROUP_INGRESS_PPS
+        Maximum ingress Packet-Per-Second for a single multicast group in this
+        zone.
+
+     --max-per-group-subscribers=MAX_PER_GROUP_SUBSCRIBERS
+        Maximum number of subscribers for a single multicast group in this
+        zone.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
@@ -91,5 +115,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-activations create
 
diff --git a/gcloud/alpha/network-services/multicast-domain-activations/delete b/gcloud/alpha/network-services/multicast-domain-activations/delete
index 197d8700a..c7d5cc790 100644
--- a/gcloud/alpha/network-services/multicast-domain-activations/delete
+++ b/gcloud/alpha/network-services/multicast-domain-activations/delete
@@ -71,5 +71,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-activations delete
 
diff --git a/gcloud/alpha/network-services/multicast-domain-activations/describe b/gcloud/alpha/network-services/multicast-domain-activations/describe
index 5ab283d31..12be4d9fa 100644
--- a/gcloud/alpha/network-services/multicast-domain-activations/describe
+++ b/gcloud/alpha/network-services/multicast-domain-activations/describe
@@ -67,5 +67,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-activations describe
 
diff --git a/gcloud/alpha/network-services/multicast-domain-activations/help b/gcloud/alpha/network-services/multicast-domain-activations/help
index f9036d1a4..bbb3422a1 100644
--- a/gcloud/alpha/network-services/multicast-domain-activations/help
+++ b/gcloud/alpha/network-services/multicast-domain-activations/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-activations
 
diff --git a/gcloud/alpha/network-services/multicast-domain-activations/list b/gcloud/alpha/network-services/multicast-domain-activations/list
index 99cd63072..03ce26fc6 100644
--- a/gcloud/alpha/network-services/multicast-domain-activations/list
+++ b/gcloud/alpha/network-services/multicast-domain-activations/list
@@ -86,5 +86,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-activations list
 
diff --git a/gcloud/alpha/network-services/multicast-domain-groups/create b/gcloud/alpha/network-services/multicast-domain-groups/create
index 33a31f087..6601e2a2f 100644
--- a/gcloud/alpha/network-services/multicast-domain-groups/create
+++ b/gcloud/alpha/network-services/multicast-domain-groups/create
@@ -83,5 +83,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-groups create
 
diff --git a/gcloud/alpha/network-services/multicast-domain-groups/delete b/gcloud/alpha/network-services/multicast-domain-groups/delete
index 8bb9ad725..e41aba0a5 100644
--- a/gcloud/alpha/network-services/multicast-domain-groups/delete
+++ b/gcloud/alpha/network-services/multicast-domain-groups/delete
@@ -70,5 +70,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-groups delete
 
diff --git a/gcloud/alpha/network-services/multicast-domain-groups/describe b/gcloud/alpha/network-services/multicast-domain-groups/describe
index 57ee3b321..eaef97e65 100644
--- a/gcloud/alpha/network-services/multicast-domain-groups/describe
+++ b/gcloud/alpha/network-services/multicast-domain-groups/describe
@@ -64,5 +64,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-groups describe
 
diff --git a/gcloud/alpha/network-services/multicast-domain-groups/help b/gcloud/alpha/network-services/multicast-domain-groups/help
index 838d2c007..9c50cef95 100644
--- a/gcloud/alpha/network-services/multicast-domain-groups/help
+++ b/gcloud/alpha/network-services/multicast-domain-groups/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-groups
 
diff --git a/gcloud/alpha/network-services/multicast-domain-groups/list b/gcloud/alpha/network-services/multicast-domain-groups/list
index 27390d3dc..3fc70668c 100644
--- a/gcloud/alpha/network-services/multicast-domain-groups/list
+++ b/gcloud/alpha/network-services/multicast-domain-groups/list
@@ -85,5 +85,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domain-groups list
 
diff --git a/gcloud/alpha/network-services/multicast-domains/create b/gcloud/alpha/network-services/multicast-domains/create
index 71b52b1f6..ffd49cda6 100644
--- a/gcloud/alpha/network-services/multicast-domains/create
+++ b/gcloud/alpha/network-services/multicast-domains/create
@@ -114,5 +114,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domains create
 
diff --git a/gcloud/alpha/network-services/multicast-domains/delete b/gcloud/alpha/network-services/multicast-domains/delete
index ffe6e0a98..2518c2908 100644
--- a/gcloud/alpha/network-services/multicast-domains/delete
+++ b/gcloud/alpha/network-services/multicast-domains/delete
@@ -70,5 +70,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domains delete
 
diff --git a/gcloud/alpha/network-services/multicast-domains/describe b/gcloud/alpha/network-services/multicast-domains/describe
index bd2de9acd..4b267e43d 100644
--- a/gcloud/alpha/network-services/multicast-domains/describe
+++ b/gcloud/alpha/network-services/multicast-domains/describe
@@ -64,5 +64,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domains describe
 
diff --git a/gcloud/alpha/network-services/multicast-domains/help b/gcloud/alpha/network-services/multicast-domains/help
index 4cc77c037..8b83e8ca5 100644
--- a/gcloud/alpha/network-services/multicast-domains/help
+++ b/gcloud/alpha/network-services/multicast-domains/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domains
 
diff --git a/gcloud/alpha/network-services/multicast-domains/list b/gcloud/alpha/network-services/multicast-domains/list
index 35a1236de..bc834042b 100644
--- a/gcloud/alpha/network-services/multicast-domains/list
+++ b/gcloud/alpha/network-services/multicast-domains/list
@@ -84,5 +84,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-domains list
 
diff --git a/gcloud/alpha/network-services/multicast-group-consumer-activations/create b/gcloud/alpha/network-services/multicast-group-consumer-activations/create
index 7eeed82fa..f4de2fcaf 100644
--- a/gcloud/alpha/network-services/multicast-group-consumer-activations/create
+++ b/gcloud/alpha/network-services/multicast-group-consumer-activations/create
@@ -6,8 +6,10 @@ SYNOPSIS
     gcloud alpha network-services multicast-group-consumer-activations create
         (MULTICAST_GROUP_CONSUMER_ACTIVATION : --location=LOCATION)
         --multicast-consumer-association=MULTICAST_CONSUMER_ASSOCIATION
-        --multicast-group=MULTICAST_GROUP [--async] [--description=DESCRIPTION]
-        [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
+        [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--multicast-group=MULTICAST_GROUP]
+        [--multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION]
+        [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Create a multicast group consumer activation in the specified
@@ -16,13 +18,12 @@ DESCRIPTION
 EXAMPLES
     Create a multicast group consumer activation with the name
     'my-multicast-group-consumer-activation', multicast-consumer-association
-    'path-to-mca', multicast-group 'path-to-mg', and location 'zone'.
+    'path-to-mca', multicast-group 'path-to-mg' and location 'zone'.
 
-        $ gcloud alpha network-services \
-            multicast-group-consumer-activations create \
-            my-multicast-group-consumer-activation \
-            --multicast-consumer-association=path-to-mca \
-            --multicast-group=path-to-mg --location=zone
+    $ gcloud alpha network-services \        multicast-group-consumer-activations create \
+        my-multicast-group-consumer-activation \
+        --multicast-consumer-association=path-to-mca \
+        --multicast-group=path-to-mg --location=zone
 
 POSITIONAL ARGUMENTS
      Multicast group consumer activation resource - Name of the multicast group
@@ -61,9 +62,6 @@ REQUIRED FLAGS
      --multicast-consumer-association=MULTICAST_CONSUMER_ASSOCIATION
         The multicast consumer association to be used.
 
-     --multicast-group=MULTICAST_GROUP
-        The multicast group to be used.
-
 OPTIONAL FLAGS
      --async
         Return immediately, without waiting for the operation in progress to
@@ -80,6 +78,12 @@ OPTIONAL FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     --multicast-group=MULTICAST_GROUP
+        The multicast group to be used.
+
+     --multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION
+        The multicast group range activation to be used.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
@@ -96,5 +100,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations create
 
diff --git a/gcloud/alpha/network-services/multicast-group-consumer-activations/delete b/gcloud/alpha/network-services/multicast-group-consumer-activations/delete
index 9b5ce5c16..ebc3598e5 100644
--- a/gcloud/alpha/network-services/multicast-group-consumer-activations/delete
+++ b/gcloud/alpha/network-services/multicast-group-consumer-activations/delete
@@ -73,5 +73,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations delete
 
diff --git a/gcloud/alpha/network-services/multicast-group-consumer-activations/describe b/gcloud/alpha/network-services/multicast-group-consumer-activations/describe
index cceb795f0..3d945d762 100644
--- a/gcloud/alpha/network-services/multicast-group-consumer-activations/describe
+++ b/gcloud/alpha/network-services/multicast-group-consumer-activations/describe
@@ -68,5 +68,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations describe
 
diff --git a/gcloud/alpha/network-services/multicast-group-consumer-activations/help b/gcloud/alpha/network-services/multicast-group-consumer-activations/help
index a4c6c3b82..bfd615327 100644
--- a/gcloud/alpha/network-services/multicast-group-consumer-activations/help
+++ b/gcloud/alpha/network-services/multicast-group-consumer-activations/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-consumer-activations
 
diff --git a/gcloud/alpha/network-services/multicast-group-consumer-activations/list b/gcloud/alpha/network-services/multicast-group-consumer-activations/list
index 0827fbd29..5097ce299 100644
--- a/gcloud/alpha/network-services/multicast-group-consumer-activations/list
+++ b/gcloud/alpha/network-services/multicast-group-consumer-activations/list
@@ -86,5 +86,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations list
 
diff --git a/gcloud/alpha/network-services/multicast-group-definitions/list b/gcloud/alpha/network-services/multicast-group-definitions/list
index fa5b3fd77..df801ab3f 100644
--- a/gcloud/alpha/network-services/multicast-group-definitions/list
+++ b/gcloud/alpha/network-services/multicast-group-definitions/list
@@ -19,9 +19,9 @@ EXAMPLES
             --location=global
 
 REQUIRED FLAGS
-     Location resource - The location of the multicast domains to display. This
-     represents a Cloud resource. (NOTE) Some attributes are not given
-     arguments in this group but can be set in other ways.
+     Location resource - The location of the multicast group definitions to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
 
      To set the project attribute:
       ◆ provide the argument --location on the command line with a fully
diff --git a/gcloud/alpha/network-services/multicast-group-producer-activations/create b/gcloud/alpha/network-services/multicast-group-producer-activations/create
index 34810d7e7..571938f27 100644
--- a/gcloud/alpha/network-services/multicast-group-producer-activations/create
+++ b/gcloud/alpha/network-services/multicast-group-producer-activations/create
@@ -5,9 +5,10 @@ NAME
 SYNOPSIS
     gcloud alpha network-services multicast-group-producer-activations create
         (MULTICAST_GROUP_PRODUCER_ACTIVATION : --location=LOCATION)
-        --multicast-group=MULTICAST_GROUP
         --multicast-producer-association=MULTICAST_PRODUCER_ASSOCIATION
         [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--multicast-group=MULTICAST_GROUP]
+        [--multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION]
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -17,13 +18,12 @@ DESCRIPTION
 EXAMPLES
     Create a multicast group producer activation with the name
     'my-multicast-group-producer-activation', multicast-producer-association
-    'path-to-mpa', multicast-group 'path-to-mg', and location 'zone'.
+    'path-to-mpa', multicast-group 'path-to-mg' and location 'zone'.
 
-        $ gcloud alpha network-services \
-            multicast-group-producer-activations create \
-            my-multicast-group-producer-activation \
-            --multicast-producer-association=path-to-mpa \
-            --multicast-group=path-to-mg --location=zone
+    $ gcloud alpha network-services \        multicast-group-producer-activations create \
+        my-multicast-group-producer-activation \
+        --multicast-producer-association=path-to-mpa \
+        --multicast-group=path-to-mg --location=zone
 
 POSITIONAL ARGUMENTS
      Multicast group producer activation resource - Name of the multicast group
@@ -59,9 +59,6 @@ POSITIONAL ARGUMENTS
           ▸ provide the argument --location on the command line.
 
 REQUIRED FLAGS
-     --multicast-group=MULTICAST_GROUP
-        The multicast group to be used.
-
      --multicast-producer-association=MULTICAST_PRODUCER_ASSOCIATION
         The multicast producer association to be used.
 
@@ -81,6 +78,12 @@ OPTIONAL FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     --multicast-group=MULTICAST_GROUP
+        The multicast group to be used.
+
+     --multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION
+        The multicast group range activation to be used.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
@@ -97,5 +100,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations create
 
diff --git a/gcloud/alpha/network-services/multicast-group-producer-activations/delete b/gcloud/alpha/network-services/multicast-group-producer-activations/delete
index 909f5ee8c..fb11c8b0d 100644
--- a/gcloud/alpha/network-services/multicast-group-producer-activations/delete
+++ b/gcloud/alpha/network-services/multicast-group-producer-activations/delete
@@ -73,5 +73,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations delete
 
diff --git a/gcloud/alpha/network-services/multicast-group-producer-activations/describe b/gcloud/alpha/network-services/multicast-group-producer-activations/describe
index 6e138294b..2e9ee2533 100644
--- a/gcloud/alpha/network-services/multicast-group-producer-activations/describe
+++ b/gcloud/alpha/network-services/multicast-group-producer-activations/describe
@@ -68,5 +68,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations describe
 
diff --git a/gcloud/alpha/network-services/multicast-group-producer-activations/help b/gcloud/alpha/network-services/multicast-group-producer-activations/help
index 805ba0c53..baee9f65b 100644
--- a/gcloud/alpha/network-services/multicast-group-producer-activations/help
+++ b/gcloud/alpha/network-services/multicast-group-producer-activations/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-producer-activations
 
diff --git a/gcloud/alpha/network-services/multicast-group-producer-activations/list b/gcloud/alpha/network-services/multicast-group-producer-activations/list
index c5023edc4..2cf190045 100644
--- a/gcloud/alpha/network-services/multicast-group-producer-activations/list
+++ b/gcloud/alpha/network-services/multicast-group-producer-activations/list
@@ -86,5 +86,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations list
 
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/create b/gcloud/alpha/network-services/multicast-group-range-activations/create
new file mode 100644
index 000000000..eee5973b9
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/create
@@ -0,0 +1,103 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations create -
+        create a multicast group range activation
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations create
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION)
+        --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        --multicast-group-range=MULTICAST_GROUP_RANGE [--async]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    Create a multicast group range activation with the name
+    'my-mg-range-activation', multicast-group-range 'path-to-mgr',
+    multicast-domain-activation 'path-to-mda', and location 'zone'.
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            create my-mg-range-activation \
+            --multicast-group-range=path-to-mgr \
+            --multicast-domain-activation=path-to-mda --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - Name of the multicast group
+     range activation to be created. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        The multicast domain activation to be used.
+
+     --multicast-group-range=MULTICAST_GROUP_RANGE
+        The multicast group range to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            create
+
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/delete b/gcloud/alpha/network-services/multicast-group-range-activations/delete
new file mode 100644
index 000000000..eb8bed0a2
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/delete
@@ -0,0 +1,78 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations delete -
+        delete a multicast group range activation
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations delete
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    To delete a multicast group range activation in the current project, run:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            delete my-mg-range-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - The multicast group range
+     activation to delete. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            delete
+
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/describe b/gcloud/alpha/network-services/multicast-group-range-activations/describe
new file mode 100644
index 000000000..485d697bb
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/describe
@@ -0,0 +1,74 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations describe -
+        describe a multicast group range activations
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations describe
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Show details of a multicast group range activation in the specified
+    location of the current project.
+
+EXAMPLES
+    To describe details of a multicast group range activation in the current
+    project and location, run:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            describe my-mg-range-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - The multicast group range
+     activation to display. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            describe
+
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/help b/gcloud/alpha/network-services/multicast-group-range-activations/help
new file mode 100644
index 000000000..c6bce3b14
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations - manage
+        Network Services MulticastGroupRangeActivations
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Network Services MulticastGroupRangeActivations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Create a multicast group range activation.
+
+     delete
+        (ALPHA) Delete a multicast group range activation.
+
+     describe
+        (ALPHA) Describe a multicast group range activations.
+
+     list
+        (ALPHA) List multicast group range activations.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations
+
diff --git a/gcloud/alpha/network-services/multicast-group-range-activations/list b/gcloud/alpha/network-services/multicast-group-range-activations/list
new file mode 100644
index 000000000..cc005b533
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-range-activations/list
@@ -0,0 +1,92 @@
+NAME
+    gcloud alpha network-services multicast-group-range-activations list - list
+        multicast group range activations
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-range-activations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List all multicast group range activations in the specified
+    location of the current project.
+
+EXAMPLES
+    To list multicast group range activations in the current project and
+    location, run:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast groups to display. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-range-activations list
+
diff --git a/gcloud/alpha/network-services/multicast-group-ranges/create b/gcloud/alpha/network-services/multicast-group-ranges/create
new file mode 100644
index 000000000..90bc3983b
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-ranges/create
@@ -0,0 +1,105 @@
+NAME
+    gcloud alpha network-services multicast-group-ranges create - create a
+        multicast group range
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-ranges create
+        (MULTICAST_GROUP_RANGE : --location=LOCATION)
+        --multicast-domain=MULTICAST_DOMAIN
+        --reserved-internal-range=RESERVED_INTERNAL_RANGE [--async]
+        [--consumer-accept-list=[CONSUMER_ACCEPT_LIST,...]]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a multicast group range in the specified location of the
+    current project.
+
+EXAMPLES
+    Create a multicast group range with the name 'my-multicast-group-range',
+    reserved-internal-range 'path-to-ir', multicast-domain 'path-to-md', and
+    location 'global'.
+
+        $ gcloud alpha network-services multicast-group-ranges create \
+            my-multicast-group-range --reserved-internal-range=path-to-ir \
+            --multicast-domain=path-to-md --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - Name of the multicast group range to be
+     created. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain=MULTICAST_DOMAIN
+        The multicast domain to be used.
+
+     --reserved-internal-range=RESERVED_INTERNAL_RANGE
+        The reserved internal range to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --consumer-accept-list=[CONSUMER_ACCEPT_LIST,...]
+        An optional list of consumer projects that can use this multicast group
+        range.
+
+     --description=DESCRIPTION
+        The description for the multicast group range.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-ranges create
+
diff --git a/gcloud/alpha/network-services/multicast-group-ranges/delete b/gcloud/alpha/network-services/multicast-group-ranges/delete
new file mode 100644
index 000000000..0e34d806f
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-ranges/delete
@@ -0,0 +1,76 @@
+NAME
+    gcloud alpha network-services multicast-group-ranges delete - delete a
+        multicast group range
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-ranges delete
+        (MULTICAST_GROUP_RANGE : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a multicast group range in the specified location of the
+    current project.
+
+EXAMPLES
+    To delete a multicast group range in the current project, run:
+
+        $ gcloud alpha network-services multicast-group-ranges delete \
+            my-multicast-group-range --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - The multicast group range to delete. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-ranges delete
+
diff --git a/gcloud/alpha/network-services/multicast-group-ranges/describe b/gcloud/alpha/network-services/multicast-group-ranges/describe
new file mode 100644
index 000000000..3efda6275
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-ranges/describe
@@ -0,0 +1,70 @@
+NAME
+    gcloud alpha network-services multicast-group-ranges describe - describe a
+        multicast group range
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-ranges describe
+        (MULTICAST_GROUP_RANGE : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Show details of a multicast group range in the specified location
+    of the current project.
+
+EXAMPLES
+    To describe a multicast group range in the current project, run:
+
+        $ gcloud alpha network-services multicast-group-ranges describe \
+            my-multicast-group-range --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - The multicast group range to display. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-ranges describe
+
diff --git a/gcloud/alpha/network-services/multicast-group-ranges/help b/gcloud/alpha/network-services/multicast-group-ranges/help
new file mode 100644
index 000000000..09a2191f3
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-ranges/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud alpha network-services multicast-group-ranges - manage Network
+        Services MulticastGroupRanges
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-ranges COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage Network Services MulticastGroupRanges.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Create a multicast group range.
+
+     delete
+        (ALPHA) Delete a multicast group range.
+
+     describe
+        (ALPHA) Describe a multicast group range.
+
+     list
+        (ALPHA) List multicast group ranges.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-ranges
+
diff --git a/gcloud/alpha/network-services/multicast-group-ranges/list b/gcloud/alpha/network-services/multicast-group-ranges/list
new file mode 100644
index 000000000..6720040d1
--- /dev/null
+++ b/gcloud/alpha/network-services/multicast-group-ranges/list
@@ -0,0 +1,91 @@
+NAME
+    gcloud alpha network-services multicast-group-ranges list - list multicast
+        group ranges
+
+SYNOPSIS
+    gcloud alpha network-services multicast-group-ranges list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List all multicast group ranges in the specified location of the
+    current project.
+
+EXAMPLES
+    To list multicast group ranges in the current project, run:
+
+        $ gcloud alpha network-services multicast-group-ranges list \
+            --location=global
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast group ranges to display.
+     This represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1alpha1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-group-ranges list
+
diff --git a/gcloud/alpha/network-services/multicast-producer-associations/create b/gcloud/alpha/network-services/multicast-producer-associations/create
index 331f990e8..b9933128c 100644
--- a/gcloud/alpha/network-services/multicast-producer-associations/create
+++ b/gcloud/alpha/network-services/multicast-producer-associations/create
@@ -95,5 +95,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-producer-associations create
 
diff --git a/gcloud/alpha/network-services/multicast-producer-associations/delete b/gcloud/alpha/network-services/multicast-producer-associations/delete
index 86cfc79af..9f5937cf4 100644
--- a/gcloud/alpha/network-services/multicast-producer-associations/delete
+++ b/gcloud/alpha/network-services/multicast-producer-associations/delete
@@ -71,5 +71,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-producer-associations delete
 
diff --git a/gcloud/alpha/network-services/multicast-producer-associations/describe b/gcloud/alpha/network-services/multicast-producer-associations/describe
index 566e3890c..55f62b498 100644
--- a/gcloud/alpha/network-services/multicast-producer-associations/describe
+++ b/gcloud/alpha/network-services/multicast-producer-associations/describe
@@ -67,5 +67,8 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-producer-associations \
+            describe
 
diff --git a/gcloud/alpha/network-services/multicast-producer-associations/help b/gcloud/alpha/network-services/multicast-producer-associations/help
index 7f6edfefc..94fdf2a91 100644
--- a/gcloud/alpha/network-services/multicast-producer-associations/help
+++ b/gcloud/alpha/network-services/multicast-producer-associations/help
@@ -33,5 +33,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-producer-associations
 
diff --git a/gcloud/alpha/network-services/multicast-producer-associations/list b/gcloud/alpha/network-services/multicast-producer-associations/list
index 4d8d5eae5..6159e8155 100644
--- a/gcloud/alpha/network-services/multicast-producer-associations/list
+++ b/gcloud/alpha/network-services/multicast-producer-associations/list
@@ -86,5 +86,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud beta network-services multicast-producer-associations list
 
diff --git a/gcloud/alpha/resource-manager/tags/keys/create b/gcloud/alpha/resource-manager/tags/keys/create
index c27272ee6..5db344a89 100644
--- a/gcloud/alpha/resource-manager/tags/keys/create
+++ b/gcloud/alpha/resource-manager/tags/keys/create
@@ -5,7 +5,7 @@ NAME
 SYNOPSIS
     gcloud alpha resource-manager tags keys create (SHORT_NAME --parent=PARENT)
         [--async] [--description=DESCRIPTION] [--purpose=PURPOSE]
-        [--purpose-data=[organization],[network=NETWORK]]
+        [--purpose-data=[network=NETWORK],[organization=ORGANIZATION]]
         [GCLOUD_WIDE_FLAG ...]
 
 EXAMPLES
@@ -50,7 +50,7 @@ FLAGS
         that corresponds to the purpose. PURPOSE must be one of: GCE_FIREWALL,
         DATA_GOVERNANCE.
 
-     --purpose-data=[organization],[network=NETWORK]
+     --purpose-data=[network=NETWORK],[organization=ORGANIZATION]
         Purpose data of the TagKey that can only be set on creation. This data
         is validated by the policy system that corresponds to the purpose.
 
diff --git a/gcloud/alpha/spanner/instances/move b/gcloud/alpha/spanner/instances/move
index 67210e8d5..74f944c9e 100644
--- a/gcloud/alpha/spanner/instances/move
+++ b/gcloud/alpha/spanner/instances/move
@@ -4,15 +4,27 @@ NAME
 
 SYNOPSIS
     gcloud alpha spanner instances move INSTANCE --target-config=TARGET_CONFIG
-        [GCLOUD_WIDE_FLAG ...]
+        [--target-database-move-configs=[^:^database-id=DATABASE_ID:kms-keys=KEY1,
+          KEY2,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Move the Cloud Spanner instance to the specified instance config.
 
 EXAMPLES
-    To move the Cloud Spanner instance to the target instance configuration,
-    run:        $ gcloud alpha spanner instances move my-instance-id \
-            --target-config=nam3
+    To move the Cloud Spanner instance, which has two CMEK databases db1 and
+    db2 and a database db3 with Google managed encryption keys, to the target
+    instance configuration nam3 (us-east4, us-east1, us-central1), run:        $ gcloud alpha spanner instances move my-instance-id \
+            --target-config=nam3 \
+            --target-database-move-configs=^:^database-id=db1:kms-keys=proje\
+        cts/myproject/locations/us-east4/keyRings/mykeyring/cryptoKeys/\
+        cmek-key,projects/myproject/locations/us-east1/keyRings/mykeyring/\
+        cryptoKeys/cmek-key,projects/myproject/locations/us-central1/\
+        keyRings/mykeyring/cryptoKeys/cmek-key \
+            --target-database-move-configs=^:^database-id=db2:kms-keys=proje\
+        cts/myproject/locations/us-east4/keyRings/mykeyring/cryptoKeys/\
+        cmek-key,projects/myproject/locations/us-east1/keyRings/mykeyring/\
+        cryptoKeys/cmek-key,projects/myproject/locations/us-central1/\
+        keyRings/mykeyring/cryptoKeys/cmek-key
 
 POSITIONAL ARGUMENTS
      INSTANCE
@@ -22,6 +34,30 @@ REQUIRED FLAGS
      --target-config=TARGET_CONFIG
         Target Instance configuration to move the instances.
 
+OPTIONAL FLAGS
+     --target-database-move-configs=[^:^database-id=DATABASE_ID:kms-keys=KEY1,KEY2,...]
+        Database level configurations for each database to be moved. Currently
+        only used for CMEK databases to specificy the target database KMS keys.
+        Sets target_database_move_configs value.
+
+         database-id
+            Required, Sets database-id value.
+
+         kms-keys
+            Sets kms-keys value.
+
+        Shorthand Example:
+
+            --target-database-move-configs=database-id=string,kms-keys=string --target-database-move-configs=database-id=string,kms-keys=string
+
+        JSON Example:
+
+            --target-database-move-configs='[{"database-id": "string", "kms-keys": "string"}]'
+
+        File Example:
+
+            --target-database-move-configs=path_to_file.(yaml|json)
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/alpha/storage/batch-operations/jobs/create b/gcloud/alpha/storage/batch-operations/jobs/create
index 190039118..632ea48e3 100644
--- a/gcloud/alpha/storage/batch-operations/jobs/create
+++ b/gcloud/alpha/storage/batch-operations/jobs/create
@@ -3,9 +3,9 @@ NAME
         operation job
 
 SYNOPSIS
-    gcloud alpha storage batch-operations jobs create BATCH_JOB
-        (--manifest-location=MANIFEST_LOCATION
-          | --prefix-list-file=PREFIX_LIST_FILE)
+    gcloud alpha storage batch-operations jobs create BATCH_JOB --bucket=BUCKET
+        (--included-object-prefixes=[PREFIXES,...]
+          | --manifest-location=MANIFEST_LOCATION)
         (--put-kms-key=PUT_KMS_KEY | --put-metadata=KEY=VALUE,[KEY=VALUE,...]
           | [--delete-object : --enable-permanent-object-deletion]
           | --[no-]put-object-event-based-hold
@@ -26,12 +26,11 @@ EXAMPLES
           --manifest-location=gs://my-bucket/manifest.csv --delete-object
 
     To create a batch job with the name my-job to update object metadata
-    Content-Disposition to inline and Content-Language to en where the prefix
-    list file my-path/my-prefix-list.json specifies the objects to be
-    transformed:
+    Content-Disposition to inline and Content-Language to en where you want to
+    match objects with the prefix prefix1 or prefix2:
 
         $ gcloud alpha storage batch-operations jobs create my-job \
-          --prefix-list-file=my-path/my-prefix-list.json \
+          --included-object-prefixes=prefix1,prefix2 \
           --put-metadata=Content-Disposition=inline,Content-Language=en
 
 POSITIONAL ARGUMENTS
@@ -59,12 +58,19 @@ POSITIONAL ARGUMENTS
           ▸ provide the argument batch_job on the command line.
 
 REQUIRED FLAGS
+     --bucket=BUCKET
+        Bucket containing the objects that the batch job will operate on.
+
      Source specifying objects to perform batch operations on. Must be one of
      --manifest-location=``MANIFEST_LOCATION or
-     --prefix-list-file=``PREFIX_LIST_FILE
+     --included-object-prefixes=``COMMA_SEPARATED_PREFIXES
 
      Exactly one of these must be specified:
 
+       --included-object-prefixes=[PREFIXES,...]
+          A comma-separated list of object prefixes to describe the objects
+          being transformed. An empty string means all objects in the bucket.
+
        --manifest-location=MANIFEST_LOCATION
           An absolute path to the manifest source file in a Google Cloud
           Storage bucket. The file must be a CSV file where each row specifies
@@ -73,13 +79,6 @@ REQUIRED FLAGS
           object is acted upon. Format:
           --manifest-location=gs://bucket_name/path/manifest_name.csv
 
-       --prefix-list-file=PREFIX_LIST_FILE
-          A path to a local JSON or YAML file containing a list of prefixes.
-          prefix is specified in the format of {"bucket": BUCKET_NAME,
-          "objectPrefix": OBJECT_PREFIX} where bucket is the name of the bucket
-          on which batch operation is being performed and objectPrefix is the
-          prefix of objects in the bucket that will be acted upon.
-
      Transformation to be performed on the objects.
 
      Exactly one of these must be specified:
diff --git a/gcloud/beta/alloydb/users/set-roles b/gcloud/beta/alloydb/users/set-roles
index 07ddb62d9..8a3a88bd7 100644
--- a/gcloud/beta/alloydb/users/set-roles
+++ b/gcloud/beta/alloydb/users/set-roles
@@ -4,7 +4,8 @@ NAME
 
 SYNOPSIS
     gcloud beta alloydb users set-roles USERNAME --cluster=CLUSTER
-        --db-roles=[ROLE,...] --region=REGION [GCLOUD_WIDE_FLAG ...]
+        --db-roles=[ROLE,...] --region=REGION
+        [--keep-extra-roles=KEEP_EXTRA_ROLES] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (BETA) Update an AlloyDB user's database roles within a given cluster and
@@ -32,6 +33,10 @@ REQUIRED FLAGS
         Regional location (e.g. asia-east1, us-east1). See the full list of
         regions at https://cloud.google.com/sql/docs/instance-locations.
 
+OPTIONAL FLAGS
+     --keep-extra-roles=KEEP_EXTRA_ROLES
+        If the user already exists and has extra roles, keep them.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/beta/compute/commitments/create b/gcloud/beta/compute/commitments/create
index a82af3c17..2d5f2cfc2 100644
--- a/gcloud/beta/compute/commitments/create
+++ b/gcloud/beta/compute/commitments/create
@@ -107,14 +107,14 @@ OPTIONAL FLAGS
         Type of commitment. memory-optimized indicates that the commitment is
         for memory-optimized VMs. TYPE must be one of: accelerator-optimized,
         accelerator-optimized-a3, accelerator-optimized-a3-mega,
-        compute-optimized, compute-optimized-c2d, compute-optimized-c3,
-        compute-optimized-c3d, compute-optimized-h3, general-purpose,
-        general-purpose-c4, general-purpose-c4a, general-purpose-e2,
-        general-purpose-n2, general-purpose-n2d, general-purpose-n4,
-        general-purpose-t2d, graphics-optimized, memory-optimized,
-        memory-optimized-m3, memory-optimized-x4-16tb,
-        memory-optimized-x4-24tb, memory-optimized-x4-32tb,
-        storage-optimized-z3.
+        accelerator-optimized-a3-ultra, compute-optimized,
+        compute-optimized-c2d, compute-optimized-c3, compute-optimized-c3d,
+        compute-optimized-h3, general-purpose, general-purpose-c4,
+        general-purpose-c4a, general-purpose-e2, general-purpose-n2,
+        general-purpose-n2d, general-purpose-n4, general-purpose-t2d,
+        graphics-optimized, memory-optimized, memory-optimized-m3,
+        memory-optimized-x4-16tb, memory-optimized-x4-24tb,
+        memory-optimized-x4-32tb, storage-optimized-z3.
 
      Manage the reservations to be created with the commitment.
 
diff --git a/gcloud/beta/compute/instance-templates/create-with-container b/gcloud/beta/compute/instance-templates/create-with-container
index 860af1043..f79843795 100644
--- a/gcloud/beta/compute/instance-templates/create-with-container
+++ b/gcloud/beta/compute/instance-templates/create-with-container
@@ -614,7 +614,8 @@ FLAGS
 
          stack-type
             Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
-            be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
+            be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is
+            IPV4_ONLY.
 
          ipv6-network-tier
             Specifies the IPv6 network tier that will be used to configure the
@@ -756,6 +757,8 @@ FLAGS
             The network interface can have both IPv4 and IPv6 addresses
          IPV4_ONLY
             The network interface will be assigned IPv4 addresses
+         IPV6_ONLY
+            The network interface will be assigned IPv6 addresses
 
      --subnet=SUBNET
         Specifies the subnet that the VM instances are a part of. If --network
diff --git a/gcloud/beta/compute/instances/create-with-container b/gcloud/beta/compute/instances/create-with-container
index a93350211..1530fc8a7 100644
--- a/gcloud/beta/compute/instances/create-with-container
+++ b/gcloud/beta/compute/instances/create-with-container
@@ -712,7 +712,8 @@ FLAGS
 
          stack-type
             Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
-            be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
+            be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is
+            IPV4_ONLY.
 
          ipv6-network-tier
             Specifies the IPv6 network tier that will be used to configure the
@@ -870,6 +871,8 @@ FLAGS
             The network interface can have both IPv4 and IPv6 addresses
          IPV4_ONLY
             The network interface will be assigned IPv4 addresses
+         IPV6_ONLY
+            The network interface will be assigned IPv6 addresses
 
      --subnet=SUBNET
         Specifies the subnet that the VM instances are a part of. If --network
diff --git a/gcloud/beta/compute/security-policies/rules/create b/gcloud/beta/compute/security-policies/rules/create
index 4f258f619..7914cb58e 100644
--- a/gcloud/beta/compute/security-policies/rules/create
+++ b/gcloud/beta/compute/security-policies/rules/create
@@ -19,8 +19,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-redirect-target=EXCEED_REDIRECT_TARGET]
@@ -182,11 +183,14 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -207,6 +211,8 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/beta/compute/security-policies/rules/update b/gcloud/beta/compute/security-policies/rules/update
index b9c13e04d..0f8b04c75 100644
--- a/gcloud/beta/compute/security-policies/rules/update
+++ b/gcloud/beta/compute/security-policies/rules/update
@@ -10,8 +10,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-redirect-target=EXCEED_REDIRECT_TARGET]
@@ -133,11 +134,14 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -158,6 +162,8 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/beta/container/backup-restore/help b/gcloud/beta/container/backup-restore/help
index 802fd755a..4325e5b0b 100644
--- a/gcloud/beta/container/backup-restore/help
+++ b/gcloud/beta/container/backup-restore/help
@@ -24,6 +24,9 @@ GROUPS
      locations
         (BETA) Backup for GKE Locations.
 
+     operations
+        (BETA) Backup for GKE Operations.
+
      restore-plans
         (BETA) Backup for GKE Restore Plans.
 
diff --git a/gcloud/beta/container/backup-restore/operations/help b/gcloud/beta/container/backup-restore/operations/help
new file mode 100644
index 000000000..c0a038c65
--- /dev/null
+++ b/gcloud/beta/container/backup-restore/operations/help
@@ -0,0 +1,27 @@
+NAME
+    gcloud beta container backup-restore operations - backup for GKE Operations
+
+SYNOPSIS
+    gcloud beta container backup-restore operations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Backup for GKE Operations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     list
+        (BETA) List operations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container backup-restore operations
+
diff --git a/gcloud/beta/container/backup-restore/operations/list b/gcloud/beta/container/backup-restore/operations/list
new file mode 100644
index 000000000..2d6a339d8
--- /dev/null
+++ b/gcloud/beta/container/backup-restore/operations/list
@@ -0,0 +1,94 @@
+NAME
+    gcloud beta container backup-restore operations list - list operations
+
+SYNOPSIS
+    gcloud beta container backup-restore operations list [--location=LOCATION]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List Backup for GKE operations.
+
+EXAMPLES
+    To list all operations in project my-project in location us-central1, run:
+
+        $ gcloud beta container backup-restore operations list \
+            --project=my-project --location=us-central1
+
+    To list all operations in project my-project across all locations, run:
+
+        $ gcloud beta container backup-restore operations list \
+            --project=my-project
+
+FLAGS
+     Location resource - Name of the location from which to list operations
+     (provided via options or through properties): --project=<project>
+     --location=<location>. This represents a Cloud resource. (NOTE) Some
+     attributes are not given arguments in this group but can be set in other
+     ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ set the property gkebackup/location with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line;
+          ▸ set the property gkebackup/location.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the gkebackup/v1 API. The full documentation for this API
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container backup-restore operations list
+
diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create
index 4a368b893..28dbd4e7e 100644
--- a/gcloud/beta/container/clusters/create
+++ b/gcloud/beta/container/clusters/create
@@ -612,10 +612,20 @@ FLAGS
         IP if --enable-private-endpoint is not enabled.
 
      --enable-ip-alias
-        Enable use of alias IPs
-        (https://cloud.google.com/compute/docs/alias-ip/) for Pod IPs. This
-        will require at least two secondary ranges in the subnetwork, one for
-        the pod IPs and another to reserve space for the services range.
+        --enable-ip-alias creates a VPC-native cluster. If you set this option,
+        you can optionally specify the IP address ranges to use for Pods and
+        Services. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/alias-ips.
+
+        --no-enable-ip-alias creates a routes-based cluster. This type of
+        cluster routes traffic between Pods using Google Cloud Routes. This
+        option is not recommended; use the default VPC-native cluster type
+        instead. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
+
+        You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
+        you omit both --enable-ip-alias and --no-enable-ip-alias, the default
+        is a VPC-native cluster.
 
      --enable-kubernetes-alpha
         Enable Kubernetes alpha features on this cluster. Selecting this option
diff --git a/gcloud/beta/dataflow/flex-template/run b/gcloud/beta/dataflow/flex-template/run
index 425abe340..9022adeab 100644
--- a/gcloud/beta/dataflow/flex-template/run
+++ b/gcloud/beta/dataflow/flex-template/run
@@ -8,6 +8,7 @@ SYNOPSIS
         [--additional-user-labels=[ADDITIONAL_USER_LABELS,...]]
         [--dataflow-kms-key=DATAFLOW_KMS_KEY] [--disable-public-ips]
         [--enable-streaming-engine] [--flexrs-goal=FLEXRS_GOAL]
+        [--launcher-machine-type=LAUNCHER_MACHINE_TYPE]
         [--max-workers=MAX_WORKERS] [--network=NETWORK]
         [--num-workers=NUM_WORKERS] [--parameters=[PARAMETERS,...]]
         [--region=REGION_ID] [--service-account-email=SERVICE_ACCOUNT_EMAIL]
@@ -64,6 +65,10 @@ OPTIONAL FLAGS
         FlexRS goal for the flex template job. FLEXRS_GOAL must be one of:
         COST_OPTIMIZED, SPEED_OPTIMIZED.
 
+     --launcher-machine-type=LAUNCHER_MACHINE_TYPE
+        The machine type to use for launching the job. The default
+        isn1-standard-1.
+
      --max-workers=MAX_WORKERS
         Maximum number of workers to run.
 
diff --git a/gcloud/beta/datastream/connection-profiles/create b/gcloud/beta/datastream/connection-profiles/create
index f9db3d07f..f36616556 100644
--- a/gcloud/beta/datastream/connection-profiles/create
+++ b/gcloud/beta/datastream/connection-profiles/create
@@ -15,12 +15,15 @@ SYNOPSIS
           --mysql-username=MYSQL_USERNAME (--mysql-password=MYSQL_PASSWORD
           | --mysql-prompt-for-password) : --ca-certificate=CA_CERTIFICATE
           --client-certificate=CLIENT_CERTIFICATE --client-key=CLIENT_KEY]
-          | --postgresql-database=POSTGRESQL_DATABASE
+          | [--postgresql-database=POSTGRESQL_DATABASE
           --postgresql-hostname=POSTGRESQL_HOSTNAME
           --postgresql-port=POSTGRESQL_PORT
           --postgresql-username=POSTGRESQL_USERNAME
           (--postgresql-password=POSTGRESQL_PASSWORD
           | --postgresql-prompt-for-password)
+          : [--postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          : --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          --postgresql-client-key=POSTGRESQL_CLIENT_KEY]]
           | --sqlserver-database=SQLSERVER_DATABASE
           --sqlserver-hostname=SQLSERVER_HOSTNAME
           --sqlserver-port=SQLSERVER_PORT
@@ -246,6 +249,28 @@ OPTIONAL FLAGS
          --postgresql-prompt-for-password
             Prompt for the password used to connect to the database.
 
+       --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          x509 PEM-encoded certificate of the CA that signed the source
+          database server's certificate. The replica will use this certificate
+          to verify it's connecting to the right host.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          x509 PEM-encoded certificate that will be used by the replica to
+          authenticate against the source database server.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --postgresql-client-key=POSTGRESQL_CLIENT_KEY
+          Unencrypted PKCS#1 or PKCS#8 PEM-encoded private key associated with
+          the Client Certificate.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
        --sqlserver-database=SQLSERVER_DATABASE
           Database service for the SQL Server connection.
 
diff --git a/gcloud/beta/datastream/connection-profiles/update b/gcloud/beta/datastream/connection-profiles/update
index 9af82ae4a..4f7835d6a 100644
--- a/gcloud/beta/datastream/connection-profiles/update
+++ b/gcloud/beta/datastream/connection-profiles/update
@@ -20,6 +20,9 @@ SYNOPSIS
           --postgresql-hostname=POSTGRESQL_HOSTNAME
           --postgresql-port=POSTGRESQL_PORT
           --postgresql-username=POSTGRESQL_USERNAME
+          --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          --postgresql-client-key=POSTGRESQL_CLIENT_KEY
           --postgresql-password=POSTGRESQL_PASSWORD
           | --postgresql-prompt-for-password
           | --sqlserver-database=SQLSERVER_DATABASE
@@ -194,6 +197,19 @@ OPTIONAL FLAGS
        --postgresql-username=POSTGRESQL_USERNAME
           Username Datastream will use to connect to the database.
 
+       --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          x509 PEM-encoded certificate of the CA that signed the source
+          database server's certificate. The replica will use this certificate
+          to verify it's connecting to the right host.
+
+       --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          x509 PEM-encoded certificate that will be used by the replica to
+          authenticate against the source database server.
+
+       --postgresql-client-key=POSTGRESQL_CLIENT_KEY
+          Unencrypted PKCS#1 or PKCS#8 PEM-encoded private key associated with
+          the Client Certificate.
+
        At most one of these can be specified:
 
          --postgresql-password=POSTGRESQL_PASSWORD
diff --git a/gcloud/beta/dns/policies/create b/gcloud/beta/dns/policies/create
index efad81996..b89424c88 100644
--- a/gcloud/beta/dns/policies/create
+++ b/gcloud/beta/dns/policies/create
@@ -5,7 +5,8 @@ SYNOPSIS
     gcloud beta dns policies create POLICY --description=DESCRIPTION
         --networks=[NETWORKS,...]
         [--alternative-name-servers=[NAME_SERVERS,...]]
-        [--enable-inbound-forwarding] [--enable-logging]
+        [--enable-dns64-all-queries] [--enable-inbound-forwarding]
+        [--enable-logging]
         [--private-alternative-name-servers=[NAME_SERVERS,...]]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -25,7 +26,8 @@ EXAMPLES
             --networks=network1,network2 \
             --alternative-name-servers=192.168.1.1,192.168.1.2 \
             --private-alternative-name-servers=100.64.0.1 \
-            --enable-inbound-forwarding --enable-logging
+            --enable-inbound-forwarding --enable-logging \
+            --enable-dns64-all-queries
 
 POSITIONAL ARGUMENTS
      Policy resource - The policy to create. This represents a Cloud resource.
@@ -58,6 +60,10 @@ OPTIONAL FLAGS
         will forward to the target through the Internet.RFC1918 addresses will
         forward through the VPC.
 
+     --enable-dns64-all-queries
+        Specifies whether to allow networks bound to this policy to use DNS64
+        for IPv6-only VM instances.
+
      --enable-inbound-forwarding
         Specifies whether to allow networks bound to this policy to receive DNS
         queries sent by VMs or applications over VPN connections. Defaults to
diff --git a/gcloud/beta/dns/policies/update b/gcloud/beta/dns/policies/update
index 7142afe31..983ff1f35 100644
--- a/gcloud/beta/dns/policies/update
+++ b/gcloud/beta/dns/policies/update
@@ -4,8 +4,9 @@ NAME
 SYNOPSIS
     gcloud beta dns policies update POLICY
         [--alternative-name-servers=[NAME_SERVERS,...]]
-        [--description=DESCRIPTION] [--enable-inbound-forwarding]
-        [--enable-logging] [--networks=[NETWORKS,...]]
+        [--description=DESCRIPTION] [--enable-dns64-all-queries]
+        [--enable-inbound-forwarding] [--enable-logging]
+        [--networks=[NETWORKS,...]]
         [--private-alternative-name-servers=[NAME_SERVERS,...]]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -45,6 +46,10 @@ FLAGS
      --description=DESCRIPTION
         A description of the policy.
 
+     --enable-dns64-all-queries
+        Specifies whether to allow networks bound to this policy to use DNS64
+        for IPv6-only VM instances.
+
      --enable-inbound-forwarding
         Specifies whether to allow networks bound to this policy to receive DNS
         queries sent by VMs or applications over VPN connections. Defaults to
diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create
index 3037e93dd..2ecc2120b 100644
--- a/gcloud/beta/filestore/instances/create
+++ b/gcloud/beta/filestore/instances/create
@@ -11,6 +11,7 @@ SYNOPSIS
         [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
         [--location=LOCATION]
         [--managed-ad=[computer=COMPUTER],[domain=DOMAIN]]
+        [--performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]]
         [--protocol=PROTOCOL; default="NFS_V3"] [--region=REGION]
         [--source-instance=SOURCE_INSTANCE] [--tags=[KEY=VALUE,...]]
         [--tier=TIER; default="BASIC_HDD"]
@@ -210,8 +211,7 @@ REQUIRED FLAGS
             network.
          connect-mode
             Network connection mode used by instances. CONNECT_MODE must be one
-            of: DIRECT_PEERING, PRIVATE_SERVICE_ACCESS or
-            PRIVATE_SERVICE_CONNECT.
+            of: DIRECT_PEERING or PRIVATE_SERVICE_ACCESS.
 
 OPTIONAL FLAGS
      --async
@@ -245,6 +245,43 @@ OPTIONAL FLAGS
                The desired active directory computer name to be created by
                the filestore instance when connecting to the domain.
 
+     --performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]
+        Performance configuration for the instance. This flag is used to
+        configure the read IOPS provisioned for the instance. The instance's
+        write IOPS and read/write throughputs will be derived from the
+        configured read IOPS. For more information about the derived
+        performance limits and default performance see:
+        https://cloud.google.com/filestore/docs/performance. Must be one of:
+
+            max-iops
+              The number of IOPS to provision for the instance.
+              MAX-IOPS must be in multiple of 1000 and in the supported IOPS
+              range for the current capacity of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+            max-iops-per-tb
+              Is used for setting the max IOPS of the instance by
+              specifying the IOPS per TB. When this parameter is used, the
+              max IOPS are derived from the instance capacity:
+              The instance max IOPS will be calculated by multiplying the
+              capacity of the instance (TB) by MAX-IOPS-PER-TB, and rounding
+              to the nearest 1000. The max IOPS will be changed
+              dynamically based on the instance capacity.
+              MAX-IOPS-PER-TB must be in the supported range of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+        Examples:
+
+        Configure an instance with max-iops performance:
+
+            $ gcloud beta filestore instances create example-cluster \
+                --performance=max-iops=17000
+
+        Configure an instance with max-iops-per-tb performance:
+
+            $ gcloud beta filestore instances create example-cluster \
+                --performance=max-iops-per-tb=17000
+
      --protocol=PROTOCOL; default="NFS_V3"
         The service protocol for the Cloud Filestore instance. PROTOCOL must be
         one of:
diff --git a/gcloud/beta/filestore/instances/update b/gcloud/beta/filestore/instances/update
index 295b3c692..2e9471caf 100644
--- a/gcloud/beta/filestore/instances/update
+++ b/gcloud/beta/filestore/instances/update
@@ -3,8 +3,9 @@ NAME
 
 SYNOPSIS
     gcloud beta filestore instances update (INSTANCE : --zone=ZONE) [--async]
-        [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION]
-        [--update-labels=[KEY=VALUE,...]]
+        [--description=DESCRIPTION] [--location=LOCATION]
+        [--performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]]
+        [--region=REGION] [--update-labels=[KEY=VALUE,...]]
         [--clear-labels | --remove-labels=[KEY,...]]
         [--disconnect-managed-ad
           | --managed-ad=[computer=COMPUTER],[domain=DOMAIN]]
@@ -107,6 +108,43 @@ FLAGS
      --location=LOCATION
         Location of the Cloud Filestore instance/operation.
 
+     --performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]
+        Performance configuration for the instance. This flag is used to
+        configure the read IOPS provisioned for the instance. The instance's
+        write IOPS and read/write throughputs will be derived from the
+        configured read IOPS. For more information about the derived
+        performance limits and default performance see:
+        https://cloud.google.com/filestore/docs/performance. Must be one of:
+
+            max-iops
+              The number of IOPS to provision for the instance.
+              MAX-IOPS must be in multiple of 1000 and in the supported IOPS
+              range for the current capacity of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+            max-iops-per-tb
+              Is used for setting the max IOPS of the instance by
+              specifying the IOPS per TB. When this parameter is used, the
+              max IOPS are derived from the instance capacity:
+              The instance max IOPS will be calculated by multiplying the
+              capacity of the instance (TB) by MAX-IOPS-PER-TB, and rounding
+              to the nearest 1000. The max IOPS will be changed
+              dynamically based on the instance capacity.
+              MAX-IOPS-PER-TB must be in the supported range of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+        Examples:
+
+        Configure an instance with max-iops performance:
+
+            $ gcloud beta filestore instances update example-cluster \
+                --performance=max-iops=17000
+
+        Configure an instance with max-iops-per-tb performance:
+
+            $ gcloud beta filestore instances update example-cluster \
+                --performance=max-iops-per-tb=17000
+
      --region=REGION
         Region of the Cloud Filestore instance.
 
diff --git a/gcloud/beta/kms/autokey-config/describe b/gcloud/beta/kms/autokey-config/describe
new file mode 100644
index 000000000..e9fd6051c
--- /dev/null
+++ b/gcloud/beta/kms/autokey-config/describe
@@ -0,0 +1,36 @@
+NAME
+    gcloud beta kms autokey-config describe - describe the AutokeyConfig of a
+        folder
+
+SYNOPSIS
+    gcloud beta kms autokey-config describe --folder=FOLDER
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) gcloud beta kms autokey-config describe can be used to retrieve the
+    AutokeyConfig of a folder.
+
+EXAMPLES
+    The following command retrieves the AutokeyConfig of a folder having
+    folder-id 123:
+
+        $ gcloud beta kms autokey-config describe --folder=123
+
+REQUIRED FLAGS
+     --folder=FOLDER
+        The folder id in which the autokey config resource exists.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms autokey-config describe
+
diff --git a/gcloud/beta/kms/autokey-config/help b/gcloud/beta/kms/autokey-config/help
new file mode 100644
index 000000000..6e635976a
--- /dev/null
+++ b/gcloud/beta/kms/autokey-config/help
@@ -0,0 +1,34 @@
+NAME
+    gcloud beta kms autokey-config - update and retrieve the Autokey Config
+
+SYNOPSIS
+    gcloud beta kms autokey-config COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Autokey config is a folder level resource which configures the key
+    project for the folder and the resources inside it.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (BETA) Describe the AutokeyConfig of a folder.
+
+     show-effective-config
+        (BETA) Gets the effective Cloud KMS Autokey configuration for a given
+        project.
+
+     update
+        (BETA) Updates the AutokeyConfig for a folder.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms autokey-config
+
diff --git a/gcloud/beta/kms/autokey-config/show-effective-config b/gcloud/beta/kms/autokey-config/show-effective-config
new file mode 100644
index 000000000..9a14b05c1
--- /dev/null
+++ b/gcloud/beta/kms/autokey-config/show-effective-config
@@ -0,0 +1,34 @@
+NAME
+    gcloud beta kms autokey-config show-effective-config - gets the effective
+        Cloud KMS Autokey configuration for a given project
+
+SYNOPSIS
+    gcloud beta kms autokey-config show-effective-config [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) gcloud beta kms autokey-config show-effective-config can be used to
+    get the effective Cloud KMS Autokey configuration for a given project.
+
+EXAMPLES
+    The following command retrieves the effective Cloud KMS Autokey
+    configuration for a given project my-project:
+
+        $ gcloud beta kms autokey-config show-effective-config \
+            --project=my-project
+
+    If --project flag is not provided, then the current project will be used.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms autokey-config show-effective-config
+
diff --git a/gcloud/beta/kms/autokey-config/update b/gcloud/beta/kms/autokey-config/update
new file mode 100644
index 000000000..3c85277c4
--- /dev/null
+++ b/gcloud/beta/kms/autokey-config/update
@@ -0,0 +1,35 @@
+NAME
+    gcloud beta kms autokey-config update - updates the AutokeyConfig for a
+        folder
+
+SYNOPSIS
+    gcloud beta kms autokey-config update CONFIG_FILE [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) gcloud beta kms autokey-config update can be used to update the
+    AutokeyConfig of a folder.
+
+EXAMPLES
+    The following command updates the AutokeyConfig for the folder mentioned in
+    the config.yaml file:
+
+        $ gcloud beta kms autokey-config update config.yaml
+
+POSITIONAL ARGUMENTS
+     CONFIG_FILE
+        The file containing the autokey config resource.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms autokey-config update
+
diff --git a/gcloud/beta/kms/help b/gcloud/beta/kms/help
index 7a58a5ab4..a4f123e67 100644
--- a/gcloud/beta/kms/help
+++ b/gcloud/beta/kms/help
@@ -28,6 +28,9 @@ GCLOUD WIDE FLAGS
 GROUPS
     GROUP is one of the following:
 
+     autokey-config
+        (BETA) Update and retrieve the Autokey Config.
+
      ekm-config
         (BETA) Update and retrieve the EkmConfig.
 
@@ -40,6 +43,9 @@ GROUPS
      inventory
         (BETA) Manages the KMS Inventory and Key Tracking commands.
 
+     key-handles
+        (BETA) Create and manage key-handles.
+
      keyrings
         (BETA) Create and manage keyrings.
 
diff --git a/gcloud/beta/kms/key-handles/create b/gcloud/beta/kms/key-handles/create
new file mode 100644
index 000000000..382f0902e
--- /dev/null
+++ b/gcloud/beta/kms/key-handles/create
@@ -0,0 +1,69 @@
+NAME
+    gcloud beta kms key-handles create - create a new key handle
+
+SYNOPSIS
+    gcloud beta kms key-handles create --location=LOCATION
+        --resource-type=RESOURCE_TYPE
+        (--generate-key-handle-id | --key-handle-id=KEY_HANDLE_ID)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Creates a new KeyHandle, triggering the provisioning of a new
+    CryptoKey for CMEK use with the given resource type in the configured key
+    project and the same location
+
+EXAMPLES
+    The following command creates a key handle named my-key-handle within the
+    location global for the resource type compute.googleapis.com/Disk:
+
+        $ gcloud beta kms key-handles create --key-handle-id=my-key-handle \
+            --my-key-handle --location=global \
+            --resource-type=compute.googleapis.com/Disk
+
+    In case we want to generate a random key handle id, we can use the
+    --generate-key-handle-id flag instead of the --key-handle-id flag.
+
+REQUIRED FLAGS
+     Location resource - The KMS location resource. This represents a Cloud
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+     --resource-type=RESOURCE_TYPE
+        The resource type selector for key handles of the form
+        {SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.
+
+     Exactly one of these must be specified:
+
+       --generate-key-handle-id
+          Generate a key handle id for the new key handle.
+
+       --key-handle-id=KEY_HANDLE_ID
+          The key handle id for the new key handle.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms key-handles create
+
diff --git a/gcloud/beta/kms/key-handles/describe b/gcloud/beta/kms/key-handles/describe
new file mode 100644
index 000000000..06c4fa895
--- /dev/null
+++ b/gcloud/beta/kms/key-handles/describe
@@ -0,0 +1,67 @@
+NAME
+    gcloud beta kms key-handles describe - get metadata for a key handle
+
+SYNOPSIS
+    gcloud beta kms key-handles describe (KEY_HANDLE : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Get metadata for a key handle.
+
+EXAMPLES
+    The following command gets metadata for a key handle named my-key-handle in
+    the locations us-central1.
+
+        $ gcloud beta kms key-handles describe my-key-handle \
+             --location=us-central1
+
+POSITIONAL ARGUMENTS
+     Key handle resource - The key handle to get metadata for. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways.
+
+     To set the project attribute:
+      ◆ provide the argument key_handle on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       KEY_HANDLE
+          ID of the key handle or fully qualified identifier for the key
+          handle.
+
+          To set the key_handle attribute:
+          ▸ provide the argument key_handle on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location of the resource.
+
+          To set the location attribute:
+          ▸ provide the argument key_handle on the command line with a fully
+            specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the cloudkms/v1 API. The full documentation for this API
+    can be found at: https://cloud.google.com/kms/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms key-handles describe
+
diff --git a/gcloud/beta/kms/key-handles/help b/gcloud/beta/kms/key-handles/help
new file mode 100644
index 000000000..27a7b5283
--- /dev/null
+++ b/gcloud/beta/kms/key-handles/help
@@ -0,0 +1,33 @@
+NAME
+    gcloud beta kms key-handles - create and manage key-handles
+
+SYNOPSIS
+    gcloud beta kms key-handles COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) A key-handle is a resource which contains a reference to a KMS
+    CryptoKey resource that can be used through existing CMEK channels
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a new key handle.
+
+     describe
+        (BETA) Get metadata for a key handle.
+
+     list
+        (BETA) List keyhandles within a project and location.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms key-handles
+
diff --git a/gcloud/beta/kms/key-handles/list b/gcloud/beta/kms/key-handles/list
new file mode 100644
index 000000000..b0ae13785
--- /dev/null
+++ b/gcloud/beta/kms/key-handles/list
@@ -0,0 +1,94 @@
+NAME
+    gcloud beta kms key-handles list - list keyhandles within a project and
+        location
+
+SYNOPSIS
+    gcloud beta kms key-handles list --location=LOCATION
+        --resource-type=RESOURCE_TYPE [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Lists all keyhandles within a given project and location.
+    Addtionally, can filter the list.
+
+EXAMPLES
+    The following command lists a maximum of five key handles in the location
+    global:
+
+        $ gcloud beta kms key-handles list --location=global --limit=5
+
+    The following command lists all key handles in the location global that
+    have a resource type selector of compute.googleapis.com/Instance:
+
+        $ gcloud beta kms key-handles list --location=global \
+            --resource-type=compute.googleapis.com/Instance
+
+REQUIRED FLAGS
+     Location resource - The KMS location resource. This represents a Cloud
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+     --resource-type=RESOURCE_TYPE
+        The resource type selector for key handles of the form
+        {SERVICE}.{UNIVERSE_DOMAIN}/{TYPE}.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha kms key-handles list
+
diff --git a/gcloud/beta/network-services/help b/gcloud/beta/network-services/help
index 2e79a1bfc..99866b872 100644
--- a/gcloud/beta/network-services/help
+++ b/gcloud/beta/network-services/help
@@ -18,6 +18,33 @@ GROUPS
      endpoint-policies
         (BETA) Manage Network Services EndpointPolicies.
 
+     multicast-consumer-associations
+        (BETA) Manage Network Services MulticastConsumerAssociations.
+
+     multicast-domain-activations
+        (BETA) Manage Network Services MulticastDomainActivations.
+
+     multicast-domain-groups
+        (BETA) Manage Network Services MulticastDomainGroups.
+
+     multicast-domains
+        (BETA) Manage Network Services MulticastDomains.
+
+     multicast-group-consumer-activations
+        (BETA) Manage Network Services MulticastGroupConsumerActivations.
+
+     multicast-group-producer-activations
+        (BETA) Manage Network Services MulticastGroupProducerActivations.
+
+     multicast-group-range-activations
+        (BETA) Manage Network Services MulticastGroupRangeActivations.
+
+     multicast-group-ranges
+        (BETA) Manage Network Services MulticastGroupRanges.
+
+     multicast-producer-associations
+        (BETA) Manage Network Services MulticastProducerAssociations.
+
      service-bindings
         (BETA) Manage Network Services Bindings.
 
diff --git a/gcloud/beta/network-services/multicast-consumer-associations/create b/gcloud/beta/network-services/multicast-consumer-associations/create
new file mode 100644
index 000000000..5cff2da3e
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-consumer-associations/create
@@ -0,0 +1,100 @@
+NAME
+    gcloud beta network-services multicast-consumer-associations create -
+        create a multicast consumer association
+
+SYNOPSIS
+    gcloud beta network-services multicast-consumer-associations create
+        (MULTICAST_CONSUMER_ASSOCIATION : --location=LOCATION)
+        --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        --network=NETWORK [--async] [--description=DESCRIPTION]
+        [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast consumer association in the specified location of
+    the current project.
+
+EXAMPLES
+    Create a multicast consumer association with the name
+    'my-multicast-consumer-association', multicast-domain-activation
+    'path-to-mda', network 'path-to-network', and location 'zone'.
+
+        $ gcloud beta network-services multicast-consumer-associations \
+            create my-multicast-consumer-association \
+            --multicast-domain-activation=path-to-mda \
+            --network=path-to-network --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast consumer association resource - Name of the multicast consumer
+     association to be created. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_consumer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_CONSUMER_ASSOCIATION
+          ID of the multicast consumer association or fully qualified
+          identifier for the multicast consumer association.
+
+          To set the multicast_consumer_association attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        The multicast domain activation to be used.
+
+     --network=NETWORK
+        The path of the multicast consumer VPC network.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast consumer association.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-consumer-associations \
+            create
+
diff --git a/gcloud/beta/network-services/multicast-consumer-associations/delete b/gcloud/beta/network-services/multicast-consumer-associations/delete
new file mode 100644
index 000000000..f86afca11
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-consumer-associations/delete
@@ -0,0 +1,76 @@
+NAME
+    gcloud beta network-services multicast-consumer-associations delete -
+        delete a multicast consumer association
+
+SYNOPSIS
+    gcloud beta network-services multicast-consumer-associations delete
+        (MULTICAST_CONSUMER_ASSOCIATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast consumer association in the specified location of
+    the current project.
+
+EXAMPLES
+    To delete a multicast consumer association in the current project, run:
+
+        $ gcloud beta network-services multicast-consumer-associations \
+            delete my-multicast-consumer-association --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast consumer association resource - The multicast consumer
+     association to delete. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_consumer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_CONSUMER_ASSOCIATION
+          ID of the multicast consumer association or fully qualified
+          identifier for the multicast consumer association.
+
+          To set the multicast_consumer_association attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-consumer-associations \
+            delete
+
diff --git a/gcloud/beta/network-services/multicast-consumer-associations/describe b/gcloud/beta/network-services/multicast-consumer-associations/describe
new file mode 100644
index 000000000..f023f5587
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-consumer-associations/describe
@@ -0,0 +1,72 @@
+NAME
+    gcloud beta network-services multicast-consumer-associations describe -
+        describe a multicast consumer association
+
+SYNOPSIS
+    gcloud beta network-services multicast-consumer-associations describe
+        (MULTICAST_CONSUMER_ASSOCIATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast consumer association in the specified
+    location of the current project.
+
+EXAMPLES
+    To describe details of a multicast consumer association in the current
+    project and location, run:
+
+        $ gcloud beta network-services multicast-consumer-associations \
+            describe my-multicast-consumer-association --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast consumer association resource - The multicast consumer
+     association to display. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_consumer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_CONSUMER_ASSOCIATION
+          ID of the multicast consumer association or fully qualified
+          identifier for the multicast consumer association.
+
+          To set the multicast_consumer_association attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_consumer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-consumer-associations \
+            describe
+
diff --git a/gcloud/beta/network-services/multicast-consumer-associations/help b/gcloud/beta/network-services/multicast-consumer-associations/help
new file mode 100644
index 000000000..5c1ba7aa1
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-consumer-associations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-consumer-associations - manage
+        Network Services MulticastConsumerAssociations
+
+SYNOPSIS
+    gcloud beta network-services multicast-consumer-associations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastConsumerAssociations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast consumer association.
+
+     delete
+        (BETA) Delete a multicast consumer association.
+
+     describe
+        (BETA) Describe a multicast consumer association.
+
+     list
+        (BETA) List multicast consumer associations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-consumer-associations
+
diff --git a/gcloud/beta/network-services/multicast-consumer-associations/list b/gcloud/beta/network-services/multicast-consumer-associations/list
new file mode 100644
index 000000000..669e8c158
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-consumer-associations/list
@@ -0,0 +1,90 @@
+NAME
+    gcloud beta network-services multicast-consumer-associations list - list
+        multicast consumer associations
+
+SYNOPSIS
+    gcloud beta network-services multicast-consumer-associations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast consumer associations in the specified location
+    of the current project.
+
+EXAMPLES
+    To list multicast consumer associations in the current project and
+    location, run:
+
+        $ gcloud beta network-services multicast-consumer-associations \
+            list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast consumer associations to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-consumer-associations list
+
diff --git a/gcloud/beta/network-services/multicast-domain-activations/create b/gcloud/beta/network-services/multicast-domain-activations/create
new file mode 100644
index 000000000..1017a54d2
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-activations/create
@@ -0,0 +1,119 @@
+NAME
+    gcloud beta network-services multicast-domain-activations create - create a
+        multicast domain activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-activations create
+        (MULTICAST_DOMAIN_ACTIVATION : --location=LOCATION)
+        --multicast-domain=MULTICAST_DOMAIN [--async]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--aggr-egress-pps=AGGR_EGRESS_PPS
+          : --aggr-ingress-pps=AGGR_INGRESS_PPS
+          --avg-packet-size=AVG_PACKET_SIZE
+          --max-per-group-ingress-pps=MAX_PER_GROUP_INGRESS_PPS
+          --max-per-group-subscribers=MAX_PER_GROUP_SUBSCRIBERS]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast domain activation in the specified location of
+    the current project.
+
+EXAMPLES
+    Create a multicast domain activation with the name
+    'my-multicast-domain-activation', multicast-domain 'path-to-md', and
+    location 'zone'.
+
+        $ gcloud beta network-services multicast-domain-activations create \
+            my-multicast-group-definition --multicast-domain=path-to-md \
+            --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast domain activation resource - Name of the multicast group
+     definition to be created. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_activation on the command line
+        with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_ACTIVATION
+          ID of the multicast domain activation or fully qualified identifier
+          for the multicast domain activation.
+
+          To set the multicast_domain_activation attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain=MULTICAST_DOMAIN
+        The multicast domain to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast domain activation.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     --aggr-egress-pps=AGGR_EGRESS_PPS
+        Aggregated egress Packet-Per-Second for all multicast groups in the
+        domain in this zone.
+
+     --aggr-ingress-pps=AGGR_INGRESS_PPS
+        Aggregated ingress Packet-Per-Second for all multicast groups in the
+        domain in this zone.
+
+     --avg-packet-size=AVG_PACKET_SIZE
+        Average packet size (defaults to 512 bytes).
+
+     --max-per-group-ingress-pps=MAX_PER_GROUP_INGRESS_PPS
+        Maximum ingress Packet-Per-Second for a single multicast group in this
+        zone.
+
+     --max-per-group-subscribers=MAX_PER_GROUP_SUBSCRIBERS
+        Maximum number of subscribers for a single multicast group in this
+        zone.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-activations create
+
diff --git a/gcloud/beta/network-services/multicast-domain-activations/delete b/gcloud/beta/network-services/multicast-domain-activations/delete
new file mode 100644
index 000000000..c5ad338f6
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-activations/delete
@@ -0,0 +1,75 @@
+NAME
+    gcloud beta network-services multicast-domain-activations delete - delete a
+        multicast domain activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-activations delete
+        (MULTICAST_DOMAIN_ACTIVATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast domain activation in the specified location of
+    the current project.
+
+EXAMPLES
+    To delete a multicast domain activation in the current project, run:
+
+        $ gcloud beta network-services multicast-domain-activations delete \
+            my-multicast-domain-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast domain activation resource - The multicast domain activation to
+     delete. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_activation on the command line
+        with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_ACTIVATION
+          ID of the multicast domain activation or fully qualified identifier
+          for the multicast domain activation.
+
+          To set the multicast_domain_activation attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-activations delete
+
diff --git a/gcloud/beta/network-services/multicast-domain-activations/describe b/gcloud/beta/network-services/multicast-domain-activations/describe
new file mode 100644
index 000000000..8b4411d52
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-activations/describe
@@ -0,0 +1,71 @@
+NAME
+    gcloud beta network-services multicast-domain-activations describe -
+        describe a multicast domain activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-activations describe
+        (MULTICAST_DOMAIN_ACTIVATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast domain activation in the specified
+    location of the current project.
+
+EXAMPLES
+    To describe details of a multicast domain activation in the current project
+    and location, run:
+
+        $ gcloud beta network-services multicast-domain-activations \
+            describe my-multicast-domain-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast domain activation resource - The multicast domain activation to
+     display. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_activation on the command line
+        with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_ACTIVATION
+          ID of the multicast domain activation or fully qualified identifier
+          for the multicast domain activation.
+
+          To set the multicast_domain_activation attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_activation on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-activations describe
+
diff --git a/gcloud/beta/network-services/multicast-domain-activations/help b/gcloud/beta/network-services/multicast-domain-activations/help
new file mode 100644
index 000000000..d79f6b869
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-activations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-domain-activations - manage Network
+        Services MulticastDomainActivations
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-activations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastDomainActivations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast domain activation.
+
+     delete
+        (BETA) Delete a multicast domain activation.
+
+     describe
+        (BETA) Describe a multicast domain activation.
+
+     list
+        (BETA) List multicast domain activations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-activations
+
diff --git a/gcloud/beta/network-services/multicast-domain-activations/list b/gcloud/beta/network-services/multicast-domain-activations/list
new file mode 100644
index 000000000..e0cb9c0d1
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-activations/list
@@ -0,0 +1,90 @@
+NAME
+    gcloud beta network-services multicast-domain-activations list - list
+        multicast domain activations
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-activations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast domain activations in the specified location of
+    the current project.
+
+EXAMPLES
+    To list multicast domain activations in the current project and location,
+    run:
+
+        $ gcloud beta network-services multicast-domain-activations list \
+            --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast domains to display. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-activations list
+
diff --git a/gcloud/beta/network-services/multicast-domain-groups/create b/gcloud/beta/network-services/multicast-domain-groups/create
new file mode 100644
index 000000000..4d904e57a
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-groups/create
@@ -0,0 +1,87 @@
+NAME
+    gcloud beta network-services multicast-domain-groups create - create a
+        multicast domain group
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-groups create
+        (MULTICAST_DOMAIN_GROUP : --location=LOCATION) [--async]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast domain group in the specified location of the
+    current project.
+
+EXAMPLES
+    Create a multicast domain group with the name 'my-multicast-domain-group',
+    and location global.
+
+        $ gcloud beta network-services multicast-domain-groups create \
+            my-multicast-domain-group --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain group resource - Name of the multicast domain group to be
+     created. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_group on the command line with
+        a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_GROUP
+          ID of the multicast domain group or fully qualified identifier for
+          the multicast domain group.
+
+          To set the multicast_domain_group attribute:
+          ▸ provide the argument multicast_domain_group on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_group on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast domain group.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-groups create
+
diff --git a/gcloud/beta/network-services/multicast-domain-groups/delete b/gcloud/beta/network-services/multicast-domain-groups/delete
new file mode 100644
index 000000000..74f520b63
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-groups/delete
@@ -0,0 +1,74 @@
+NAME
+    gcloud beta network-services multicast-domain-groups delete - delete a
+        multicast domain group
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-groups delete
+        (MULTICAST_DOMAIN_GROUP : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast domain group in the specified location of the
+    current project.
+
+EXAMPLES
+    To delete a multicast domain group in the current project, run:
+
+        $ gcloud beta network-services multicast-domain-groups delete \
+            my-multicast-domain-group --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain group resource - The multicast domain group to delete.
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_group on the command line with
+        a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_GROUP
+          ID of the multicast domain group or fully qualified identifier for
+          the multicast domain group.
+
+          To set the multicast_domain_group attribute:
+          ▸ provide the argument multicast_domain_group on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_group on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-groups delete
+
diff --git a/gcloud/beta/network-services/multicast-domain-groups/describe b/gcloud/beta/network-services/multicast-domain-groups/describe
new file mode 100644
index 000000000..291bb424a
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-groups/describe
@@ -0,0 +1,68 @@
+NAME
+    gcloud beta network-services multicast-domain-groups describe - describe a
+        multicast domain group
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-groups describe
+        (MULTICAST_DOMAIN_GROUP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast domain group in the specified location
+    of the current project.
+
+EXAMPLES
+    To describe a multicast domain group in the current project, run:
+
+        $ gcloud beta network-services multicast-domain-groups describe \
+            my-multicast-domain-group --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain group resource - The multicast domain group to display.
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain_group on the command line with
+        a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN_GROUP
+          ID of the multicast domain group or fully qualified identifier for
+          the multicast domain group.
+
+          To set the multicast_domain_group attribute:
+          ▸ provide the argument multicast_domain_group on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain_group on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-groups describe
+
diff --git a/gcloud/beta/network-services/multicast-domain-groups/help b/gcloud/beta/network-services/multicast-domain-groups/help
new file mode 100644
index 000000000..3e610f38c
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-groups/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-domain-groups - manage Network
+        Services MulticastDomainGroups
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-groups COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastDomainGroups.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast domain group.
+
+     delete
+        (BETA) Delete a multicast domain group.
+
+     describe
+        (BETA) Describe a multicast domain group.
+
+     list
+        (BETA) List multicast domain groups.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-groups
+
diff --git a/gcloud/beta/network-services/multicast-domain-groups/list b/gcloud/beta/network-services/multicast-domain-groups/list
new file mode 100644
index 000000000..3804e03ed
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domain-groups/list
@@ -0,0 +1,89 @@
+NAME
+    gcloud beta network-services multicast-domain-groups list - list multicast
+        domain groups
+
+SYNOPSIS
+    gcloud beta network-services multicast-domain-groups list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast domain groups in the specified location of the
+    current project.
+
+EXAMPLES
+    To list multicast domain groups in the current project, run:
+
+        $ gcloud beta network-services multicast-domain-groups list \
+            --location=global
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast domain groups to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domain-groups list
+
diff --git a/gcloud/beta/network-services/multicast-domains/create b/gcloud/beta/network-services/multicast-domains/create
new file mode 100644
index 000000000..612dc9671
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domains/create
@@ -0,0 +1,118 @@
+NAME
+    gcloud beta network-services multicast-domains create - create a multicast
+        domain
+
+SYNOPSIS
+    gcloud beta network-services multicast-domains create
+        (MULTICAST_DOMAIN : --location=LOCATION) --admin-network=ADMIN_NETWORK
+        (--connection-type=CONNECTION_TYPE;
+          default="CONNECTION_TYPE_UNSPECIFIED" --ncc-hub=NCC_HUB) [--async]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--multicast-domain-group=MULTICAST_DOMAIN_GROUP]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast domain in the specified location of the current
+    project.
+
+EXAMPLES
+    Create a multicast domain with the name 'my-multicast-domain',
+    admin-network 'path_to_admin_network', connection-type 'SAME_VPC', and
+    location 'global'.
+
+        $ gcloud beta network-services multicast-domains create \
+            my-multicast-domain --admin-network=path_to_admin_network \
+            --connection-type=SAME_VPC --location=global
+
+    Create a multicast domain with the name 'my-multicast-domain',
+    admin-network 'path_to_admin_network', connection-type 'NCC', ncc-hub
+    'path_to_ncc_hub', and location 'global'.
+
+        $ gcloud beta network-services multicast-domains create \
+            my-multicast-domain --admin-network=path_to_admin_network \
+            --connection-type=NCC --ncc-hub=path_to_ncc_hub \
+            --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain resource - Name of the multicast domain to be created.
+     The arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN
+          ID of the multicast domain or fully qualified identifier for the
+          multicast domain.
+
+          To set the multicast_domain attribute:
+          ▸ provide the argument multicast_domain on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --admin-network=ADMIN_NETWORK
+        The URI of the admin network to be used.
+
+     At least one of these must be specified:
+
+       --connection-type=CONNECTION_TYPE; default="CONNECTION_TYPE_UNSPECIFIED"
+          The connection type for authorizing multicast traffic.
+          CONNECTION_TYPE must be one of: connection-type-unspecified, ncc,
+          same-vpc.
+
+       --ncc-hub=NCC_HUB
+          The URI of the NCC hub to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast domain.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     --multicast-domain-group=MULTICAST_DOMAIN_GROUP
+        The URI of the multicast domain group to be used.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domains create
+
diff --git a/gcloud/beta/network-services/multicast-domains/delete b/gcloud/beta/network-services/multicast-domains/delete
new file mode 100644
index 000000000..bf42f43d2
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domains/delete
@@ -0,0 +1,74 @@
+NAME
+    gcloud beta network-services multicast-domains delete - delete a multicast
+        domain
+
+SYNOPSIS
+    gcloud beta network-services multicast-domains delete
+        (MULTICAST_DOMAIN : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast domain in the specified location of the current
+    project.
+
+EXAMPLES
+    To delete a multicast domain in the current project, run:
+
+        $ gcloud beta network-services multicast-domains delete \
+            my-multicast-domain --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain resource - The multicast domain to delete. The arguments
+     in this group can be used to specify the attributes of this resource.
+     (NOTE) Some attributes are not given arguments in this group but can be
+     set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN
+          ID of the multicast domain or fully qualified identifier for the
+          multicast domain.
+
+          To set the multicast_domain attribute:
+          ▸ provide the argument multicast_domain on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domains delete
+
diff --git a/gcloud/beta/network-services/multicast-domains/describe b/gcloud/beta/network-services/multicast-domains/describe
new file mode 100644
index 000000000..eff0cbe12
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domains/describe
@@ -0,0 +1,68 @@
+NAME
+    gcloud beta network-services multicast-domains describe - describe a
+        multicast domain
+
+SYNOPSIS
+    gcloud beta network-services multicast-domains describe
+        (MULTICAST_DOMAIN : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast domain in the specified location of the
+    current project.
+
+EXAMPLES
+    To describe details of a multicast domain in the current project, run:
+
+        $ gcloud beta network-services multicast-domains describe \
+            my-multicast-domain --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast domain resource - The multicast domain to display. The arguments
+     in this group can be used to specify the attributes of this resource.
+     (NOTE) Some attributes are not given arguments in this group but can be
+     set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_domain on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_DOMAIN
+          ID of the multicast domain or fully qualified identifier for the
+          multicast domain.
+
+          To set the multicast_domain attribute:
+          ▸ provide the argument multicast_domain on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_domain on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domains describe
+
diff --git a/gcloud/beta/network-services/multicast-domains/help b/gcloud/beta/network-services/multicast-domains/help
new file mode 100644
index 000000000..f8d3b8584
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domains/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-domains - manage Network Services
+        MulticastDomains
+
+SYNOPSIS
+    gcloud beta network-services multicast-domains COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastDomains.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast domain.
+
+     delete
+        (BETA) Delete a multicast domain.
+
+     describe
+        (BETA) Describe a multicast domain.
+
+     list
+        (BETA) List multicast domains.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domains
+
diff --git a/gcloud/beta/network-services/multicast-domains/list b/gcloud/beta/network-services/multicast-domains/list
new file mode 100644
index 000000000..feacbb772
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-domains/list
@@ -0,0 +1,88 @@
+NAME
+    gcloud beta network-services multicast-domains list - list multicast
+        domains
+
+SYNOPSIS
+    gcloud beta network-services multicast-domains list --location=LOCATION
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast domains in the specified location of the current
+    project.
+
+EXAMPLES
+    To list multicast domains in the current project, run:
+
+        $ gcloud beta network-services multicast-domains list \
+            --location=global
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast domains to display. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-domains list
+
diff --git a/gcloud/beta/network-services/multicast-group-consumer-activations/create b/gcloud/beta/network-services/multicast-group-consumer-activations/create
new file mode 100644
index 000000000..ffccc1d50
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-consumer-activations/create
@@ -0,0 +1,103 @@
+NAME
+    gcloud beta network-services multicast-group-consumer-activations create -
+        create a multicast group consumer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-consumer-activations create
+        (MULTICAST_GROUP_CONSUMER_ACTIVATION : --location=LOCATION)
+        --multicast-consumer-association=MULTICAST_CONSUMER_ASSOCIATION
+        [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast group consumer activation in the specified
+    location of the current project.
+
+EXAMPLES
+    Create a multicast group consumer activation with the name
+    'my-multicast-group-consumer-activation', multicast-consumer-association
+    'path-to-mca', multicast-group-range-activation
+    'path-to-mg-range-activation' and location 'zone'.
+
+    $ gcloud beta network-services \        multicast-group-consumer-activations create \
+        my-multicast-group-consumer-activation \
+        --multicast-consumer-association=path-to-mca \
+        --multicast-group-range-activation=path-to-mg-range-activation \
+        --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group consumer activation resource - Name of the multicast group
+     consumer activation to be created. The arguments in this group can be used
+     to specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_consumer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_CONSUMER_ACTIVATION
+          ID of the multicast group consumer activation or fully qualified
+          identifier for the multicast group consumer activation.
+
+          To set the multicast_group_consumer_activation attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-consumer-association=MULTICAST_CONSUMER_ASSOCIATION
+        The multicast consumer association to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group consumer activation.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     --multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION
+        The multicast group range activation to be used.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-consumer-activations create
+
diff --git a/gcloud/beta/network-services/multicast-group-consumer-activations/delete b/gcloud/beta/network-services/multicast-group-consumer-activations/delete
new file mode 100644
index 000000000..115329938
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-consumer-activations/delete
@@ -0,0 +1,78 @@
+NAME
+    gcloud beta network-services multicast-group-consumer-activations delete -
+        delete a multicast group consumer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-consumer-activations delete
+        (MULTICAST_GROUP_CONSUMER_ACTIVATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast group consumer activation in the specified
+    location of the current project.
+
+EXAMPLES
+    To delete a multicast group consumer activation in the current project,
+    run:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations delete \
+            my-multicast-group-consumer-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group consumer activation resource - The multicast group
+     consumer activation to delete. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_consumer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_CONSUMER_ACTIVATION
+          ID of the multicast group consumer activation or fully qualified
+          identifier for the multicast group consumer activation.
+
+          To set the multicast_group_consumer_activation attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-consumer-activations delete
+
diff --git a/gcloud/beta/network-services/multicast-group-consumer-activations/describe b/gcloud/beta/network-services/multicast-group-consumer-activations/describe
new file mode 100644
index 000000000..d80ee3762
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-consumer-activations/describe
@@ -0,0 +1,73 @@
+NAME
+    gcloud beta network-services multicast-group-consumer-activations describe
+        - describe a multicast group consumer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-consumer-activations describe
+        (MULTICAST_GROUP_CONSUMER_ACTIVATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast group consumer activation in the
+    specified location of the current project.
+
+EXAMPLES
+    To describe details of a multicast group consumer activation in the current
+    project and location, run:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations describe \
+            my-multicast-group-consumer-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group consumer activation resource - The multicast group
+     consumer activation to display. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_consumer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_CONSUMER_ACTIVATION
+          ID of the multicast group consumer activation or fully qualified
+          identifier for the multicast group consumer activation.
+
+          To set the multicast_group_consumer_activation attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_consumer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-consumer-activations describe
+
diff --git a/gcloud/beta/network-services/multicast-group-consumer-activations/help b/gcloud/beta/network-services/multicast-group-consumer-activations/help
new file mode 100644
index 000000000..8d63f8c53
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-consumer-activations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-group-consumer-activations - manage
+        Network Services MulticastGroupConsumerActivations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-consumer-activations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastGroupConsumerActivations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast group consumer activation.
+
+     delete
+        (BETA) Delete a multicast group consumer activation.
+
+     describe
+        (BETA) Describe a multicast group consumer activation.
+
+     list
+        (BETA) List multicast group consumer activations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-consumer-activations
+
diff --git a/gcloud/beta/network-services/multicast-group-consumer-activations/list b/gcloud/beta/network-services/multicast-group-consumer-activations/list
new file mode 100644
index 000000000..79d908b94
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-consumer-activations/list
@@ -0,0 +1,91 @@
+NAME
+    gcloud beta network-services multicast-group-consumer-activations list -
+        list multicast group consumer activations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-consumer-activations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast group consumer activations in the specified
+    location of the current project.
+
+EXAMPLES
+    To list multicast group consumer activations in the current project and
+    location, run:
+
+        $ gcloud beta network-services \
+            multicast-group-consumer-activations list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast consumer associations to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-consumer-activations list
+
diff --git a/gcloud/beta/network-services/multicast-group-producer-activations/create b/gcloud/beta/network-services/multicast-group-producer-activations/create
new file mode 100644
index 000000000..6eab771ac
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-producer-activations/create
@@ -0,0 +1,103 @@
+NAME
+    gcloud beta network-services multicast-group-producer-activations create -
+        create a multicast group producer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-producer-activations create
+        (MULTICAST_GROUP_PRODUCER_ACTIVATION : --location=LOCATION)
+        --multicast-producer-association=MULTICAST_PRODUCER_ASSOCIATION
+        [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [--multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast group producer activation in the specified
+    location of the current project.
+
+EXAMPLES
+    Create a multicast group producer activation with the name
+    'my-multicast-group-producer-activation', multicast-producer-association
+    'path-to-mpa', multicast-group-range-activation
+    'path-to-mg-range-activation', and location 'zone'.
+
+    $ gcloud beta network-services \        multicast-group-producer-activations create \
+        my-multicast-group-producer-activation \
+        --multicast-producer-association=path-to-mpa \
+        --multicast-group-range-activation=path-to-mg-range-activation \
+        --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group producer activation resource - Name of the multicast group
+     producer activation to be created. The arguments in this group can be used
+     to specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_producer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_PRODUCER_ACTIVATION
+          ID of the multicast group producer activation or fully qualified
+          identifier for the multicast group producer activation.
+
+          To set the multicast_group_producer_activation attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-producer-association=MULTICAST_PRODUCER_ASSOCIATION
+        The multicast producer association to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group producer activation.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     --multicast-group-range-activation=MULTICAST_GROUP_RANGE_ACTIVATION
+        The multicast group range activation to be used.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-producer-activations create
+
diff --git a/gcloud/beta/network-services/multicast-group-producer-activations/delete b/gcloud/beta/network-services/multicast-group-producer-activations/delete
new file mode 100644
index 000000000..05b15b35a
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-producer-activations/delete
@@ -0,0 +1,78 @@
+NAME
+    gcloud beta network-services multicast-group-producer-activations delete -
+        delete a multicast group producer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-producer-activations delete
+        (MULTICAST_GROUP_PRODUCER_ACTIVATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast group producer activation in the specified
+    location of the current project.
+
+EXAMPLES
+    To delete a multicast group producer activation in the current project,
+    run:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations delete \
+            my-multicast-group-producer-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group producer activation resource - The multicast group
+     producer activation to delete. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_producer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_PRODUCER_ACTIVATION
+          ID of the multicast group producer activation or fully qualified
+          identifier for the multicast group producer activation.
+
+          To set the multicast_group_producer_activation attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-producer-activations delete
+
diff --git a/gcloud/beta/network-services/multicast-group-producer-activations/describe b/gcloud/beta/network-services/multicast-group-producer-activations/describe
new file mode 100644
index 000000000..ccf7509d1
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-producer-activations/describe
@@ -0,0 +1,73 @@
+NAME
+    gcloud beta network-services multicast-group-producer-activations describe
+        - describe a multicast group producer activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-producer-activations describe
+        (MULTICAST_GROUP_PRODUCER_ACTIVATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicastgroup producer activation in the
+    specified location of the current project.
+
+EXAMPLES
+    To describe details of a multicast group producer activation in the current
+    project and location, run:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations describe \
+            my-multicast-group-producer-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group producer activation resource - The multicast group
+     producer activation to display. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_producer_activation on the
+        command line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_PRODUCER_ACTIVATION
+          ID of the multicast group producer activation or fully qualified
+          identifier for the multicast group producer activation.
+
+          To set the multicast_group_producer_activation attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_producer_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-producer-activations describe
+
diff --git a/gcloud/beta/network-services/multicast-group-producer-activations/help b/gcloud/beta/network-services/multicast-group-producer-activations/help
new file mode 100644
index 000000000..ecfbcab99
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-producer-activations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-group-producer-activations - manage
+        Network Services MulticastGroupProducerActivations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-producer-activations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastGroupProducerActivations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast group producer activation.
+
+     delete
+        (BETA) Delete a multicast group producer activation.
+
+     describe
+        (BETA) Describe a multicast group producer activation.
+
+     list
+        (BETA) List multicast group producer activations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-producer-activations
+
diff --git a/gcloud/beta/network-services/multicast-group-producer-activations/list b/gcloud/beta/network-services/multicast-group-producer-activations/list
new file mode 100644
index 000000000..e4ab08e05
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-producer-activations/list
@@ -0,0 +1,91 @@
+NAME
+    gcloud beta network-services multicast-group-producer-activations list -
+        list multicast group producer activations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-producer-activations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast group producer activations in the specified
+    location of the current project.
+
+EXAMPLES
+    To list multicast group producer activations in the current project and
+    location, run:
+
+        $ gcloud beta network-services \
+            multicast-group-producer-activations list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast producer associations to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services \
+            multicast-group-producer-activations list
+
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/create b/gcloud/beta/network-services/multicast-group-range-activations/create
new file mode 100644
index 000000000..108ebfe9b
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/create
@@ -0,0 +1,101 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations create -
+        create a multicast group range activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations create
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION)
+        --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        --multicast-group-range=MULTICAST_GROUP_RANGE [--async]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    Create a multicast group range activation with the name
+    'my-mg-range-activation', multicast-group-range 'path-to-mgr',
+    multicast-domain-activation 'path-to-mda', and location 'zone'.
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            create my-mg-range-activation \
+            --multicast-group-range=path-to-mgr \
+            --multicast-domain-activation=path-to-mda --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - Name of the multicast group
+     range activation to be created. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        The multicast domain activation to be used.
+
+     --multicast-group-range=MULTICAST_GROUP_RANGE
+        The multicast group range to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast group.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            create
+
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/delete b/gcloud/beta/network-services/multicast-group-range-activations/delete
new file mode 100644
index 000000000..37006b875
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/delete
@@ -0,0 +1,76 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations delete -
+        delete a multicast group range activation
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations delete
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast group range activation in the specified location
+    of the current project.
+
+EXAMPLES
+    To delete a multicast group range activation in the current project, run:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            delete my-mg-range-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - The multicast group range
+     activation to delete. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            delete
+
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/describe b/gcloud/beta/network-services/multicast-group-range-activations/describe
new file mode 100644
index 000000000..16cabe874
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/describe
@@ -0,0 +1,72 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations describe -
+        describe a multicast group range activations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations describe
+        (MULTICAST_GROUP_RANGE_ACTIVATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast group range activation in the specified
+    location of the current project.
+
+EXAMPLES
+    To describe details of a multicast group range activation in the current
+    project and location, run:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            describe my-mg-range-activation --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast group range activation resource - The multicast group range
+     activation to display. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range_activation on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE_ACTIVATION
+          ID of the multicast group range activation or fully qualified
+          identifier for the multicast group range activation.
+
+          To set the multicast_group_range_activation attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range_activation on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            describe
+
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/help b/gcloud/beta/network-services/multicast-group-range-activations/help
new file mode 100644
index 000000000..341ca8d21
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations - manage
+        Network Services MulticastGroupRangeActivations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastGroupRangeActivations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast group range activation.
+
+     delete
+        (BETA) Delete a multicast group range activation.
+
+     describe
+        (BETA) Describe a multicast group range activations.
+
+     list
+        (BETA) List multicast group range activations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations
+
diff --git a/gcloud/beta/network-services/multicast-group-range-activations/list b/gcloud/beta/network-services/multicast-group-range-activations/list
new file mode 100644
index 000000000..23d2ace2b
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-range-activations/list
@@ -0,0 +1,91 @@
+NAME
+    gcloud beta network-services multicast-group-range-activations list - list
+        multicast group range activations
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-range-activations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast group range activations in the specified location
+    of the current project.
+
+EXAMPLES
+    To list multicast group range activations in the current project and
+    location, run:
+
+        $ gcloud beta network-services multicast-group-range-activations \
+            list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast groups to display. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-range-activations \
+            list
+
diff --git a/gcloud/beta/network-services/multicast-group-ranges/create b/gcloud/beta/network-services/multicast-group-ranges/create
new file mode 100644
index 000000000..42ae48dd7
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-ranges/create
@@ -0,0 +1,103 @@
+NAME
+    gcloud beta network-services multicast-group-ranges create - create a
+        multicast group range
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-ranges create
+        (MULTICAST_GROUP_RANGE : --location=LOCATION)
+        --multicast-domain=MULTICAST_DOMAIN
+        --reserved-internal-range=RESERVED_INTERNAL_RANGE [--async]
+        [--consumer-accept-list=[CONSUMER_ACCEPT_LIST,...]]
+        [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast group range in the specified location of the
+    current project.
+
+EXAMPLES
+    Create a multicast group range with the name 'my-multicast-group-range',
+    reserved-internal-range 'path-to-ir', multicast-domain 'path-to-md', and
+    location 'global'.
+
+        $ gcloud beta network-services multicast-group-ranges create \
+            my-multicast-group-range --reserved-internal-range=path-to-ir \
+            --multicast-domain=path-to-md --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - Name of the multicast group range to be
+     created. The arguments in this group can be used to specify the attributes
+     of this resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain=MULTICAST_DOMAIN
+        The multicast domain to be used.
+
+     --reserved-internal-range=RESERVED_INTERNAL_RANGE
+        The reserved internal range to be used.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --consumer-accept-list=[CONSUMER_ACCEPT_LIST,...]
+        An optional list of consumer projects that can use this multicast group
+        range.
+
+     --description=DESCRIPTION
+        The description for the multicast group range.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-ranges create
+
diff --git a/gcloud/beta/network-services/multicast-group-ranges/delete b/gcloud/beta/network-services/multicast-group-ranges/delete
new file mode 100644
index 000000000..438c6e717
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-ranges/delete
@@ -0,0 +1,74 @@
+NAME
+    gcloud beta network-services multicast-group-ranges delete - delete a
+        multicast group range
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-ranges delete
+        (MULTICAST_GROUP_RANGE : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast group range in the specified location of the
+    current project.
+
+EXAMPLES
+    To delete a multicast group range in the current project, run:
+
+        $ gcloud beta network-services multicast-group-ranges delete \
+            my-multicast-group-range --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - The multicast group range to delete. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-ranges delete
+
diff --git a/gcloud/beta/network-services/multicast-group-ranges/describe b/gcloud/beta/network-services/multicast-group-ranges/describe
new file mode 100644
index 000000000..e0a31557a
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-ranges/describe
@@ -0,0 +1,68 @@
+NAME
+    gcloud beta network-services multicast-group-ranges describe - describe a
+        multicast group range
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-ranges describe
+        (MULTICAST_GROUP_RANGE : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast group range in the specified location of
+    the current project.
+
+EXAMPLES
+    To describe a multicast group range in the current project, run:
+
+        $ gcloud beta network-services multicast-group-ranges describe \
+            my-multicast-group-range --location=global
+
+POSITIONAL ARGUMENTS
+     Multicast group range resource - The multicast group range to display. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_group_range on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_GROUP_RANGE
+          ID of the multicast group range or fully qualified identifier for the
+          multicast group range.
+
+          To set the multicast_group_range attribute:
+          ▸ provide the argument multicast_group_range on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_group_range on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-ranges describe
+
diff --git a/gcloud/beta/network-services/multicast-group-ranges/help b/gcloud/beta/network-services/multicast-group-ranges/help
new file mode 100644
index 000000000..d89b39702
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-ranges/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-group-ranges - manage Network
+        Services MulticastGroupRanges
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-ranges COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastGroupRanges.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast group range.
+
+     delete
+        (BETA) Delete a multicast group range.
+
+     describe
+        (BETA) Describe a multicast group range.
+
+     list
+        (BETA) List multicast group ranges.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-ranges
+
diff --git a/gcloud/beta/network-services/multicast-group-ranges/list b/gcloud/beta/network-services/multicast-group-ranges/list
new file mode 100644
index 000000000..86d673c19
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-group-ranges/list
@@ -0,0 +1,89 @@
+NAME
+    gcloud beta network-services multicast-group-ranges list - list multicast
+        group ranges
+
+SYNOPSIS
+    gcloud beta network-services multicast-group-ranges list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast group ranges in the specified location of the
+    current project.
+
+EXAMPLES
+    To list multicast group ranges in the current project, run:
+
+        $ gcloud beta network-services multicast-group-ranges list \
+            --location=global
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast group ranges to display.
+     This represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-group-ranges list
+
diff --git a/gcloud/beta/network-services/multicast-producer-associations/create b/gcloud/beta/network-services/multicast-producer-associations/create
new file mode 100644
index 000000000..38de1c105
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-producer-associations/create
@@ -0,0 +1,100 @@
+NAME
+    gcloud beta network-services multicast-producer-associations create -
+        create a multicast producer association
+
+SYNOPSIS
+    gcloud beta network-services multicast-producer-associations create
+        (MULTICAST_PRODUCER_ASSOCIATION : --location=LOCATION)
+        --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        --network=NETWORK [--async] [--description=DESCRIPTION]
+        [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Create a multicast producer association in the specified location of
+    the current project.
+
+EXAMPLES
+    Create a multicast producer association with the name
+    'my-multicast-producer-association', multicast-domain-activation
+    'path-to-mda', network 'path-to-network', and location 'zone'.
+
+        $ gcloud beta network-services multicast-producer-associations \
+            create my-multicast-producer-association \
+            --multicast-domain-activation=path-to-mda \
+            --network=path-to-network --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast producer association resource - Name of the multicast producer
+     association to be created. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_producer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_PRODUCER_ASSOCIATION
+          ID of the multicast producer association or fully qualified
+          identifier for the multicast producer association.
+
+          To set the multicast_producer_association attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+REQUIRED FLAGS
+     --multicast-domain-activation=MULTICAST_DOMAIN_ACTIVATION
+        The multicast domain activation to be used.
+
+     --network=NETWORK
+        The path of the multicast producer VPC network.
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        The description for the multicast producer association.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-producer-associations \
+            create
+
diff --git a/gcloud/beta/network-services/multicast-producer-associations/delete b/gcloud/beta/network-services/multicast-producer-associations/delete
new file mode 100644
index 000000000..6daa73970
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-producer-associations/delete
@@ -0,0 +1,76 @@
+NAME
+    gcloud beta network-services multicast-producer-associations delete -
+        delete a multicast producer association
+
+SYNOPSIS
+    gcloud beta network-services multicast-producer-associations delete
+        (MULTICAST_PRODUCER_ASSOCIATION : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Delete a multicast producer association in the specified location of
+    the current project.
+
+EXAMPLES
+    To delete a multicast producer association in the current project, run:
+
+        $ gcloud beta network-services multicast-producer-associations \
+            delete my-multicast-producer-association --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast producer association resource - The multicast producer
+     association to delete. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_producer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_PRODUCER_ASSOCIATION
+          ID of the multicast producer association or fully qualified
+          identifier for the multicast producer association.
+
+          To set the multicast_producer_association attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-producer-associations \
+            delete
+
diff --git a/gcloud/beta/network-services/multicast-producer-associations/describe b/gcloud/beta/network-services/multicast-producer-associations/describe
new file mode 100644
index 000000000..bb8db484d
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-producer-associations/describe
@@ -0,0 +1,72 @@
+NAME
+    gcloud beta network-services multicast-producer-associations describe -
+        describe a multicast producer associations
+
+SYNOPSIS
+    gcloud beta network-services multicast-producer-associations describe
+        (MULTICAST_PRODUCER_ASSOCIATION : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Show details of a multicast producer association in the specified
+    location of the current project.
+
+EXAMPLES
+    To describe details of a multicast producer association in the current
+    project and location, run:
+
+        $ gcloud beta network-services multicast-producer-associations \
+            describe my-multicast-producer-association --location=zone
+
+POSITIONAL ARGUMENTS
+     Multicast producer association resource - The multicast producer
+     association to display. The arguments in this group can be used to specify
+     the attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument multicast_producer_association on the command
+        line with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       MULTICAST_PRODUCER_ASSOCIATION
+          ID of the multicast producer association or fully qualified
+          identifier for the multicast producer association.
+
+          To set the multicast_producer_association attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          The location Id.
+
+          To set the location attribute:
+          ▸ provide the argument multicast_producer_association on the
+            command line with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-producer-associations \
+            describe
+
diff --git a/gcloud/beta/network-services/multicast-producer-associations/help b/gcloud/beta/network-services/multicast-producer-associations/help
new file mode 100644
index 000000000..f57c1dc52
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-producer-associations/help
@@ -0,0 +1,37 @@
+NAME
+    gcloud beta network-services multicast-producer-associations - manage
+        Network Services MulticastProducerAssociations
+
+SYNOPSIS
+    gcloud beta network-services multicast-producer-associations COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Network Services MulticastProducerAssociations.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (BETA) Create a multicast producer association.
+
+     delete
+        (BETA) Delete a multicast producer association.
+
+     describe
+        (BETA) Describe a multicast producer associations.
+
+     list
+        (BETA) List multicast producer associations.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-producer-associations
+
diff --git a/gcloud/beta/network-services/multicast-producer-associations/list b/gcloud/beta/network-services/multicast-producer-associations/list
new file mode 100644
index 000000000..10b20153f
--- /dev/null
+++ b/gcloud/beta/network-services/multicast-producer-associations/list
@@ -0,0 +1,90 @@
+NAME
+    gcloud beta network-services multicast-producer-associations list - list
+        multicast producer associations
+
+SYNOPSIS
+    gcloud beta network-services multicast-producer-associations list
+        --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) List all multicast producer associations in the specified location
+    of the current project.
+
+EXAMPLES
+    To list multicast producer associations in the current project and
+    location, run:
+
+        $ gcloud beta network-services multicast-producer-associations \
+            list --location=zone
+
+REQUIRED FLAGS
+     Location resource - The location of the multicast producer associations to
+     display. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location.
+
+          To set the location attribute:
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the networkservices/v1beta1 API. The full documentation
+    for this API can be found at: https://cloud.google.com/networking
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha network-services multicast-producer-associations list
+
diff --git a/gcloud/beta/resource-manager/tags/keys/create b/gcloud/beta/resource-manager/tags/keys/create
index 3d1dfdee8..fc1633d75 100644
--- a/gcloud/beta/resource-manager/tags/keys/create
+++ b/gcloud/beta/resource-manager/tags/keys/create
@@ -5,7 +5,7 @@ NAME
 SYNOPSIS
     gcloud beta resource-manager tags keys create (SHORT_NAME --parent=PARENT)
         [--async] [--description=DESCRIPTION] [--purpose=PURPOSE]
-        [--purpose-data=[organization],[network=NETWORK]]
+        [--purpose-data=[network=NETWORK],[organization=ORGANIZATION]]
         [GCLOUD_WIDE_FLAG ...]
 
 EXAMPLES
@@ -50,7 +50,7 @@ FLAGS
         that corresponds to the purpose. PURPOSE must be one of: GCE_FIREWALL,
         DATA_GOVERNANCE.
 
-     --purpose-data=[organization],[network=NETWORK]
+     --purpose-data=[network=NETWORK],[organization=ORGANIZATION]
         Purpose data of the TagKey that can only be set on creation. This data
         is validated by the policy system that corresponds to the purpose.
 
diff --git a/gcloud/compute/instance-templates/create-with-container b/gcloud/compute/instance-templates/create-with-container
index a25b34740..62cdf40be 100644
--- a/gcloud/compute/instance-templates/create-with-container
+++ b/gcloud/compute/instance-templates/create-with-container
@@ -567,7 +567,8 @@ FLAGS
 
          stack-type
             Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
-            be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
+            be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is
+            IPV4_ONLY.
 
          ipv6-network-tier
             Specifies the IPv6 network tier that will be used to configure the
@@ -709,6 +710,8 @@ FLAGS
             The network interface can have both IPv4 and IPv6 addresses
          IPV4_ONLY
             The network interface will be assigned IPv4 addresses
+         IPV6_ONLY
+            The network interface will be assigned IPv6 addresses
 
      --subnet=SUBNET
         Specifies the subnet that the VM instances are a part of. If --network
diff --git a/gcloud/compute/instances/create-with-container b/gcloud/compute/instances/create-with-container
index f101c38da..9cab660f1 100644
--- a/gcloud/compute/instances/create-with-container
+++ b/gcloud/compute/instances/create-with-container
@@ -660,7 +660,8 @@ FLAGS
 
          stack-type
             Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
-            be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
+            be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is
+            IPV4_ONLY.
 
          ipv6-network-tier
             Specifies the IPv6 network tier that will be used to configure the
@@ -813,6 +814,8 @@ FLAGS
             The network interface can have both IPv4 and IPv6 addresses
          IPV4_ONLY
             The network interface will be assigned IPv4 addresses
+         IPV6_ONLY
+            The network interface will be assigned IPv6 addresses
 
      --subnet=SUBNET
         Specifies the subnet that the VM instances are a part of. If --network
diff --git a/gcloud/compute/security-policies/rules/create b/gcloud/compute/security-policies/rules/create
index 56856259f..38592694c 100644
--- a/gcloud/compute/security-policies/rules/create
+++ b/gcloud/compute/security-policies/rules/create
@@ -19,8 +19,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-redirect-target=EXCEED_REDIRECT_TARGET]
@@ -182,11 +183,14 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -207,6 +211,8 @@ OPTIONAL FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/compute/security-policies/rules/update b/gcloud/compute/security-policies/rules/update
index 521493bc3..baea62d36 100644
--- a/gcloud/compute/security-policies/rules/update
+++ b/gcloud/compute/security-policies/rules/update
@@ -10,8 +10,9 @@ SYNOPSIS
         [--conform-action=CONFORM_ACTION] [--description=DESCRIPTION]
         [--enforce-on-key=ENFORCE_ON_KEY]
         [--enforce-on-key-configs=[[all],[ip],[xff-ip],
-          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],
-          [sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]]
+          [http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],
+          [region-code],
+          [tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]]
         [--enforce-on-key-name=ENFORCE_ON_KEY_NAME]
         [--exceed-action=EXCEED_ACTION]
         [--exceed-redirect-target=EXCEED_REDIRECT_TARGET]
@@ -133,11 +134,14 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         ENFORCE_ON_KEY must be one of: ip, all, http-header, xff-ip,
-        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip.
+        http-cookie, http-path, sni, region-code, tls-ja3-fingerprint, user-ip,
+        tls-ja4-fingerprint.
 
-     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip]],[...]
+     --enforce-on-key-configs=[[all],[ip],[xff-ip],[http-cookie=HTTP_COOKIE],[http-header=HTTP_HEADER],[http-path],[sni],[region-code],[tls-ja3-fingerprint],[user-ip],[tls-ja4-fingerprint]],[...]
         Specify up to 3 key type/name pairs to rate limit. Valid key types are:
 
         ◆ ip: each client IP address has this limit enforced separately
@@ -158,6 +162,8 @@ FLAGS
         ◆ user-ip: key type takes the IP address of the originating client,
           which is resolved based on user-ip-request-headers configured with
           the security policy
+        ◆ tls-ja4-fingerprint: key type takes the value of JA4 TLS/SSL
+          fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3
 
         Key names are only applicable to the following key types:
         ◆ http-header: The name of the HTTP header whose value is taken as
diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create
index e13c96ab1..3d14a3543 100644
--- a/gcloud/container/clusters/create
+++ b/gcloud/container/clusters/create
@@ -585,10 +585,20 @@ FLAGS
         IP if --enable-private-endpoint is not enabled.
 
      --enable-ip-alias
-        Enable use of alias IPs
-        (https://cloud.google.com/compute/docs/alias-ip/) for Pod IPs. This
-        will require at least two secondary ranges in the subnetwork, one for
-        the pod IPs and another to reserve space for the services range.
+        --enable-ip-alias creates a VPC-native cluster. If you set this option,
+        you can optionally specify the IP address ranges to use for Pods and
+        Services. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/alias-ips.
+
+        --no-enable-ip-alias creates a routes-based cluster. This type of
+        cluster routes traffic between Pods using Google Cloud Routes. This
+        option is not recommended; use the default VPC-native cluster type
+        instead. For instructions, see
+        https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
+
+        You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
+        you omit both --enable-ip-alias and --no-enable-ip-alias, the default
+        is a VPC-native cluster.
 
      --enable-kubernetes-alpha
         Enable Kubernetes alpha features on this cluster. Selecting this option
diff --git a/gcloud/database-migration/connection-profiles/create/mysql b/gcloud/database-migration/connection-profiles/create/mysql
index 585b16ae2..f8a6223be 100644
--- a/gcloud/database-migration/connection-profiles/create/mysql
+++ b/gcloud/database-migration/connection-profiles/create/mysql
@@ -7,8 +7,8 @@ SYNOPSIS
         (CONNECTION_PROFILE : --region=REGION) [--no-async]
         [--cloudsql-instance=CLOUDSQL_INSTANCE] [--display-name=DISPLAY_NAME]
         [--labels=[KEY=VALUE,...]] [--provider=PROVIDER] [--role=ROLE]
-        [--ca-certificate=CA_CERTIFICATE
-          : --client-certificate=CLIENT_CERTIFICATE --private-key=PRIVATE_KEY]
+        [--ca-certificate=CA_CERTIFICATE : --ssl-type=SSL_TYPE
+          --client-certificate=CLIENT_CERTIFICATE --private-key=PRIVATE_KEY]
         [--host=HOST --port=PORT --username=USERNAME : --password=PASSWORD
           | --prompt-for-password] [GCLOUD_WIDE_FLAG ...]
 
@@ -100,6 +100,10 @@ FLAGS
         connecting to the correct host. Database Migration Service encrypts the
         value when storing it.
 
+     --ssl-type=SSL_TYPE
+        The type of SSL configuration. SSL_TYPE must be one of: SERVER_ONLY,
+        SERVER_CLIENT, REQUIRED, NONE.
+
      --client-certificate=CLIENT_CERTIFICATE
         x509 PEM-encoded certificate that will be used by the replica to
         authenticate against the database server. The value for this flag needs
diff --git a/gcloud/database-migration/connection-profiles/create/postgresql b/gcloud/database-migration/connection-profiles/create/postgresql
index 4ce7aea25..9bf34ed7e 100644
--- a/gcloud/database-migration/connection-profiles/create/postgresql
+++ b/gcloud/database-migration/connection-profiles/create/postgresql
@@ -8,8 +8,8 @@ SYNOPSIS
         [--alloydb-cluster=ALLOYDB_CLUSTER] [--no-async]
         [--cloudsql-instance=CLOUDSQL_INSTANCE] [--display-name=DISPLAY_NAME]
         [--labels=[KEY=VALUE,...]] [--role=ROLE]
-        [--ca-certificate=CA_CERTIFICATE
-          : --client-certificate=CLIENT_CERTIFICATE --private-key=PRIVATE_KEY]
+        [--ca-certificate=CA_CERTIFICATE : --ssl-type=SSL_TYPE
+          --client-certificate=CLIENT_CERTIFICATE --private-key=PRIVATE_KEY]
         [--host=HOST --port=PORT --username=USERNAME (--password=PASSWORD
           | --prompt-for-password)]
         [--psc-service-attachment=PSC_SERVICE_ATTACHMENT
@@ -103,6 +103,10 @@ FLAGS
         connecting to the correct host. Database Migration Service encrypts the
         value when storing it.
 
+     --ssl-type=SSL_TYPE
+        The type of SSL configuration. SSL_TYPE must be one of: SERVER_ONLY,
+        SERVER_CLIENT, REQUIRED, NONE.
+
      --client-certificate=CLIENT_CERTIFICATE
         x509 PEM-encoded certificate that will be used by the replica to
         authenticate against the database server. The value for this flag needs
diff --git a/gcloud/database-migration/connection-profiles/update b/gcloud/database-migration/connection-profiles/update
index da5039934..e89bbaa36 100644
--- a/gcloud/database-migration/connection-profiles/update
+++ b/gcloud/database-migration/connection-profiles/update
@@ -11,8 +11,8 @@ SYNOPSIS
         [--cloudsql-project-id=CLOUDSQL_PROJECT_ID]
         [--database-service=DATABASE_SERVICE] [--display-name=DISPLAY_NAME]
         [--host=HOST] [--port=PORT] [--private-key=PRIVATE_KEY]
-        [--update-labels=[KEY=VALUE,...]] [--username=USERNAME]
-        [--clear-labels | --remove-labels=[KEY,...]]
+        [--ssl-type=SSL_TYPE] [--update-labels=[KEY=VALUE,...]]
+        [--username=USERNAME] [--clear-labels | --remove-labels=[KEY,...]]
         [--gcs-bucket=GCS_BUCKET : --gcs-prefix=GCS_PREFIX]
         [--password=PASSWORD | --prompt-for-password] [GCLOUD_WIDE_FLAG ...]
 
@@ -121,6 +121,10 @@ FLAGS
         <code>--ca-certificate=$(</path/to/certificate_file.pem)</code>.
         Database Migration Service encrypts the value when storing it.
 
+     --ssl-type=SSL_TYPE
+        The type of SSL configuration. SSL_TYPE must be one of: SERVER_ONLY,
+        SERVER_CLIENT, REQUIRED, NONE.
+
      --update-labels=[KEY=VALUE,...]
         List of label KEY=VALUE pairs to update. If a label exists, its value
         is modified. Otherwise, a new label is created.
diff --git a/gcloud/dataflow/flex-template/run b/gcloud/dataflow/flex-template/run
index da277067c..095148681 100644
--- a/gcloud/dataflow/flex-template/run
+++ b/gcloud/dataflow/flex-template/run
@@ -8,6 +8,7 @@ SYNOPSIS
         [--additional-user-labels=[ADDITIONAL_USER_LABELS,...]]
         [--dataflow-kms-key=DATAFLOW_KMS_KEY] [--disable-public-ips]
         [--enable-streaming-engine] [--flexrs-goal=FLEXRS_GOAL]
+        [--launcher-machine-type=LAUNCHER_MACHINE_TYPE]
         [--max-workers=MAX_WORKERS] [--network=NETWORK]
         [--num-workers=NUM_WORKERS] [--parameters=[PARAMETERS,...]]
         [--region=REGION_ID] [--service-account-email=SERVICE_ACCOUNT_EMAIL]
@@ -64,6 +65,10 @@ OPTIONAL FLAGS
         FlexRS goal for the flex template job. FLEXRS_GOAL must be one of:
         COST_OPTIMIZED, SPEED_OPTIMIZED.
 
+     --launcher-machine-type=LAUNCHER_MACHINE_TYPE
+        The machine type to use for launching the job. The default
+        isn1-standard-1.
+
      --max-workers=MAX_WORKERS
         Maximum number of workers to run.
 
diff --git a/gcloud/datastream/connection-profiles/create b/gcloud/datastream/connection-profiles/create
index 9991ea4ce..5cd050cd9 100644
--- a/gcloud/datastream/connection-profiles/create
+++ b/gcloud/datastream/connection-profiles/create
@@ -15,12 +15,15 @@ SYNOPSIS
           --mysql-username=MYSQL_USERNAME (--mysql-password=MYSQL_PASSWORD
           | --mysql-prompt-for-password) : --ca-certificate=CA_CERTIFICATE
           --client-certificate=CLIENT_CERTIFICATE --client-key=CLIENT_KEY]
-          | --postgresql-database=POSTGRESQL_DATABASE
+          | [--postgresql-database=POSTGRESQL_DATABASE
           --postgresql-hostname=POSTGRESQL_HOSTNAME
           --postgresql-port=POSTGRESQL_PORT
           --postgresql-username=POSTGRESQL_USERNAME
           (--postgresql-password=POSTGRESQL_PASSWORD
           | --postgresql-prompt-for-password)
+          : [--postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          : --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          --postgresql-client-key=POSTGRESQL_CLIENT_KEY]]
           | --sqlserver-database=SQLSERVER_DATABASE
           --sqlserver-hostname=SQLSERVER_HOSTNAME
           --sqlserver-port=SQLSERVER_PORT
@@ -258,6 +261,28 @@ OPTIONAL FLAGS
          --postgresql-prompt-for-password
             Prompt for the password used to connect to the database.
 
+       --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          x509 PEM-encoded certificate of the CA that signed the source
+          database server's certificate. The replica will use this certificate
+          to verify it's connecting to the right host.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          x509 PEM-encoded certificate that will be used by the replica to
+          authenticate against the source database server.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
+       --postgresql-client-key=POSTGRESQL_CLIENT_KEY
+          Unencrypted PKCS#1 or PKCS#8 PEM-encoded private key associated with
+          the Client Certificate.
+
+          This flag argument must be specified if any of the other arguments in
+          this group are specified.
+
        --sqlserver-database=SQLSERVER_DATABASE
           Database service for the SQL Server connection.
 
diff --git a/gcloud/datastream/connection-profiles/update b/gcloud/datastream/connection-profiles/update
index ff45aac68..e4c21900a 100644
--- a/gcloud/datastream/connection-profiles/update
+++ b/gcloud/datastream/connection-profiles/update
@@ -21,6 +21,9 @@ SYNOPSIS
           --postgresql-hostname=POSTGRESQL_HOSTNAME
           --postgresql-port=POSTGRESQL_PORT
           --postgresql-username=POSTGRESQL_USERNAME
+          --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          --postgresql-client-key=POSTGRESQL_CLIENT_KEY
           --postgresql-password=POSTGRESQL_PASSWORD
           | --postgresql-prompt-for-password
           | --sqlserver-database=SQLSERVER_DATABASE
@@ -207,6 +210,19 @@ OPTIONAL FLAGS
        --postgresql-username=POSTGRESQL_USERNAME
           Username Datastream will use to connect to the database.
 
+       --postgresql-ca-certificate=POSTGRESQL_CA_CERTIFICATE
+          x509 PEM-encoded certificate of the CA that signed the source
+          database server's certificate. The replica will use this certificate
+          to verify it's connecting to the right host.
+
+       --postgresql-client-certificate=POSTGRESQL_CLIENT_CERTIFICATE
+          x509 PEM-encoded certificate that will be used by the replica to
+          authenticate against the source database server.
+
+       --postgresql-client-key=POSTGRESQL_CLIENT_KEY
+          Unencrypted PKCS#1 or PKCS#8 PEM-encoded private key associated with
+          the Client Certificate.
+
        At most one of these can be specified:
 
          --postgresql-password=POSTGRESQL_PASSWORD
diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create
index f0dcf4fad..d98957388 100644
--- a/gcloud/filestore/instances/create
+++ b/gcloud/filestore/instances/create
@@ -9,9 +9,10 @@ SYNOPSIS
         --network=[connect-mode=CONNECT-MODE],
           [name=NAME],[reserved-ip-range=RESERVED-IP-RANGE] [--async]
         [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
-        [--location=LOCATION] [--region=REGION]
-        [--source-instance=SOURCE_INSTANCE] [--tags=[KEY=VALUE,...]]
-        [--tier=TIER; default="BASIC_HDD"]
+        [--location=LOCATION]
+        [--performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]]
+        [--region=REGION] [--source-instance=SOURCE_INSTANCE]
+        [--tags=[KEY=VALUE,...]] [--tier=TIER; default="BASIC_HDD"]
         [--deletion-protection
           : --deletion-protection-reason=DELETION_PROTECTION_REASON]
         [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING
@@ -188,8 +189,7 @@ REQUIRED FLAGS
             network.
          connect-mode
             Network connection mode used by instances. CONNECT_MODE must be one
-            of: DIRECT_PEERING, PRIVATE_SERVICE_ACCESS or
-            PRIVATE_SERVICE_CONNECT.
+            of: DIRECT_PEERING or PRIVATE_SERVICE_ACCESS.
 
 OPTIONAL FLAGS
      --async
@@ -210,6 +210,43 @@ OPTIONAL FLAGS
      --location=LOCATION
         Location of the Cloud Filestore instance/operation.
 
+     --performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]
+        Performance configuration for the instance. This flag is used to
+        configure the read IOPS provisioned for the instance. The instance's
+        write IOPS and read/write throughputs will be derived from the
+        configured read IOPS. For more information about the derived
+        performance limits and default performance see:
+        https://cloud.google.com/filestore/docs/performance. Must be one of:
+
+            max-iops
+              The number of IOPS to provision for the instance.
+              MAX-IOPS must be in multiple of 1000 and in the supported IOPS
+              range for the current capacity of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+            max-iops-per-tb
+              Is used for setting the max IOPS of the instance by
+              specifying the IOPS per TB. When this parameter is used, the
+              max IOPS are derived from the instance capacity:
+              The instance max IOPS will be calculated by multiplying the
+              capacity of the instance (TB) by MAX-IOPS-PER-TB, and rounding
+              to the nearest 1000. The max IOPS will be changed
+              dynamically based on the instance capacity.
+              MAX-IOPS-PER-TB must be in the supported range of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+        Examples:
+
+        Configure an instance with max-iops performance:
+
+            $ gcloud filestore instances create example-cluster \
+                --performance=max-iops=17000
+
+        Configure an instance with max-iops-per-tb performance:
+
+            $ gcloud filestore instances create example-cluster \
+                --performance=max-iops-per-tb=17000
+
      --region=REGION
         Region of the Cloud Filestore instance.
 
diff --git a/gcloud/filestore/instances/update b/gcloud/filestore/instances/update
index 601119538..016d0dc1e 100644
--- a/gcloud/filestore/instances/update
+++ b/gcloud/filestore/instances/update
@@ -3,8 +3,9 @@ NAME
 
 SYNOPSIS
     gcloud filestore instances update (INSTANCE : --zone=ZONE) [--async]
-        [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION]
-        [--update-labels=[KEY=VALUE,...]]
+        [--description=DESCRIPTION] [--location=LOCATION]
+        [--performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]]
+        [--region=REGION] [--update-labels=[KEY=VALUE,...]]
         [--clear-labels | --remove-labels=[KEY,...]]
         [[--file-share=[capacity=CAPACITY],
           [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS]
@@ -105,6 +106,43 @@ FLAGS
      --location=LOCATION
         Location of the Cloud Filestore instance/operation.
 
+     --performance=[max-iops=MAX-IOPS],[max-iops-per-tb=MAX-IOPS-PER-TB]
+        Performance configuration for the instance. This flag is used to
+        configure the read IOPS provisioned for the instance. The instance's
+        write IOPS and read/write throughputs will be derived from the
+        configured read IOPS. For more information about the derived
+        performance limits and default performance see:
+        https://cloud.google.com/filestore/docs/performance. Must be one of:
+
+            max-iops
+              The number of IOPS to provision for the instance.
+              MAX-IOPS must be in multiple of 1000 and in the supported IOPS
+              range for the current capacity of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+            max-iops-per-tb
+              Is used for setting the max IOPS of the instance by
+              specifying the IOPS per TB. When this parameter is used, the
+              max IOPS are derived from the instance capacity:
+              The instance max IOPS will be calculated by multiplying the
+              capacity of the instance (TB) by MAX-IOPS-PER-TB, and rounding
+              to the nearest 1000. The max IOPS will be changed
+              dynamically based on the instance capacity.
+              MAX-IOPS-PER-TB must be in the supported range of the instance.
+              For more details, see: https://cloud.google.com/filestore/docs/performance.
+
+        Examples:
+
+        Configure an instance with max-iops performance:
+
+            $ gcloud filestore instances update example-cluster \
+                --performance=max-iops=17000
+
+        Configure an instance with max-iops-per-tb performance:
+
+            $ gcloud filestore instances update example-cluster \
+                --performance=max-iops-per-tb=17000
+
      --region=REGION
         Region of the Cloud Filestore instance.
 
diff --git a/gcloud/resource-manager/tags/keys/create b/gcloud/resource-manager/tags/keys/create
index 58f24d4b8..caa200d62 100644
--- a/gcloud/resource-manager/tags/keys/create
+++ b/gcloud/resource-manager/tags/keys/create
@@ -5,8 +5,7 @@ NAME
 SYNOPSIS
     gcloud resource-manager tags keys create (SHORT_NAME --parent=PARENT)
         [--async] [--description=DESCRIPTION] [--purpose=PURPOSE]
-        [--purpose-data=[organization],[network=NETWORK]]
-        [GCLOUD_WIDE_FLAG ...]
+        [--purpose-data=[network=NETWORK]] [GCLOUD_WIDE_FLAG ...]
 
 EXAMPLES
     To create a TagKey with the name env under 'organizations/123' with
@@ -50,7 +49,7 @@ FLAGS
         that corresponds to the purpose. PURPOSE must be one of: GCE_FIREWALL,
         DATA_GOVERNANCE.
 
-     --purpose-data=[organization],[network=NETWORK]
+     --purpose-data=[network=NETWORK]
         Purpose data of the TagKey that can only be set on creation. This data
         is validated by the policy system that corresponds to the purpose.