diff --git a/gcloud/_version b/gcloud/_version
index dcc8cf3b0..dd6cc129a 100644
--- a/gcloud/_version
+++ b/gcloud/_version
@@ -1,6 +1,6 @@
-Google Cloud SDK 381.0.0
-alpha 2022.04.08
-beta 2022.04.08
+Google Cloud SDK 382.0.0
+alpha 2022.04.15
+beta 2022.04.15
 bq 2.0.74
-core 2022.04.08
+core 2022.04.15
 gsutil 5.9
diff --git a/gcloud/access-approval/settings/update b/gcloud/access-approval/settings/update
index 370afdcc5..4e9d88d05 100644
--- a/gcloud/access-approval/settings/update
+++ b/gcloud/access-approval/settings/update
@@ -3,6 +3,7 @@ NAME
 
 SYNOPSIS
     gcloud access-approval settings update
+        [--active_key_version=ACTIVE_KEY_VERSION]
         [--enrolled_services=ENROLLED_SERVICES]
         [--notification_emails=NOTIFICATION_EMAILS]
         [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT]
@@ -14,17 +15,17 @@ DESCRIPTION
     the notification emails without modifying the enrolled services).
 
 EXAMPLES
-    Update notification emails associated with project 'p1', run:
+    Update notification emails associated with project p1, run:
 
         $ gcloud access-approval settings update --project=p1 \
           --notification_emails='foo@example.com, bar@example.com'
 
-    Enable Access Approval enforcement for folder 'f1':
+    Enable Access Approval enforcement for folder f1:
 
         $ gcloud access-approval settings update --folder=f1 \
           --enrolled_services=all
 
-    Enable Access Approval enforcement for organization 'org1' for only Cloud
+    Enable Access Approval enforcement for organization org1 for only Cloud
     Storage and Compute products and set the notification emails at the same
     time:
 
@@ -32,7 +33,17 @@ EXAMPLES
           --enrolled_services='storage.googleapis.com,compute.googleapis.c\
         om' --notification_emails='security_team@example.com'
 
+    Update active key version for project p1:
+
+        $ gcloud access-approval settings update --project=p1 \
+          --active_key_version='projects/p1/locations/global/keyRings/sign\
+        ing-keys/cryptoKeys/signing-key/cryptoKeyVersions/1'
+
 FLAGS
+     --active_key_version=ACTIVE_KEY_VERSION
+        The asymmetric crypto key version to use for signing approval requests.
+        Use '' to remove the custom signing key.
+
      --enrolled_services=ENROLLED_SERVICES
         Comma-separated list of services to enroll for Access Approval or 'all'
         for all supported services. Note for project and folder enrollments,
diff --git a/gcloud/alpha/access-approval/settings/update b/gcloud/alpha/access-approval/settings/update
index d376cde3b..4d930864b 100644
--- a/gcloud/alpha/access-approval/settings/update
+++ b/gcloud/alpha/access-approval/settings/update
@@ -4,6 +4,7 @@ NAME
 
 SYNOPSIS
     gcloud alpha access-approval settings update
+        [--active_key_version=ACTIVE_KEY_VERSION]
         [--enrolled_services=ENROLLED_SERVICES]
         [--notification_emails=NOTIFICATION_EMAILS]
         [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT]
@@ -16,17 +17,17 @@ DESCRIPTION
     services).
 
 EXAMPLES
-    Update notification emails associated with project 'p1', run:
+    Update notification emails associated with project p1, run:
 
         $ gcloud alpha access-approval settings update --project=p1 \
           --notification_emails='foo@example.com, bar@example.com'
 
-    Enable Access Approval enforcement for folder 'f1':
+    Enable Access Approval enforcement for folder f1:
 
         $ gcloud alpha access-approval settings update --folder=f1 \
           --enrolled_services=all
 
-    Enable Access Approval enforcement for organization 'org1' for only Cloud
+    Enable Access Approval enforcement for organization org1 for only Cloud
     Storage and Compute products and set the notification emails at the same
     time:
 
@@ -34,7 +35,17 @@ EXAMPLES
           --enrolled_services='storage.googleapis.com,compute.googleapis.c\
         om' --notification_emails='security_team@example.com'
 
+    Update active key version for project p1:
+
+        $ gcloud alpha access-approval settings update --project=p1 \
+          --active_key_version='projects/p1/locations/global/keyRings/sign\
+        ing-keys/cryptoKeys/signing-key/cryptoKeyVersions/1'
+
 FLAGS
+     --active_key_version=ACTIVE_KEY_VERSION
+        The asymmetric crypto key version to use for signing approval requests.
+        Use '' to remove the custom signing key.
+
      --enrolled_services=ENROLLED_SERVICES
         Comma-separated list of services to enroll for Access Approval or 'all'
         for all supported services. Note for project and folder enrollments,
diff --git a/gcloud/alpha/builds/enterprise-config/gitlab/describe b/gcloud/alpha/builds/enterprise-config/gitlab/describe
new file mode 100644
index 000000000..c44d0cf5d
--- /dev/null
+++ b/gcloud/alpha/builds/enterprise-config/gitlab/describe
@@ -0,0 +1,29 @@
+NAME
+    gcloud alpha builds enterprise-config gitlab describe - describe a GitLab
+        Enterprise config in a Google Cloud project
+
+SYNOPSIS
+    gcloud alpha builds enterprise-config gitlab describe CONFIG
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe a GitLab Enterprise config in a Google Cloud project.
+
+POSITIONAL ARGUMENTS
+     CONFIG
+        The id of the GitLab Enterprise Config
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/builds/enterprise-config/gitlab/help b/gcloud/alpha/builds/enterprise-config/gitlab/help
new file mode 100644
index 000000000..ee671655f
--- /dev/null
+++ b/gcloud/alpha/builds/enterprise-config/gitlab/help
@@ -0,0 +1,30 @@
+NAME
+    gcloud alpha builds enterprise-config gitlab - manage GitLab Enterprise
+        configurations for Google Cloud Build
+
+SYNOPSIS
+    gcloud alpha builds enterprise-config gitlab COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage GitLab Enterprise configurations for Google Cloud Build.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        (ALPHA) Describe a GitLab Enterprise config in a Google Cloud project.
+
+     list
+        (ALPHA) List all GitLab Enterprise configs in a Google Cloud project.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/builds/enterprise-config/gitlab/list b/gcloud/alpha/builds/enterprise-config/gitlab/list
new file mode 100644
index 000000000..3dc349284
--- /dev/null
+++ b/gcloud/alpha/builds/enterprise-config/gitlab/list
@@ -0,0 +1,58 @@
+NAME
+    gcloud alpha builds enterprise-config gitlab list - list all GitLab
+        Enterprise configs in a Google Cloud project
+
+SYNOPSIS
+    gcloud alpha builds enterprise-config gitlab list [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List all GitLab Enterprise configs in a Google Cloud project.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/builds/enterprise-config/help b/gcloud/alpha/builds/enterprise-config/help
index 4adbc798d..e01d6bdd7 100644
--- a/gcloud/alpha/builds/enterprise-config/help
+++ b/gcloud/alpha/builds/enterprise-config/help
@@ -22,6 +22,9 @@ GROUPS
      github
         (ALPHA) Manage GitHub Enterprise configurations for Google Cloud Build.
 
+     gitlab
+        (ALPHA) Manage GitLab Enterprise configurations for Google Cloud Build.
+
 NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
diff --git a/gcloud/alpha/builds/triggers/create/help b/gcloud/alpha/builds/triggers/create/help
index a820373f4..a1157570d 100644
--- a/gcloud/alpha/builds/triggers/create/help
+++ b/gcloud/alpha/builds/triggers/create/help
@@ -25,6 +25,9 @@ COMMANDS
      github
         (ALPHA) Create a build trigger for a GitHub repository.
 
+     manual
+        (ALPHA) Create a build trigger with a manual trigger event.
+
      pubsub
         (ALPHA) Create a build trigger with a Pub/Sub trigger event.
 
diff --git a/gcloud/alpha/builds/triggers/create/manual b/gcloud/alpha/builds/triggers/create/manual
new file mode 100644
index 000000000..9a84b4f91
--- /dev/null
+++ b/gcloud/alpha/builds/triggers/create/manual
@@ -0,0 +1,160 @@
+NAME
+    gcloud alpha builds triggers create manual - create a build trigger with a
+        manual trigger event
+
+SYNOPSIS
+    gcloud alpha builds triggers create manual
+        (--trigger-config=PATH | [(--build-config=PATH | --inline-config=PATH
+          | --dockerfile=DOCKERFILE --dockerfile-dir=DOCKERFILE_DIR;
+          default="/" --dockerfile-image=DOCKERFILE_IMAGE)
+          : --description=DESCRIPTION --filter=FILTER --name=NAME
+          --require-approval --service-account=SERVICE_ACCOUNT
+          --substitutions=[KEY=VALUE,...]
+          --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)])
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a build trigger with a manual trigger event.
+
+EXAMPLES
+    To create a manual trigger that builds off branch my-branch in a GitHub
+    repository named my-repo:
+
+        $ gcloud alpha builds triggers create manual \
+            --name=my-manual-trigger --build-config=cloudbuild.yaml \
+            --repo=https://www.github.com/owner/repo --repo-type=GITHUB \
+            --branch=my-branch
+
+REQUIRED FLAGS
+     Exactly one of these must be specified:
+
+       --trigger-config=PATH
+          Path to Build Trigger config file (JSON or YAML format). For more
+          details, see
+          https://cloud.google.com/cloud-build/docs/api/reference/rest/v1/projects.triggers#BuildTrigger
+
+       Flag based trigger configuration
+
+         --description=DESCRIPTION
+            Build trigger description.
+
+         --filter=FILTER
+            CEL filter expression for the trigger. See
+            https://cloud.google.com/build/docs/filter-build-events-using-cel
+            for more details.
+
+         --name=NAME
+            Build trigger name.
+
+         --require-approval
+            Require manual approval for triggered builds.
+
+         --service-account=SERVICE_ACCOUNT
+            The service account used for all user-controlled operations
+            including UpdateBuildTrigger, RunBuildTrigger, CreateBuild, and
+            CancelBuild. If no service account is set, then the standard Cloud
+            Build service account ([PROJECT_NUM]@system.gserviceaccount.com) is
+            used instead. Format:
+            projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT_ID_OR_EMAIL}.
+
+         --substitutions=[KEY=VALUE,...]
+            Parameters to be substituted in the build specification.
+
+            For example (using some nonsensical substitution keys; all keys
+            must begin with an underscore):
+
+                $ gcloud builds triggers create ... --config config.yaml
+                    --substitutions _FAVORITE_COLOR=blue,_NUM_CANDIES=10
+
+            This will result in a build where every occurrence of
+            ${_FAVORITE_COLOR} in certain fields is replaced by "blue", and
+            similarly for ${_NUM_CANDIES} and "10".
+
+            Only the following built-in variables can be specified with the
+            --substitutions flag: REPO_NAME, BRANCH_NAME, TAG_NAME,
+            REVISION_ID, COMMIT_SHA, SHORT_SHA.
+
+            For more details, see:
+            https://cloud.google.com/cloud-build/docs/api/build-requests#substitutions
+
+         Exactly one of these must be specified:
+
+           Build file configuration flags
+
+             --build-config=PATH
+                Path to a YAML or JSON file containing the build configuration
+                in the repository.
+
+                For more details, see:
+                https://cloud.google.com/cloud-build/docs/build-config
+
+           Build configuration file
+
+             --inline-config=PATH
+                Local path to a YAML or JSON file containing a build
+                configuration.
+
+           Dockerfile build configuration flags
+
+             --dockerfile=DOCKERFILE
+                Path of Dockerfile to use for builds in the repository.
+
+                If specified, a build config will be generated to run docker
+                build using the specified file.
+
+                The filename is relative to the Dockerfile directory.
+
+             --dockerfile-dir=DOCKERFILE_DIR; default="/"
+                Location of the directory containing the Dockerfile in the
+                repository.
+
+                The directory will also be used as the Docker build context.
+
+             --dockerfile-image=DOCKERFILE_IMAGE
+                Docker image name to build.
+
+                If not specified,
+                gcr.io/PROJECT/github.com/REPO_OWNER/REPO_NAME:$COMMIT_SHA will
+                be used.
+
+                Use a build configuration (cloudbuild.yaml) file for building
+                multiple images in a single trigger.
+
+         Flags for repository information
+
+           --repo=REPO
+              URI of the repository. Currently only HTTP URIs for GitHub and
+              Cloud Source Repositories are supported.
+
+              This flag must be specified if any of the other arguments in this
+              group are specified.
+
+           --repo-type=REPO_TYPE
+              Type of the repository. Currently only GitHub and Cloud Source
+              Repository types are supported.
+
+              This flag must be specified if any of the other arguments in this
+              group are specified.
+
+           Exactly one of these must be specified:
+
+             --branch=BRANCH
+                Branch to build.
+
+             --tag=TAG
+                Tag to build.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/composer/environments/check-upgrade b/gcloud/alpha/composer/environments/check-upgrade
index c2c75b40a..f67bfad91 100644
--- a/gcloud/alpha/composer/environments/check-upgrade
+++ b/gcloud/alpha/composer/environments/check-upgrade
@@ -41,8 +41,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/create b/gcloud/alpha/composer/environments/create
index 1d4399398..d3126cb24 100644
--- a/gcloud/alpha/composer/environments/create
+++ b/gcloud/alpha/composer/environments/create
@@ -85,8 +85,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/delete b/gcloud/alpha/composer/environments/delete
index e540ec341..22e919ed1 100644
--- a/gcloud/alpha/composer/environments/delete
+++ b/gcloud/alpha/composer/environments/delete
@@ -44,8 +44,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environments. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environments on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/describe b/gcloud/alpha/composer/environments/describe
index 4c423e2fa..0e75401ae 100644
--- a/gcloud/alpha/composer/environments/describe
+++ b/gcloud/alpha/composer/environments/describe
@@ -35,8 +35,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/list-packages b/gcloud/alpha/composer/environments/list-packages
index 00815432f..10fc2559f 100644
--- a/gcloud/alpha/composer/environments/list-packages
+++ b/gcloud/alpha/composer/environments/list-packages
@@ -41,8 +41,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/list-upgrades b/gcloud/alpha/composer/environments/list-upgrades
index 1f4bb02fc..f235584e0 100644
--- a/gcloud/alpha/composer/environments/list-upgrades
+++ b/gcloud/alpha/composer/environments/list-upgrades
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/restart-web-server b/gcloud/alpha/composer/environments/restart-web-server
index a6c00eeb6..3e82b344e 100644
--- a/gcloud/alpha/composer/environments/restart-web-server
+++ b/gcloud/alpha/composer/environments/restart-web-server
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/run b/gcloud/alpha/composer/environments/run
index 423c997d8..2c5b401d4 100644
--- a/gcloud/alpha/composer/environments/run
+++ b/gcloud/alpha/composer/environments/run
@@ -23,7 +23,7 @@ EXAMPLES
 
         airflow trigger_dag some_dag --run_id=foo
 
-    The following command (for environments with Airflow 2.0+):
+    The following command (for environments with Airflow 1.10.14+):
 
         gcloud alpha composer environments run myenv dags list
 
@@ -53,8 +53,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
@@ -64,15 +64,15 @@ POSITIONAL ARGUMENTS
         The Airflow CLI subcommand to run. Available subcommands include
         (listed with Airflow versions that support): backfill [**, 2.0.0),
         clear [**, 2.0.0), connections [**, 3.0.0), dag_state [**, 2.0.0), dags
-        [2.0.0, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
+        [1.10.14, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
         kubernetes [2.1.4, 3.0.0), list_dag_runs [1.10.2, 2.0.0), list_dags
         [**, 2.0.0), list_tasks [**, 2.0.0), next_execution [1.10.2, 2.0.0),
-        pause [**, 2.0.0), pool [**, 2.0.0), pools [2.0.0, 3.0.0), render [**,
-        2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [2.0.0,
+        pause [**, 2.0.0), pool [**, 2.0.0), pools [1.10.14, 3.0.0), render
+        [**, 2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [1.10.14,
         3.0.0), sync_perm [1.10.2, 2.0.0), task_failed_deps [**, 2.0.0),
-        task_state [**, 2.0.0), tasks [2.0.0, 3.0.0), test [**, 2.0.0),
+        task_state [**, 2.0.0), tasks [1.10.14, 3.0.0), test [**, 2.0.0),
         trigger_dag [**, 2.0.0), unpause [**, 2.0.0), upgrade_check [1.10.15,
-        2.0.0), users [2.0.0, 3.0.0), variables [**, 3.0.0), version [**,
+        2.0.0), users [1.10.14, 3.0.0), variables [**, 3.0.0), version [**,
         3.0.0) (see
         https://airflow.apache.org/docs/apache-airflow/stable/cli-and-env-variables-ref.html
         for more info).
diff --git a/gcloud/alpha/composer/environments/snapshots/load b/gcloud/alpha/composer/environments/snapshots/load
index a051cf870..d5014590b 100644
--- a/gcloud/alpha/composer/environments/snapshots/load
+++ b/gcloud/alpha/composer/environments/snapshots/load
@@ -37,8 +37,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/snapshots/save b/gcloud/alpha/composer/environments/snapshots/save
index 15a282b6c..85f0f0a50 100644
--- a/gcloud/alpha/composer/environments/snapshots/save
+++ b/gcloud/alpha/composer/environments/snapshots/save
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/dags/delete b/gcloud/alpha/composer/environments/storage/dags/delete
index 6dbc4308f..c58c43019 100644
--- a/gcloud/alpha/composer/environments/storage/dags/delete
+++ b/gcloud/alpha/composer/environments/storage/dags/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/dags/export b/gcloud/alpha/composer/environments/storage/dags/export
index 721c7060c..dcb07d223 100644
--- a/gcloud/alpha/composer/environments/storage/dags/export
+++ b/gcloud/alpha/composer/environments/storage/dags/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/dags/import b/gcloud/alpha/composer/environments/storage/dags/import
index ba3bc0f55..e72103f00 100644
--- a/gcloud/alpha/composer/environments/storage/dags/import
+++ b/gcloud/alpha/composer/environments/storage/dags/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/dags/list b/gcloud/alpha/composer/environments/storage/dags/list
index 2bc8855a8..29c3b5a50 100644
--- a/gcloud/alpha/composer/environments/storage/dags/list
+++ b/gcloud/alpha/composer/environments/storage/dags/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/data/delete b/gcloud/alpha/composer/environments/storage/data/delete
index d3206484d..ced3c7642 100644
--- a/gcloud/alpha/composer/environments/storage/data/delete
+++ b/gcloud/alpha/composer/environments/storage/data/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/data/export b/gcloud/alpha/composer/environments/storage/data/export
index 1325a1384..b5425eb77 100644
--- a/gcloud/alpha/composer/environments/storage/data/export
+++ b/gcloud/alpha/composer/environments/storage/data/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/data/import b/gcloud/alpha/composer/environments/storage/data/import
index f01382c88..840eef6b3 100644
--- a/gcloud/alpha/composer/environments/storage/data/import
+++ b/gcloud/alpha/composer/environments/storage/data/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/data/list b/gcloud/alpha/composer/environments/storage/data/list
index 162ad4295..ec1205782 100644
--- a/gcloud/alpha/composer/environments/storage/data/list
+++ b/gcloud/alpha/composer/environments/storage/data/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/plugins/delete b/gcloud/alpha/composer/environments/storage/plugins/delete
index d496502a5..31b840434 100644
--- a/gcloud/alpha/composer/environments/storage/plugins/delete
+++ b/gcloud/alpha/composer/environments/storage/plugins/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/plugins/export b/gcloud/alpha/composer/environments/storage/plugins/export
index 19b3b0b09..037f20c69 100644
--- a/gcloud/alpha/composer/environments/storage/plugins/export
+++ b/gcloud/alpha/composer/environments/storage/plugins/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/plugins/import b/gcloud/alpha/composer/environments/storage/plugins/import
index e0933fdd5..1aabedc38 100644
--- a/gcloud/alpha/composer/environments/storage/plugins/import
+++ b/gcloud/alpha/composer/environments/storage/plugins/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/storage/plugins/list b/gcloud/alpha/composer/environments/storage/plugins/list
index c01b36b34..47615c727 100644
--- a/gcloud/alpha/composer/environments/storage/plugins/list
+++ b/gcloud/alpha/composer/environments/storage/plugins/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/composer/environments/update b/gcloud/alpha/composer/environments/update
index 84e6dc24d..bbeecdfda 100644
--- a/gcloud/alpha/composer/environments/update
+++ b/gcloud/alpha/composer/environments/update
@@ -66,8 +66,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/alpha/compute/backend-buckets/create b/gcloud/alpha/compute/backend-buckets/create
index c4c141f75..82286ddb8 100644
--- a/gcloud/alpha/compute/backend-buckets/create
+++ b/gcloud/alpha/compute/backend-buckets/create
@@ -61,7 +61,7 @@ OPTIONAL FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/alpha/compute/backend-buckets/update b/gcloud/alpha/compute/backend-buckets/update
index 0c547eeba..80c94774a 100644
--- a/gcloud/alpha/compute/backend-buckets/update
+++ b/gcloud/alpha/compute/backend-buckets/update
@@ -38,7 +38,7 @@ FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/alpha/compute/backend-services/create b/gcloud/alpha/compute/backend-services/create
index 360321f26..c0cde3cde 100644
--- a/gcloud/alpha/compute/backend-services/create
+++ b/gcloud/alpha/compute/backend-services/create
@@ -632,8 +632,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/alpha/compute/backend-services/update b/gcloud/alpha/compute/backend-services/update
index d91ea5338..1fd1cc2cd 100644
--- a/gcloud/alpha/compute/backend-services/update
+++ b/gcloud/alpha/compute/backend-services/update
@@ -430,8 +430,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/alpha/compute/commitments/create b/gcloud/alpha/compute/commitments/create
index 82cdf95f6..a3963a47b 100644
--- a/gcloud/alpha/compute/commitments/create
+++ b/gcloud/alpha/compute/commitments/create
@@ -97,7 +97,7 @@ OPTIONAL FLAGS
         for memory-optimized VMs. TYPE must be one of: accelerator-optimized,
         compute-optimized, compute-optimized-c2d, general-purpose,
         general-purpose-e2, general-purpose-n2, general-purpose-n2d,
-        general-purpose-t2d, memory-optimized.
+        general-purpose-t2d, memory-optimized, memory-optimized-m3.
 
      Manage the reservations to be created with the commitment.
 
diff --git a/gcloud/alpha/compute/target-https-proxies/update b/gcloud/alpha/compute/target-https-proxies/update
index 4b9420082..e5f4e00fe 100644
--- a/gcloud/alpha/compute/target-https-proxies/update
+++ b/gcloud/alpha/compute/target-https-proxies/update
@@ -8,7 +8,7 @@ SYNOPSIS
         [[--certificate-map=CERTIFICATE_MAP : --clear-certificate-map]
           | --ssl-certificates=SSL_CERTIFICATE,[...] --global-ssl-certificates
           | --ssl-certificates-region=SSL_CERTIFICATES_REGION]
-        [--clear-ssl-policy | --ssl-policy=SSL_POLICY | --global-ssl-policy
+        [--clear-ssl-policy | --ssl-policy=SSL_POLICY --global-ssl-policy
           | --ssl-policy-region=SSL_POLICY_REGION] [--global | --region=REGION]
         [--global-url-map | --url-map-region=URL_MAP_REGION]
         [GCLOUD_WIDE_FLAG ...]
diff --git a/gcloud/alpha/compute/target-ssl-proxies/update b/gcloud/alpha/compute/target-ssl-proxies/update
index 794342d0b..a283b8828 100644
--- a/gcloud/alpha/compute/target-ssl-proxies/update
+++ b/gcloud/alpha/compute/target-ssl-proxies/update
@@ -7,7 +7,7 @@ SYNOPSIS
         [--certificate-map=CERTIFICATE_MAP
           : --ssl-certificates=SSL_CERTIFICATE,[...] | --clear-ssl-certificates
           | --clear-certificate-map]
-        [--clear-ssl-policy | --ssl-policy=SSL_POLICY | --global-ssl-policy
+        [--clear-ssl-policy | --ssl-policy=SSL_POLICY --global-ssl-policy
           | --ssl-policy-region=SSL_POLICY_REGION] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/describe b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/describe
index a0b233600..3efd7b8ef 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/describe
+++ b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/describe
@@ -9,19 +9,14 @@ SYNOPSIS
 DESCRIPTION
     (ALPHA) Get details on an accelerator type.
 
-    To get a list of available accelerator types for your location run:
-
-        $ gcloud alpha compute tpus tpu-vm accelerator-types list
-
 EXAMPLES
-    The following command describes the v3-8 accelerator types running in zone
-    us-central1-b:
+    To describe the v3-8 accelerator type in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm accelerator-types describe v3-8 \
             --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Accelerator type resource - The accelerator type you want to describe. The
+     Accelerator type resource - Name of the accelerator type to describe. The
      arguments in this group can be used to specify the attributes of this
      resource. (NOTE) Some attributes are not given arguments in this group but
      can be set in other ways. To set the project attribute:
@@ -41,7 +36,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -67,5 +62,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm accelerator-types describe
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/help b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/help
index 76118703a..ba0d8ce3c 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/help
+++ b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/help
@@ -27,5 +27,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm accelerator-types
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/list b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/list
index 089e5c9b5..8f35be2ae 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/list
+++ b/gcloud/alpha/compute/tpus/tpu-vm/accelerator-types/list
@@ -11,17 +11,15 @@ DESCRIPTION
     (ALPHA) List available accelerator types for for Cloud TPU VM nodes.
 
 EXAMPLES
-    The following command lists all of the accelerator types available in zone
-    us-central1-b:
+    To list all of the accelerator types available in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm accelerator-types list \
             --zone=us-central1-b
 
 FLAGS
-     Location resource - The zone to list accelerator types versions for. This
-     represents a Cloud resource. (NOTE) Some attributes are not given
-     arguments in this group but can be set in other ways. To set the project
-     attribute:
+     Location resource - Zone to list accelerator types for. This represents a
+     Cloud resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways. To set the project attribute:
       ◆ provide the argument --zone on the command line with a fully
         specified name;
       ◆ set the property compute/zone with a fully specified name;
@@ -76,5 +74,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm accelerator-types list
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/create b/gcloud/alpha/compute/tpus/tpu-vm/create
index 2d451c849..d94154867 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/create
+++ b/gcloud/alpha/compute/tpus/tpu-vm/create
@@ -16,21 +16,25 @@ DESCRIPTION
     (ALPHA) Create a new Cloud TPU VM node.
 
 EXAMPLES
-    The following command creates a TPU VM node with ID my-tpu in the default
-    user project, network and compute/region (with other defaults supplied by
-    API):
+    To create a TPU VM node with ID my-tpu in the default user project, network
+    and compute/zone (with other defaults supplied by API), run:
 
         $ gcloud alpha compute tpus tpu-vm create my-tpu
 
-    The following command creates a TPU VM node with ID my-tpu:
+    To create a TPU VM node in a specific network, run:
 
         $ gcloud alpha compute tpus tpu-vm create my-tpu \
-            --zone=us-central1-a --range='10.240.0.0/29' \
-            --accelerator-type='v2-8' --network=my-tf-network \
-            --description='My TF Node' --version='2.3'
+            --zone=us-central1-a --network=my-tf-network \
+            --description='My TPU VM' --version='v2-alpha'
+
+    To create a small TPU VM v2 pod, run:
+
+        $ gcloud alpha compute tpus tpu-vm create my-tpu \
+            --zone=us-central1-a --accelerator-type='v2-32' \
+            --description='My TPU VM' --version='v2-alpha'
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM node you want to create. The arguments in
+     Tpu resource - Name of the Cloud TPU VM node to create. The arguments in
      this group can be used to specify the attributes of this resource. (NOTE)
      Some attributes are not given arguments in this group but can be set in
      other ways. To set the project attribute:
@@ -50,7 +54,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -82,7 +86,7 @@ OPTIONAL FLAGS
         complete.
 
      --data-disk=DATA_DISK
-        An additional data disk for the TPU VM.
+        Additional data disks for the TPU VM.
 
         This flag must be repeated to provide multiple data disks. For example:
 
@@ -103,7 +107,7 @@ OPTIONAL FLAGS
             'read-write'.
 
      --description=DESCRIPTION
-        Specifies a text description of the TPU.
+        Text description of the TPU.
 
      --internal-ips
         Indicates that the IP addresses for the node should be internal. The
@@ -123,7 +127,7 @@ OPTIONAL FLAGS
         local file.
 
      --network=NETWORK; default="default"
-        Specifies the network that this TPU will be a part of.
+        Network that this TPU will be a part of.
 
      --preemptible
         If provided, the TPU will be preemptible and time-limited. It may be
@@ -160,7 +164,7 @@ OPTIONAL FLAGS
         Engine service account will be used.
 
      --subnetwork=SUBNETWORK
-        Specifies the subnetwork that this TPU will be a part of.
+        Subnetwork that this TPU will be a part of.
 
      --tags=[TAGS,...]
         Tags to apply to the TPU Node. Tags are used to identify valid sources
@@ -184,5 +188,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm create
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/delete b/gcloud/alpha/compute/tpus/tpu-vm/delete
index c3b794a64..ca03f8bf4 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/delete
+++ b/gcloud/alpha/compute/tpus/tpu-vm/delete
@@ -1,21 +1,20 @@
 NAME
-    gcloud alpha compute tpus tpu-vm delete - deletes a Cloud TPU VM node
+    gcloud alpha compute tpus tpu-vm delete - delete a Cloud TPU VM node
 
 SYNOPSIS
     gcloud alpha compute tpus tpu-vm delete (TPU : --zone=ZONE) [--async]
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) Deletes a Cloud TPU VM node.
+    (ALPHA) Delete a Cloud TPU VM node.
 
 EXAMPLES
-    The following command deletes a TPU VM with ID my-tpu in zone
-    us-central1-b:
+    To delete a TPU VM with ID my-tpu in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm delete my-tpu --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM node you want to delete. The arguments in
+     Tpu resource - Name of the Cloud TPU VM node to delete. The arguments in
      this group can be used to specify the attributes of this resource. (NOTE)
      Some attributes are not given arguments in this group but can be set in
      other ways. To set the project attribute:
@@ -35,7 +34,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -66,5 +65,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm delete
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/describe b/gcloud/alpha/compute/tpus/tpu-vm/describe
index 9eea17a37..51bebcb43 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/describe
+++ b/gcloud/alpha/compute/tpus/tpu-vm/describe
@@ -9,17 +9,16 @@ DESCRIPTION
     (ALPHA) Describe a Cloud TPU VM node.
 
 EXAMPLES
-    The following command describes a Cloud TPU VM node with ID my-tpu in zone
-    us-central1-b:
+    To describe a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm describe my-tpu \
             --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM node you want to describe. The arguments
-     in this group can be used to specify the attributes of this resource.
-     (NOTE) Some attributes are not given arguments in this group but can be
-     set in other ways. To set the project attribute:
+     Tpu resource - Name of the Cloud TPU VM node to describe. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
       ◆ provide the argument tpu on the command line with a fully specified
         name;
       ◆ provide the argument --project on the command line;
@@ -36,7 +35,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -62,5 +61,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm describe
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/get-guest-attributes b/gcloud/alpha/compute/tpus/tpu-vm/get-guest-attributes
index bba005f67..76b725923 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/get-guest-attributes
+++ b/gcloud/alpha/compute/tpus/tpu-vm/get-guest-attributes
@@ -1,5 +1,5 @@
 NAME
-    gcloud alpha compute tpus tpu-vm get-guest-attributes - retrieves the Guest
+    gcloud alpha compute tpus tpu-vm get-guest-attributes - retrieve the Guest
         Attributes for a Cloud TPU VM
 
 SYNOPSIS
@@ -8,10 +8,10 @@ SYNOPSIS
         [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) Retrieves the Guest Attributes for a Cloud TPU VM.
+    (ALPHA) Retrieve the Guest Attributes for a Cloud TPU VM.
 
 EXAMPLES
-    The following command retrieves the guest attributes:
+    To retrieve the guest attributes, run:
 
         $ gcloud alpha compute tpus tpu-vm get-guest-attributes my-tpu \
             --zone=us-central1-b
@@ -22,7 +22,7 @@ EXAMPLES
             --zone=us-central1-b --query-path=lifecycle/event
 
     To only display the guest attributes for one of the workers in a TPU pod,
-    you can use the --filter flag like so:
+    use the --filter flag:
 
         $ gcloud alpha compute tpus tpu-vm get-guest-attributes my-tpu \
             --zone=us-central1-b --filter="worker_id:3"
@@ -30,10 +30,10 @@ EXAMPLES
     where 3 is an example of the worker ID (0-indexed).
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM. The arguments in this group can be used
-     to specify the attributes of this resource. (NOTE) Some attributes are not
-     given arguments in this group but can be set in other ways. To set the
-     project attribute:
+     Tpu resource - Name of the Cloud TPU VM. The arguments in this group can
+     be used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways. To set
+     the project attribute:
       ◆ provide the argument tpu on the command line with a fully specified
         name;
       ◆ provide the argument --project on the command line;
@@ -50,7 +50,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -107,5 +107,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm get-guest-attributes
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/help b/gcloud/alpha/compute/tpus/tpu-vm/help
index 78a5dd1ca..ffe707921 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/help
+++ b/gcloud/alpha/compute/tpus/tpu-vm/help
@@ -35,7 +35,7 @@ COMMANDS
         (ALPHA) Create a new Cloud TPU VM node.
 
      delete
-        (ALPHA) Deletes a Cloud TPU VM node.
+        (ALPHA) Delete a Cloud TPU VM node.
 
      describe
         (ALPHA) Describe a Cloud TPU VM node.
@@ -44,13 +44,13 @@ COMMANDS
         (ALPHA) Detach a disk from an instance.
 
      get-guest-attributes
-        (ALPHA) Retrieves the Guest Attributes for a Cloud TPU VM.
+        (ALPHA) Retrieve the Guest Attributes for a Cloud TPU VM.
 
      list
         (ALPHA) List Cloud TPU VM nodes.
 
      scp
-        (ALPHA) SCP into a Cloud TPU VM.
+        (ALPHA) Copy files to and from a Cloud TPU VM via SCP.
 
      ssh
         (ALPHA) SSH into a Cloud TPU VM.
@@ -65,5 +65,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/list b/gcloud/alpha/compute/tpus/tpu-vm/list
index 90250427a..14eb27182 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/list
+++ b/gcloud/alpha/compute/tpus/tpu-vm/list
@@ -7,23 +7,22 @@ SYNOPSIS
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) List Cloud TPU VM nodes
+    (ALPHA) List Cloud TPU VM nodes.
 
 EXAMPLES
-    The following command lists the status of Cloud TPU VM nodes in zone
-    us-central1-b:
+    To list the Cloud TPU VM nodes in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm list --zone=us-central1-b
 
 FLAGS
-     Location resource - The compute/zone of the Cloud TPU VM node.
+     Location resource - Zone of the Cloud TPU VM node.
 
      If not specified, will use the value of the [compute/zone] property in the
      current gcloud configuration. To find a list of compute zones available
-     for Cloud TPUs in your project, run gcloud alpha compute tpus tpu-vm
-     locations list. This represents a Cloud resource. (NOTE) Some attributes
-     are not given arguments in this group but can be set in other ways. To set
-     the project attribute:
+     for Cloud TPUs in your project, run gcloud alpha compute tpus locations
+     list. This represents a Cloud resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways. To set the
+     project attribute:
       ◆ provide the argument --zone on the command line with a fully
         specified name;
       ◆ set the property compute/zone with a fully specified name;
@@ -84,5 +83,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm list
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/scp b/gcloud/alpha/compute/tpus/tpu-vm/scp
index e15515bee..b8ef58a3a 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/scp
+++ b/gcloud/alpha/compute/tpus/tpu-vm/scp
@@ -1,5 +1,6 @@
 NAME
-    gcloud alpha compute tpus tpu-vm scp - SCP into a Cloud TPU VM
+    gcloud alpha compute tpus tpu-vm scp - copy files to and from a Cloud TPU
+        VM via SCP
 
 SYNOPSIS
     gcloud alpha compute tpus tpu-vm scp [[USER@]INSTANCE:]SRC
@@ -13,7 +14,26 @@ SYNOPSIS
           | --ssh-key-expire-after=SSH_KEY_EXPIRE_AFTER] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) SCP into a Cloud TPU VM.
+    (ALPHA) Copy files to and from a Cloud TPU VM via SCP (Alpha).
+
+EXAMPLES
+    To copy a file (for example, a text file in the local home directory) to a
+    Cloud TPU VM, run:
+
+        $ gcloud alpha compute tpus tpu-vm scp ~/my-file my-tpu:
+
+    To copy a file into all workers in a Cloud TPU VM, run:
+
+        $ gcloud alpha compute tpus tpu-vm scp ~/my-file my-tpu: --worker=all
+
+    To copy a file from a Cloud TPU VM to the home directory of the local
+    computer, run:
+
+        $ gcloud alpha compute tpus tpu-vm scp my-tpu:~/my-file ~/
+
+    To copy all files in a folder to a Cloud TPU VM, run:
+
+        $ gcloud alpha compute tpus tpu-vm scp ~/my-folder/ my-tpu: --recurse
 
 POSITIONAL ARGUMENTS
      [[USER@]INSTANCE:]SRC [[[USER@]INSTANCE:]SRC ...]
@@ -144,5 +164,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm scp
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/service-identity/create b/gcloud/alpha/compute/tpus/tpu-vm/service-identity/create
index 80434069b..1bc10475b 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/service-identity/create
+++ b/gcloud/alpha/compute/tpus/tpu-vm/service-identity/create
@@ -23,14 +23,14 @@ DESCRIPTION
     service identity generated will work across all Cloud TPU VM zones.
 
 EXAMPLES
-    The following command generates a Cloud TPU VM service identity for a
-    project (using zone europe-west4-a):
+    To generate a Cloud TPU VM service identity for a project (using zone
+    europe-west4-a), run:
 
         $ gcloud alpha compute tpus tpu-vm service-identity create \
             --zone=europe-west4-a
 
 FLAGS
-     Location resource - The compute/zone to use for the request.
+     Location resource - Zone to use for the request.
 
      If not specified, will use the value of the [compute/zone] property in the
      current gcloud configuration. This represents a Cloud resource. (NOTE)
@@ -64,5 +64,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm service-identity create
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/service-identity/help b/gcloud/alpha/compute/tpus/tpu-vm/service-identity/help
index 19de80114..a41e30fb1 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/service-identity/help
+++ b/gcloud/alpha/compute/tpus/tpu-vm/service-identity/help
@@ -24,5 +24,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm service-identity
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/ssh b/gcloud/alpha/compute/tpus/tpu-vm/ssh
index f3073d327..977adc18c 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/ssh
+++ b/gcloud/alpha/compute/tpus/tpu-vm/ssh
@@ -14,7 +14,27 @@ SYNOPSIS
         [-- SSH_ARGS ...]
 
 DESCRIPTION
-    (ALPHA) SSH into a Cloud TPU VM.
+    (ALPHA) SSH into a Cloud TPU VM (Alpha).
+
+EXAMPLES
+    To SSH into a Cloud TPU VM, run:
+
+        $ gcloud alpha compute tpus tpu-vm ssh my-tpu
+
+    To SSH into worker 1 on a Cloud TPU VM Pod, run:
+
+        $ gcloud alpha compute tpus tpu-vm ssh my-tpu --worker=1
+
+    To run an SSH command in a Cloud TPU VM (for example, to print the time
+    since last boot), run:
+
+        $ gcloud alpha compute tpus tpu-vm ssh my-tpu --command="last boot"
+
+    To run the same command in all workers in a Cloud TPU VM simultaneously,
+    run:
+
+        $ gcloud alpha compute tpus tpu-vm ssh my-tpu \
+          --command="last boot" --worker=all
 
 POSITIONAL ARGUMENTS
      [USER@]TPU
@@ -185,5 +205,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm ssh
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/start b/gcloud/alpha/compute/tpus/tpu-vm/start
index 2ddf47db0..4049f5a57 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/start
+++ b/gcloud/alpha/compute/tpus/tpu-vm/start
@@ -9,16 +9,15 @@ DESCRIPTION
     (ALPHA) Start a Cloud TPU VM node.
 
 EXAMPLES
-    The following command starts a Cloud TPU VM node with ID my-tpu in zone
-    us-central1-b:
+    To start a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm start my-tpu --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM node to start. The arguments in this group
-     can be used to specify the attributes of this resource. (NOTE) Some
-     attributes are not given arguments in this group but can be set in other
-     ways. To set the project attribute:
+     Tpu resource - Name of the Cloud TPU VM node to start. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
       ◆ provide the argument tpu on the command line with a fully specified
         name;
       ◆ provide the argument --project on the command line;
@@ -35,7 +34,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -66,5 +65,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm start
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/stop b/gcloud/alpha/compute/tpus/tpu-vm/stop
index 51eeb931b..d5abf8213 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/stop
+++ b/gcloud/alpha/compute/tpus/tpu-vm/stop
@@ -9,16 +9,15 @@ DESCRIPTION
     (ALPHA) Stop a Cloud TPU VM node.
 
 EXAMPLES
-    The following command stops a Cloud TPU VM node with ID my-tpu in zone
-    us-central1-b:
+    To stop a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm stop my-tpu --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Tpu resource - The Cloud TPU VM node to stop. The arguments in this group
-     can be used to specify the attributes of this resource. (NOTE) Some
-     attributes are not given arguments in this group but can be set in other
-     ways. To set the project attribute:
+     Tpu resource - Name of the Cloud TPU VM node to stop. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
       ◆ provide the argument tpu on the command line with a fully specified
         name;
       ◆ provide the argument --project on the command line;
@@ -35,7 +34,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -66,5 +65,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm stop
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/versions/describe b/gcloud/alpha/compute/tpus/tpu-vm/versions/describe
index 7598f0eab..8ec6d6a17 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/versions/describe
+++ b/gcloud/alpha/compute/tpus/tpu-vm/versions/describe
@@ -9,19 +9,14 @@ SYNOPSIS
 DESCRIPTION
     (ALPHA) Get details on a runtime version.
 
-    To get a list of available runtime versions for your location run:
-
-        $ gcloud alpha compute tpus tpu-vm versions list
-
 EXAMPLES
-    The following command describes the TensorFlow 1.15 runtime version running
-    in zone us-central1-b:
+    To describe the TensorFlow 1.15 runtime version in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm versions describe 1.15 \
             --zone=us-central1-b
 
 POSITIONAL ARGUMENTS
-     Runtime version resource - The runtime version you want to describe. The
+     Runtime version resource - Name of the runtime version to describe. The
      arguments in this group can be used to specify the attributes of this
      resource. (NOTE) Some attributes are not given arguments in this group but
      can be set in other ways. To set the project attribute:
@@ -41,7 +36,7 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --zone=ZONE
-          The compute/zone of the Cloud TPU.
+          Zone of the Cloud TPU.
 
           If not specified, will use default compute/zone.
 
@@ -67,5 +62,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm versions describe
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/versions/help b/gcloud/alpha/compute/tpus/tpu-vm/versions/help
index 33ed325f8..08588476b 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/versions/help
+++ b/gcloud/alpha/compute/tpus/tpu-vm/versions/help
@@ -26,5 +26,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm versions
 
diff --git a/gcloud/alpha/compute/tpus/tpu-vm/versions/list b/gcloud/alpha/compute/tpus/tpu-vm/versions/list
index 25ef586a4..d8f47c672 100644
--- a/gcloud/alpha/compute/tpus/tpu-vm/versions/list
+++ b/gcloud/alpha/compute/tpus/tpu-vm/versions/list
@@ -11,14 +11,13 @@ DESCRIPTION
     (ALPHA) List runtime versions available for Cloud TPU VM nodes.
 
 EXAMPLES
-    The following command lists all of the runtime versions available in zone
-    us-central1-b:
+    To list all of the runtime versions available in zone us-central1-b, run:
 
         $ gcloud alpha compute tpus tpu-vm versions list --zone=us-central1-b
 
 FLAGS
-     Location resource - The zone to list runtime versions for. This represents
-     a Cloud resource. (NOTE) Some attributes are not given arguments in this
+     Location resource - Zone to list runtime versions for. This represents a
+     Cloud resource. (NOTE) Some attributes are not given arguments in this
      group but can be set in other ways. To set the project attribute:
       ◆ provide the argument --zone on the command line with a fully
         specified name;
@@ -74,5 +73,7 @@ NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
     project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. This variant is also available:
+
+        $ gcloud compute tpus tpu-vm versions list
 
diff --git a/gcloud/alpha/container/aws/node-pools/update b/gcloud/alpha/container/aws/node-pools/update
index a72f7fc18..90f39f4fc 100644
--- a/gcloud/alpha/container/aws/node-pools/update
+++ b/gcloud/alpha/container/aws/node-pools/update
@@ -10,6 +10,8 @@ SYNOPSIS
         [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN]
         [--root-volume-size=ROOT_VOLUME_SIZE]
         [--root-volume-type=ROOT_VOLUME_TYPE] [--validate-only]
+        [--clear-proxy-config | --proxy-secret-arn=PROXY_SECRET_ARN
+          --proxy-secret-version-id=PROXY_SECRET_VERSION_ID]
         [--clear-security-group-ids
           | --security-group-ids=[SECURITY_GROUP_ID,...]]
         [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] [GCLOUD_WIDE_FLAG ...]
@@ -90,6 +92,23 @@ FLAGS
      --validate-only
         Validate the node pool to update, but don't actually perform it.
 
+     Proxy config
+
+     At most one of these can be specified:
+
+       --clear-proxy-config
+          Clear the proxy configuration, if any, associated with the node pool.
+
+       Update existing proxy config parameters
+
+         --proxy-secret-arn=PROXY_SECRET_ARN
+            ARN of the AWS Secrets Manager secret that contains a proxy
+            configuration.
+
+         --proxy-secret-version-id=PROXY_SECRET_VERSION_ID
+            Version ID string of the AWS Secrets Manager secret that contains a
+            proxy configuration.
+
      Security groups
 
      At most one of these can be specified:
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/create b/gcloud/alpha/container/backup-restore/backup-plans/create
index 5d81ab265..ebc3f25ad 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/create
+++ b/gcloud/alpha/container/backup-restore/backup-plans/create
@@ -161,7 +161,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/delete b/gcloud/alpha/container/backup-restore/backup-plans/delete
index 0dfa223f5..c58f03494 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/delete
+++ b/gcloud/alpha/container/backup-restore/backup-plans/delete
@@ -68,7 +68,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/describe b/gcloud/alpha/container/backup-restore/backup-plans/describe
index c57e29234..c26f9f355 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/describe
+++ b/gcloud/alpha/container/backup-restore/backup-plans/describe
@@ -57,7 +57,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/get-iam-policy b/gcloud/alpha/container/backup-restore/backup-plans/get-iam-policy
index da908e598..3fbf62f4a 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/get-iam-policy
+++ b/gcloud/alpha/container/backup-restore/backup-plans/get-iam-policy
@@ -86,7 +86,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/list b/gcloud/alpha/container/backup-restore/backup-plans/list
index 17ffea482..39716416e 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/list
+++ b/gcloud/alpha/container/backup-restore/backup-plans/list
@@ -82,7 +82,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/set-iam-policy b/gcloud/alpha/container/backup-restore/backup-plans/set-iam-policy
index 03b68ac5c..33aba96d6 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/set-iam-policy
+++ b/gcloud/alpha/container/backup-restore/backup-plans/set-iam-policy
@@ -66,7 +66,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backup-plans/update b/gcloud/alpha/container/backup-restore/backup-plans/update
index 0a1f8474b..ef6700fad 100644
--- a/gcloud/alpha/container/backup-restore/backup-plans/update
+++ b/gcloud/alpha/container/backup-restore/backup-plans/update
@@ -178,7 +178,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/delete b/gcloud/alpha/container/backup-restore/backups/delete
index 280982d8a..e6216e882 100644
--- a/gcloud/alpha/container/backup-restore/backups/delete
+++ b/gcloud/alpha/container/backup-restore/backups/delete
@@ -76,7 +76,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/describe b/gcloud/alpha/container/backup-restore/backups/describe
index a2b0644a0..2453a1e26 100644
--- a/gcloud/alpha/container/backup-restore/backups/describe
+++ b/gcloud/alpha/container/backup-restore/backups/describe
@@ -66,7 +66,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/get-iam-policy b/gcloud/alpha/container/backup-restore/backups/get-iam-policy
index 8780aaf30..fc5d44681 100644
--- a/gcloud/alpha/container/backup-restore/backups/get-iam-policy
+++ b/gcloud/alpha/container/backup-restore/backups/get-iam-policy
@@ -94,7 +94,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/list b/gcloud/alpha/container/backup-restore/backups/list
index 4611e7c05..7365df96f 100644
--- a/gcloud/alpha/container/backup-restore/backups/list
+++ b/gcloud/alpha/container/backup-restore/backups/list
@@ -94,7 +94,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/set-iam-policy b/gcloud/alpha/container/backup-restore/backups/set-iam-policy
index b1fc03012..bf3e94ea3 100644
--- a/gcloud/alpha/container/backup-restore/backups/set-iam-policy
+++ b/gcloud/alpha/container/backup-restore/backups/set-iam-policy
@@ -75,7 +75,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/backups/update b/gcloud/alpha/container/backup-restore/backups/update
index 7594ac294..d5e69254a 100644
--- a/gcloud/alpha/container/backup-restore/backups/update
+++ b/gcloud/alpha/container/backup-restore/backups/update
@@ -136,7 +136,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/locations/describe b/gcloud/alpha/container/backup-restore/locations/describe
index 294ece0fc..59ce503f0 100644
--- a/gcloud/alpha/container/backup-restore/locations/describe
+++ b/gcloud/alpha/container/backup-restore/locations/describe
@@ -41,7 +41,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/locations/list b/gcloud/alpha/container/backup-restore/locations/list
index c99ab4073..09f4d11e0 100644
--- a/gcloud/alpha/container/backup-restore/locations/list
+++ b/gcloud/alpha/container/backup-restore/locations/list
@@ -57,7 +57,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/create b/gcloud/alpha/container/backup-restore/restore-plans/create
index b2d4736d4..909600eca 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/create
+++ b/gcloud/alpha/container/backup-restore/restore-plans/create
@@ -149,7 +149,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/delete b/gcloud/alpha/container/backup-restore/restore-plans/delete
index 7e006c624..77cd21f0b 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/delete
+++ b/gcloud/alpha/container/backup-restore/restore-plans/delete
@@ -68,7 +68,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/describe b/gcloud/alpha/container/backup-restore/restore-plans/describe
index 5ddb438c2..69465d1b1 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/describe
+++ b/gcloud/alpha/container/backup-restore/restore-plans/describe
@@ -57,7 +57,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/get-iam-policy b/gcloud/alpha/container/backup-restore/restore-plans/get-iam-policy
index 058833b1d..65b0056a1 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/get-iam-policy
+++ b/gcloud/alpha/container/backup-restore/restore-plans/get-iam-policy
@@ -86,7 +86,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/list b/gcloud/alpha/container/backup-restore/restore-plans/list
index 9916d20df..bed0dd00f 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/list
+++ b/gcloud/alpha/container/backup-restore/restore-plans/list
@@ -83,7 +83,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/set-iam-policy b/gcloud/alpha/container/backup-restore/restore-plans/set-iam-policy
index 24b89565b..648171366 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/set-iam-policy
+++ b/gcloud/alpha/container/backup-restore/restore-plans/set-iam-policy
@@ -66,7 +66,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restore-plans/update b/gcloud/alpha/container/backup-restore/restore-plans/update
index b8ebabf62..98c8050ea 100644
--- a/gcloud/alpha/container/backup-restore/restore-plans/update
+++ b/gcloud/alpha/container/backup-restore/restore-plans/update
@@ -154,7 +154,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/delete b/gcloud/alpha/container/backup-restore/restores/delete
index 763955f02..2db07d3dc 100644
--- a/gcloud/alpha/container/backup-restore/restores/delete
+++ b/gcloud/alpha/container/backup-restore/restores/delete
@@ -76,7 +76,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/describe b/gcloud/alpha/container/backup-restore/restores/describe
index 6d54be4fe..a8901d89c 100644
--- a/gcloud/alpha/container/backup-restore/restores/describe
+++ b/gcloud/alpha/container/backup-restore/restores/describe
@@ -65,7 +65,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/get-iam-policy b/gcloud/alpha/container/backup-restore/restores/get-iam-policy
index 70edc973f..fc8dda88f 100644
--- a/gcloud/alpha/container/backup-restore/restores/get-iam-policy
+++ b/gcloud/alpha/container/backup-restore/restores/get-iam-policy
@@ -94,7 +94,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/list b/gcloud/alpha/container/backup-restore/restores/list
index 0e12dbc15..65b30866d 100644
--- a/gcloud/alpha/container/backup-restore/restores/list
+++ b/gcloud/alpha/container/backup-restore/restores/list
@@ -92,7 +92,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/set-iam-policy b/gcloud/alpha/container/backup-restore/restores/set-iam-policy
index a82f6f55e..3bdf72fe2 100644
--- a/gcloud/alpha/container/backup-restore/restores/set-iam-policy
+++ b/gcloud/alpha/container/backup-restore/restores/set-iam-policy
@@ -75,7 +75,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/restores/update b/gcloud/alpha/container/backup-restore/restores/update
index b200c41e8..ff5b432ee 100644
--- a/gcloud/alpha/container/backup-restore/restores/update
+++ b/gcloud/alpha/container/backup-restore/restores/update
@@ -111,7 +111,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/volume-backups/describe b/gcloud/alpha/container/backup-restore/volume-backups/describe
index 49bb6db64..9a740c62a 100644
--- a/gcloud/alpha/container/backup-restore/volume-backups/describe
+++ b/gcloud/alpha/container/backup-restore/volume-backups/describe
@@ -76,7 +76,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/volume-backups/list b/gcloud/alpha/container/backup-restore/volume-backups/list
index 784bca6d9..50894687e 100644
--- a/gcloud/alpha/container/backup-restore/volume-backups/list
+++ b/gcloud/alpha/container/backup-restore/volume-backups/list
@@ -108,7 +108,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/volume-restores/describe b/gcloud/alpha/container/backup-restore/volume-restores/describe
index 8c44ec283..9314ca866 100644
--- a/gcloud/alpha/container/backup-restore/volume-restores/describe
+++ b/gcloud/alpha/container/backup-restore/volume-restores/describe
@@ -76,7 +76,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/backup-restore/volume-restores/list b/gcloud/alpha/container/backup-restore/volume-restores/list
index 95eaa218f..8365594d9 100644
--- a/gcloud/alpha/container/backup-restore/volume-restores/list
+++ b/gcloud/alpha/container/backup-restore/volume-restores/list
@@ -102,7 +102,8 @@ GCLOUD WIDE FLAGS
 
 API REFERENCE
     This command uses the gkebackup/v1 API. The full documentation for this API
-    can be found at: https://cloud.google.com/kubernetes-engine
+    can be found at:
+    https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke
 
 NOTES
     This command is currently in alpha and might change without notice. If this
diff --git a/gcloud/alpha/container/binauthz/attestors/add-iam-policy-binding b/gcloud/alpha/container/binauthz/attestors/add-iam-policy-binding
index 3522febcf..68da7fd0a 100644
--- a/gcloud/alpha/container/binauthz/attestors/add-iam-policy-binding
+++ b/gcloud/alpha/container/binauthz/attestors/add-iam-policy-binding
@@ -15,16 +15,16 @@ DESCRIPTION
 
 EXAMPLES
     To add an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud alpha container binauthz attestors add-iam-policy-binding \
             my_attestor --member='user:test-user@gmail.com' \
             --role='roles/binaryauthorization.attestorsEditor'
 
     To add an IAM policy binding which expires at the end of the year 2018 for
-    the role of 'roles/binaryauthorization.attestorsEditor' and the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    the role of roles/binaryauthorization.attestorsEditor and the user
+    test-user@gmail.com on attestor my_attestor, run:
 
         $ gcloud alpha container binauthz attestors add-iam-policy-binding \
             my_attestor --member='user:test-user@gmail.com' \
diff --git a/gcloud/alpha/container/binauthz/attestors/remove-iam-policy-binding b/gcloud/alpha/container/binauthz/attestors/remove-iam-policy-binding
index 443387eaf..a2c7b4596 100644
--- a/gcloud/alpha/container/binauthz/attestors/remove-iam-policy-binding
+++ b/gcloud/alpha/container/binauthz/attestors/remove-iam-policy-binding
@@ -15,8 +15,8 @@ DESCRIPTION
 
 EXAMPLES
     To remove an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud alpha container binauthz attestors \
             remove-iam-policy-binding my_attestor \
@@ -24,8 +24,8 @@ EXAMPLES
             --role='roles/binaryauthorization.attestorsEditor'
 
     To remove an IAM policy binding which expires at the end of the year 2018
-    for the role of 'roles/binaryauthorization.attestorsEditor' and the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    for the role of roles/binaryauthorization.attestorsEditor and the user
+    test-user@gmail.com on attestor my_attestor, run:
 
         $ gcloud alpha container binauthz attestors \
             remove-iam-policy-binding my_attestor \
diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create
index 14e0290fb..f4c5248ff 100644
--- a/gcloud/alpha/container/clusters/create
+++ b/gcloud/alpha/container/clusters/create
@@ -1249,16 +1249,10 @@ FLAGS
                 Number of extra (surge) nodes to be created on each upgrade of
                 an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
              --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                 Number of nodes that can be unavailable at the same time on
                 each upgrade of an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
            Flags to specify identity for autoprovisioned nodes:
 
              --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/alpha/container/clusters/update b/gcloud/alpha/container/clusters/update
index 7d7e858c6..e1ebb9621 100644
--- a/gcloud/alpha/container/clusters/update
+++ b/gcloud/alpha/container/clusters/update
@@ -851,16 +851,10 @@ REQUIRED FLAGS
                   Number of extra (surge) nodes to be created on each upgrade
                   of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
                --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                   Number of nodes that can be unavailable at the same time on
                   each upgrade of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
              Flags to specify identity for autoprovisioned nodes:
 
                --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/alpha/database-migration/migration-jobs/create b/gcloud/alpha/database-migration/migration-jobs/create
index 8fa736cca..75adac31e 100644
--- a/gcloud/alpha/database-migration/migration-jobs/create
+++ b/gcloud/alpha/database-migration/migration-jobs/create
@@ -106,31 +106,37 @@ OPTIONAL FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     The connectivity method used by the migration job. If not specified, uses
+     the default IP allowlist method which will create a public IP when used
+     with a Cloud SQL destination DB.
+
      At most one of these can be specified:
 
        --peer-vpc=PEER_VPC
           Name of the VPC network to peer with the Cloud SQL private network.
 
-       --vm-ip=VM_IP
-          Bastion Virtual Machine IP.
+       Parameters for the reverse-SSH tunnel connectivity method.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vm-ip=VM_IP
+            Bastion Virtual Machine IP.
 
-       --vm-port=VM_PORT
-          Forwarding port for the SSH tunnel.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vm-port=VM_PORT
+            Forwarding port for the SSH tunnel.
 
-       --vpc=VPC
-          Name of the VPC network where the VM is hosted.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vpc=VPC
+            Name of the VPC network where the VM is hosted.
 
-       --vm=VM
-          Name of VM that will host the SSH tunnel bastion.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
+
+         --vm=VM
+            Name of VM that will host the SSH tunnel bastion.
 
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
diff --git a/gcloud/alpha/database-migration/migration-jobs/update b/gcloud/alpha/database-migration/migration-jobs/update
index e5c9dc03d..64f5fc135 100644
--- a/gcloud/alpha/database-migration/migration-jobs/update
+++ b/gcloud/alpha/database-migration/migration-jobs/update
@@ -125,22 +125,28 @@ FLAGS
           silently ignored. If --update-labels is also specified then
           --update-labels is applied first.
 
+     The connectivity method used by the migration job. If not specified, uses
+     the default IP allowlist method which will create a public IP when used
+     with a Cloud SQL destination DB.
+
      At most one of these can be specified:
 
        --peer-vpc=PEER_VPC
           Name of the VPC network to peer with the Cloud SQL private network.
 
-       --vm=VM
-          Name of VM that will host the SSH tunnel bastion.
+       Parameters for the reverse-SSH tunnel connectivity method.
 
-       --vm-ip=VM_IP
-          Bastion Virtual Machine IP.
+         --vm=VM
+            Name of VM that will host the SSH tunnel bastion.
 
-       --vm-port=VM_PORT
-          Forwarding port for the SSH tunnel.
+         --vm-ip=VM_IP
+            Bastion Virtual Machine IP.
 
-       --vpc=VPC
-          Name of the VPC network where the VM is hosted.
+         --vm-port=VM_PORT
+            Forwarding port for the SSH tunnel.
+
+         --vpc=VPC
+            Name of the VPC network where the VM is hosted.
 
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
diff --git a/gcloud/alpha/firestore/databases/describe b/gcloud/alpha/firestore/databases/describe
new file mode 100644
index 000000000..159f74582
--- /dev/null
+++ b/gcloud/alpha/firestore/databases/describe
@@ -0,0 +1,33 @@
+NAME
+    gcloud alpha firestore databases describe - describe a Google Cloud
+        Firestore database
+
+SYNOPSIS
+    gcloud alpha firestore databases describe [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Describe a Google Cloud Firestore database.
+
+EXAMPLES
+    The following command describes a Google Cloud Firestore database.
+
+        $ gcloud alpha firestore databases describe
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the firestore/v1 API. The full documentation for this API
+    can be found at: https://cloud.google.com/firestore
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/firestore/databases/help b/gcloud/alpha/firestore/databases/help
index 575e7350a..5c255d8ae 100644
--- a/gcloud/alpha/firestore/databases/help
+++ b/gcloud/alpha/firestore/databases/help
@@ -19,6 +19,9 @@ COMMANDS
      create
         (ALPHA) Create a Google Cloud Firestore Native database.
 
+     describe
+        (ALPHA) Describe a Google Cloud Firestore database.
+
 NOTES
     This command is currently in alpha and might change without notice. If this
     command fails with API permission errors despite specifying the correct
diff --git a/gcloud/alpha/logging/logs/list b/gcloud/alpha/logging/logs/list
index 13da0c724..d84a10b2f 100644
--- a/gcloud/alpha/logging/logs/list
+++ b/gcloud/alpha/logging/logs/list
@@ -2,8 +2,9 @@ NAME
     gcloud alpha logging logs list - lists your project's logs
 
 SYNOPSIS
-    gcloud alpha logging logs list [--filter=EXPRESSION] [--limit=LIMIT]
-        [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+    gcloud alpha logging logs list
+        [--bucket=BUCKET --location=LOCATION --view=VIEW] [--filter=EXPRESSION]
+        [--limit=LIMIT] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Only logs that contain log entries are listed.
@@ -13,6 +14,33 @@ EXAMPLES
 
         $ gcloud alpha logging logs list
 
+    To list all logs for a view:
+
+        $ gcloud alpha logging logs list --bucket=[BUCKET_ID] \
+            --location=[LOCATION] --view=[VIEW_ID]
+
+FLAGS
+     These arguments are used in conjunction with the parent to construct a
+     view resource.
+
+       --bucket=BUCKET
+          Id of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --location=LOCATION
+          Location of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --view=VIEW
+          Id of the view.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
 LIST COMMAND FLAGS
      --filter=EXPRESSION
         Apply a Boolean filter EXPRESSION to each resource item to be listed.
diff --git a/gcloud/alpha/run/jobs/create b/gcloud/alpha/run/jobs/create
index fbb0a2355..4c8b2cca8 100644
--- a/gcloud/alpha/run/jobs/create
+++ b/gcloud/alpha/run/jobs/create
@@ -100,7 +100,7 @@ OPTIONAL FLAGS
 
      --parallelism=PARALLELISM
         Number of tasks that may run concurrently. Must be less than or equal
-        to the number of tasks.
+        to the number of tasks. Set to 0 to unset.
 
      --region=REGION
         Region in which the resource can be found. Alternatively, set the
diff --git a/gcloud/alpha/run/jobs/update b/gcloud/alpha/run/jobs/update
index 48c53a19b..ab88de7ca 100644
--- a/gcloud/alpha/run/jobs/update
+++ b/gcloud/alpha/run/jobs/update
@@ -99,7 +99,7 @@ FLAGS
 
      --parallelism=PARALLELISM
         Number of tasks that may run concurrently. Must be less than or equal
-        to the number of tasks.
+        to the number of tasks. Set to 0 to unset.
 
      --region=REGION
         Region in which the resource can be found. Alternatively, set the
diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch
index 9d442fa52..f2ce41b5c 100644
--- a/gcloud/alpha/sql/instances/patch
+++ b/gcloud/alpha/sql/instances/patch
@@ -112,7 +112,8 @@ FLAGS
         POSTGRES_14, SQLSERVER_2017_EXPRESS, SQLSERVER_2017_WEB,
         SQLSERVER_2017_STANDARD, SQLSERVER_2017_ENTERPRISE,
         SQLSERVER_2019_EXPRESS, SQLSERVER_2019_WEB, SQLSERVER_2019_STANDARD,
-        SQLSERVER_2019_ENTERPRISE, MYSQL_8_0_18, MYSQL_8_0_26.
+        SQLSERVER_2019_ENTERPRISE, MYSQL_8_0_18, MYSQL_8_0_26, MYSQL_8_0_27,
+        MYSQL_8_0_28.
 
      --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE
         Date when the deny maintenance period ends, that is 2021-01-10.
diff --git a/gcloud/alpha/storage/cp b/gcloud/alpha/storage/cp
index 32a35962d..c4a7e0cbf 100644
--- a/gcloud/alpha/storage/cp
+++ b/gcloud/alpha/storage/cp
@@ -11,6 +11,7 @@ SYNOPSIS
         [--custom-metadata=[CUSTOM_METADATA,...]] [--custom-time=CUSTOM_TIME]
         [--do-not-decompress] [--if-generation-match=GENERATION]
         [--if-metageneration-match=METAGENERATION] [--ignore-symlinks]
+        [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH]
         [--print-created-message, -v] [--recursive, -R, -r]
         [--skip-unsupported, -U]
         [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS]
@@ -112,6 +113,28 @@ FLAGS
         Ignore file symlinks instead of copying what they point to. Symlinks
         pointing to directories will always be ignored.
 
+     --manifest-path=MANIFEST_PATH, -L MANIFEST_PATH
+        Outputs a manifest log file with detailed information about each item
+        that was copied. This manifest contains the following information for
+        each item:
+
+        ◆ Source path.
+        ◆ Destination path.
+        ◆ Source size.
+        ◆ Bytes transferred.
+        ◆ MD5 hash.
+        ◆ Transfer start time and date in UTC and ISO 8601 format.
+        ◆ Transfer completion time and date in UTC and ISO 8601 format.
+        ◆ Final result of the attempted transfer: OK, error, or skipped.
+        ◆ Details, if any.
+
+        If the manifest file already exists, gcloud storage appends log items
+        to the existing file.
+
+        Objects that are marked as "OK" or "skipped" in the existing manifest
+        file are not retried by future commands. Objects marked as "error" are
+        retried.
+
      --print-created-message, -v
         Prints the version-specific URL for each copied object.
 
diff --git a/gcloud/alpha/vmware/help b/gcloud/alpha/vmware/help
index b6d117918..b5b9f49f7 100644
--- a/gcloud/alpha/vmware/help
+++ b/gcloud/alpha/vmware/help
@@ -24,6 +24,10 @@ GROUPS
      locations
         (ALPHA) List locations in Google Cloud VMware Engine.
 
+     network-peerings
+        (ALPHA) Manage VMware Engine VPC peering using Google Cloud VMware
+        Engine.
+
      node-types
         (ALPHA) Show node types in Google Cloud VMware Engine.
 
diff --git a/gcloud/alpha/vmware/network-peerings/create b/gcloud/alpha/vmware/network-peerings/create
new file mode 100644
index 000000000..e86331573
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/create
@@ -0,0 +1,160 @@
+NAME
+    gcloud alpha vmware network-peerings create - create a VMware Engine VPC
+        network peering
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings create NETWORK_PEERING
+        --peer-network=PEER_NETWORK --peer-network-type=PEER_NETWORK_TYPE
+        (--vmware-engine-network=VMWARE_ENGINE_NETWORK : --location=LOCATION)
+        [--description=DESCRIPTION] [--no-exchange-subnet-routes]
+        [--no-export-custom-routes] [--no-export-custom-routes-with-public-ip]
+        [--no-import-custom-routes] [--no-import-custom-routes-with-public-ip]
+        [--peer-mtu=PEER_MTU] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a VMware Engine VPC network peering. VPC network peering
+    creation is considered finished when the network peering is in ACTIVE
+    state. Check the progress of a VPC network peering using gcloud alpha
+    vmware network-peerings list.
+
+EXAMPLES
+    To create a VPC network peering called new-peering that connects the VMware
+    Engine network
+    projects/my-project/locations/us-west1/vmwareEngineNetworks/my-vmware-engine-network
+    with another VMware Engine network
+    projects/another-project/global/networks/another-vmware-engine-network,
+    run:
+
+        $ gcloud alpha vmware network-peerings create new-peering \
+            --vmware-engine-network=projects/my-project/locations/us-west1/\
+        vmwareEngineNetworks/my-vmware-engine-network \
+            --peer-network=projects/another-project/global/networks/\
+        another-vmware-engine-network \
+            --peer-network-type=VMWARE_ENGINE_NETWORK
+
+    In this example, the project is taken from gcloud properties core/project
+    and location is taken as global.
+
+POSITIONAL ARGUMENTS
+     VMware Engine VPC network peering resource - network_peering. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument network_peering on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       NETWORK_PEERING
+          ID of the VMware Engine VPC network peering or fully qualified
+          identifier for the VMware Engine VPC network peering. To set the
+          network-peering attribute:
+          ▸ provide the argument network_peering on the command line.
+
+REQUIRED FLAGS
+     --peer-network=PEER_NETWORK
+        Name of the VPC network to peer with the VMware Engine network. The
+        peer network can be a consumer VPC network or another service producer
+        VPC network. For a consumer VPC network, provide the name in the
+        following form: projects/{project}/global/networks/{network_id} If the
+        peer network is of type VMWARE_ENGINE_NETWORK, then the peer network
+        will be a service producer VPC network. For a service producer VPC
+        network, provide the name in the following form:
+        projects/{project}/locations/{location}/vmwareEngineNetworks/{vmware_engine_network_id}
+
+     --peer-network-type=PEER_NETWORK_TYPE
+        Type of the VPC network to peer with the VMware Engine network.
+        PEER_NETWORK_TYPE must be one of the following:
+        ◆ STANDARD: Peering connection used for connecting to another VPC
+          network established by the same user. For example, a peering
+          connection to another VPC network in the same project or to an
+          on-premises network.
+        ◆ VMWARE_ENGINE_NETWORK: Peering connection used for connecting to
+          another VMware Engine network.
+        ◆ PRIVATE_SERVICES_ACCESS: Peering connection used for establishing
+          private services access.
+        ◆ NETAPP_CLOUD_VOLUMES: Peering connection used for connecting to
+          NetApp Cloud Volumes.
+        ◆ THIRD_PARTY_SERVICE: Peering connection used for connecting to
+          third-party services. Most third-party services require manual setup
+          of reverse peering on the VPC network associated with the third-party
+          service. PEER_NETWORK_TYPE must be one of:
+          PEER_NETWORK_TYPE_UNSPECIFIED, STANDARD, VMWARE_ENGINE_NETWORK,
+          PRIVATE_SERVICES_ACCESS, NETAPP_CLOUD_VOLUMES, THIRD_PARTY_SERVICE.
+
+     VMware Engine network resource - vmware_engine_network. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument --vmware-engine-network on the command line with
+        a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       --vmware-engine-network=VMWARE_ENGINE_NETWORK
+          ID of the VMware Engine network or fully qualified identifier for the
+          VMware Engine network. To set the vmware-engine-network attribute:
+          ▸ provide the argument --vmware-engine-network on the command line.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --location=LOCATION
+          The resource name of the location. To set the location attribute:
+          ▸ provide the argument --vmware-engine-network on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line;
+          ▸ set location as 'global' (default) or a region.
+
+OPTIONAL FLAGS
+     --description=DESCRIPTION
+        User-provided description of the VPC network peering.
+
+     --exchange-subnet-routes
+        True if full-mesh connectivity is created and managed automatically
+        between peered VPC networks; false otherwise. This field is always true
+        because Google Compute Engine automatically creates and manages
+        subnetwork routes between two VPC networks when the peering state is
+        ACTIVE. Enabled by default, use --no-exchange-subnet-routes to disable.
+
+     --export-custom-routes
+        True if custom routes are exported to the peered VPC network; false
+        otherwise. The default value is true. Enabled by default, use
+        --no-export-custom-routes to disable.
+
+     --export-custom-routes-with-public-ip
+        True if all subnet routes with public IP address range are exported;
+        false otherwise. The default value is true. Enabled by default, use
+        --no-export-custom-routes-with-public-ip to disable.
+
+     --import-custom-routes
+        True if custom routes are imported to the peered VPC network; false
+        otherwise. The default value is true. Enabled by default, use
+        --no-import-custom-routes to disable.
+
+     --import-custom-routes-with-public-ip
+        True if all subnet routes with public IP address range are imported;
+        false otherwise. The default value is true. Enabled by default, use
+        --no-import-custom-routes-with-public-ip to disable.
+
+     --peer-mtu=PEER_MTU
+        Maximum transmission unit (MTU) in bytes.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/network-peerings/delete b/gcloud/alpha/vmware/network-peerings/delete
new file mode 100644
index 000000000..bc50ad2d7
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/delete
@@ -0,0 +1,53 @@
+NAME
+    gcloud alpha vmware network-peerings delete - delete a Google Cloud VMware
+        Engine VPC network peering
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings delete NETWORK_PEERING
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a VPC network peering. After you delete a VPC network
+    peering, you won't be able to access the corresponding VMware Engine
+    network through the peer network.
+
+EXAMPLES
+    To delete a VPC network peering with name my-peering, run:
+
+        $ gcloud alpha vmware network-peerings delete my-peering
+
+    In this example, the project is taken from gcloud properties core/project
+    and location is taken as global.
+
+POSITIONAL ARGUMENTS
+     VMware Engine VPC network peering resource - network_peering. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument network_peering on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       NETWORK_PEERING
+          ID of the VMware Engine VPC network peering or fully qualified
+          identifier for the VMware Engine VPC network peering. To set the
+          network-peering attribute:
+          ▸ provide the argument network_peering on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/network-peerings/describe b/gcloud/alpha/vmware/network-peerings/describe
new file mode 100644
index 000000000..2d620fcdc
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/describe
@@ -0,0 +1,51 @@
+NAME
+    gcloud alpha vmware network-peerings describe - describe a Google Cloud
+        VMware Engine VPC network peering
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings describe NETWORK_PEERING
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Get information about a VPC network peering.
+
+EXAMPLES
+    To get information about a VPC network peering called new-peering, run:
+
+        $ gcloud alpha vmware network-peerings describe new-peering
+
+    In this example, the project is taken from gcloud properties core/project
+    and location is taken as global.
+
+POSITIONAL ARGUMENTS
+     VMware Engine VPC network peering resource - network_peering. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument network_peering on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       NETWORK_PEERING
+          ID of the VMware Engine VPC network peering or fully qualified
+          identifier for the VMware Engine VPC network peering. To set the
+          network-peering attribute:
+          ▸ provide the argument network_peering on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/network-peerings/help b/gcloud/alpha/vmware/network-peerings/help
new file mode 100644
index 000000000..476ecf809
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/help
@@ -0,0 +1,39 @@
+NAME
+    gcloud alpha vmware network-peerings - manage VMware Engine VPC peering
+        using Google Cloud VMware Engine
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Manage VMware Engine VPC peering using Google Cloud VMware Engine.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        (ALPHA) Create a VMware Engine VPC network peering.
+
+     delete
+        (ALPHA) Delete a Google Cloud VMware Engine VPC network peering.
+
+     describe
+        (ALPHA) Describe a Google Cloud VMware Engine VPC network peering.
+
+     list
+        (ALPHA) List Google Cloud VMware Engine VPC network peerings.
+
+     update
+        (ALPHA) Update a Google Cloud VMware Engine VPC network peering.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/network-peerings/list b/gcloud/alpha/vmware/network-peerings/list
new file mode 100644
index 000000000..b5341fc0b
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/list
@@ -0,0 +1,85 @@
+NAME
+    gcloud alpha vmware network-peerings list - list Google Cloud VMware Engine
+        VPC network peerings
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings list [--location=LOCATION]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List VPC network peerings across all locations in your project.
+
+EXAMPLES
+    To list all the VPC network peerings created on or after April 12, 2021,
+    sorted from oldest to newest, run:
+
+        $ gcloud alpha vmware network-peerings list \
+            --filter="createTime > 2021-04-12T00:00:00.00Z" \
+            --sort-by=createTime
+
+    In this example, the location is taken as global.
+
+FLAGS
+     Location resource - location. This represents a Cloud resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ set location as 'global' (default) or a region with a fully specified
+        name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location. To
+          set the location attribute:
+          ▸ provide the argument --location on the command line;
+          ▸ set location as 'global' (default) or a region.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/network-peerings/update b/gcloud/alpha/vmware/network-peerings/update
new file mode 100644
index 000000000..df4d407ff
--- /dev/null
+++ b/gcloud/alpha/vmware/network-peerings/update
@@ -0,0 +1,57 @@
+NAME
+    gcloud alpha vmware network-peerings update - update a Google Cloud VMware
+        Engine VPC network peering
+
+SYNOPSIS
+    gcloud alpha vmware network-peerings update NETWORK_PEERING
+        [--description=DESCRIPTION] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update a VMware Engine VPC network peering description.
+
+EXAMPLES
+    To update only the description of a VPC network peering named my-peering to
+    Example description, run:
+
+        $ gcloud alpha vmware network-peerings update my-peering \
+            --description="Example description"
+
+    In this example, the project is taken from gcloud properties core/project
+    and location is taken as global.
+
+POSITIONAL ARGUMENTS
+     VMware Engine VPC network peering resource - network_peering. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument network_peering on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       NETWORK_PEERING
+          ID of the VMware Engine VPC network peering or fully qualified
+          identifier for the VMware Engine VPC network peering. To set the
+          network-peering attribute:
+          ▸ provide the argument network_peering on the command line.
+
+FLAGS
+     --description=DESCRIPTION
+        Updated description for this VPC network peering.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist.
+
diff --git a/gcloud/alpha/vmware/private-clouds/create b/gcloud/alpha/vmware/private-clouds/create
index 64852de60..3b83ef387 100644
--- a/gcloud/alpha/vmware/private-clouds/create
+++ b/gcloud/alpha/vmware/private-clouds/create
@@ -95,8 +95,7 @@ REQUIRED FLAGS
         cloud.
 
      --node-count=NODE_COUNT
-        Node type to use for management cluster nodes. To get a list of
-        available node types, run gcloud alpha vmware nodetypes list.
+        Number of nodes in the management cluster.
 
      Node type resource - node_type. This represents a Cloud resource. (NOTE)
      Some attributes are not given arguments in this group but can be set in
diff --git a/gcloud/app/instances/ssh b/gcloud/app/instances/ssh
index 2fb6d301d..1b3892f9d 100644
--- a/gcloud/app/instances/ssh
+++ b/gcloud/app/instances/ssh
@@ -9,7 +9,13 @@ SYNOPSIS
 
 DESCRIPTION
     gcloud app instances ssh lets you remotely log in to your running App
-    Engine Flexible instances.
+    Engine Flexible instances under two conditions:
+      ▪ The instance is running.
+      ▪ The instance has an external IP address. To check from the Cloud
+        Console, go to the Instances page and confirm that there is an IP
+        address listed in the VM IP column. To check from your app.yaml, open
+        your app.yaml and look at the network settings. The instance_ip_mode
+        field must be either not listed or set to external.
 
     gcloud app instances ssh resolves the instance's IP address and
     pre-populates the VM with a public key managed by gcloud. If the gcloud
diff --git a/gcloud/beta/access-approval/settings/update b/gcloud/beta/access-approval/settings/update
index fb2270f45..e1beb3512 100644
--- a/gcloud/beta/access-approval/settings/update
+++ b/gcloud/beta/access-approval/settings/update
@@ -4,6 +4,7 @@ NAME
 
 SYNOPSIS
     gcloud beta access-approval settings update
+        [--active_key_version=ACTIVE_KEY_VERSION]
         [--enrolled_services=ENROLLED_SERVICES]
         [--notification_emails=NOTIFICATION_EMAILS]
         [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT]
@@ -16,17 +17,17 @@ DESCRIPTION
     services).
 
 EXAMPLES
-    Update notification emails associated with project 'p1', run:
+    Update notification emails associated with project p1, run:
 
         $ gcloud beta access-approval settings update --project=p1 \
           --notification_emails='foo@example.com, bar@example.com'
 
-    Enable Access Approval enforcement for folder 'f1':
+    Enable Access Approval enforcement for folder f1:
 
         $ gcloud beta access-approval settings update --folder=f1 \
           --enrolled_services=all
 
-    Enable Access Approval enforcement for organization 'org1' for only Cloud
+    Enable Access Approval enforcement for organization org1 for only Cloud
     Storage and Compute products and set the notification emails at the same
     time:
 
@@ -34,7 +35,17 @@ EXAMPLES
           --enrolled_services='storage.googleapis.com,compute.googleapis.c\
         om' --notification_emails='security_team@example.com'
 
+    Update active key version for project p1:
+
+        $ gcloud beta access-approval settings update --project=p1 \
+          --active_key_version='projects/p1/locations/global/keyRings/sign\
+        ing-keys/cryptoKeys/signing-key/cryptoKeyVersions/1'
+
 FLAGS
+     --active_key_version=ACTIVE_KEY_VERSION
+        The asymmetric crypto key version to use for signing approval requests.
+        Use '' to remove the custom signing key.
+
      --enrolled_services=ENROLLED_SERVICES
         Comma-separated list of services to enroll for Access Approval or 'all'
         for all supported services. Note for project and folder enrollments,
diff --git a/gcloud/beta/app/instances/ssh b/gcloud/beta/app/instances/ssh
index c34dce1a3..e99fc06f3 100644
--- a/gcloud/beta/app/instances/ssh
+++ b/gcloud/beta/app/instances/ssh
@@ -9,7 +9,13 @@ SYNOPSIS
 
 DESCRIPTION
     (BETA) gcloud beta app instances ssh lets you remotely log in to your
-    running App Engine Flexible instances.
+    running App Engine Flexible instances under two conditions:
+      ▪ The instance is running.
+      ▪ The instance has an external IP address. To check from the Cloud
+        Console, go to the Instances page and confirm that there is an IP
+        address listed in the VM IP column. To check from your app.yaml, open
+        your app.yaml and look at the network settings. The instance_ip_mode
+        field must be either not listed or set to external.
 
     gcloud beta app instances ssh resolves the instance's IP address and
     pre-populates the VM with a public key managed by gcloud. If the gcloud
diff --git a/gcloud/beta/composer/environments/check-upgrade b/gcloud/beta/composer/environments/check-upgrade
index 8ce714f17..233a5e642 100644
--- a/gcloud/beta/composer/environments/check-upgrade
+++ b/gcloud/beta/composer/environments/check-upgrade
@@ -41,8 +41,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/create b/gcloud/beta/composer/environments/create
index dd2259fe0..230d51f16 100644
--- a/gcloud/beta/composer/environments/create
+++ b/gcloud/beta/composer/environments/create
@@ -85,8 +85,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/delete b/gcloud/beta/composer/environments/delete
index 327e9c032..bd98aa245 100644
--- a/gcloud/beta/composer/environments/delete
+++ b/gcloud/beta/composer/environments/delete
@@ -44,8 +44,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environments. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environments on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/describe b/gcloud/beta/composer/environments/describe
index 4138dcc25..60cd22a0e 100644
--- a/gcloud/beta/composer/environments/describe
+++ b/gcloud/beta/composer/environments/describe
@@ -35,8 +35,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/list-packages b/gcloud/beta/composer/environments/list-packages
index f23c53329..d6cfc49bb 100644
--- a/gcloud/beta/composer/environments/list-packages
+++ b/gcloud/beta/composer/environments/list-packages
@@ -41,8 +41,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/list-upgrades b/gcloud/beta/composer/environments/list-upgrades
index bdc98b8e3..a93eb9dd2 100644
--- a/gcloud/beta/composer/environments/list-upgrades
+++ b/gcloud/beta/composer/environments/list-upgrades
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/restart-web-server b/gcloud/beta/composer/environments/restart-web-server
index c9ae1411b..fce141bff 100644
--- a/gcloud/beta/composer/environments/restart-web-server
+++ b/gcloud/beta/composer/environments/restart-web-server
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/run b/gcloud/beta/composer/environments/run
index 3233e23bf..584635ac7 100644
--- a/gcloud/beta/composer/environments/run
+++ b/gcloud/beta/composer/environments/run
@@ -23,7 +23,7 @@ EXAMPLES
 
         airflow trigger_dag some_dag --run_id=foo
 
-    The following command (for environments with Airflow 2.0+):
+    The following command (for environments with Airflow 1.10.14+):
 
         gcloud beta composer environments run myenv dags list
 
@@ -53,8 +53,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
@@ -64,15 +64,15 @@ POSITIONAL ARGUMENTS
         The Airflow CLI subcommand to run. Available subcommands include
         (listed with Airflow versions that support): backfill [**, 2.0.0),
         clear [**, 2.0.0), connections [**, 3.0.0), dag_state [**, 2.0.0), dags
-        [2.0.0, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
+        [1.10.14, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
         kubernetes [2.1.4, 3.0.0), list_dag_runs [1.10.2, 2.0.0), list_dags
         [**, 2.0.0), list_tasks [**, 2.0.0), next_execution [1.10.2, 2.0.0),
-        pause [**, 2.0.0), pool [**, 2.0.0), pools [2.0.0, 3.0.0), render [**,
-        2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [2.0.0,
+        pause [**, 2.0.0), pool [**, 2.0.0), pools [1.10.14, 3.0.0), render
+        [**, 2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [1.10.14,
         3.0.0), sync_perm [1.10.2, 2.0.0), task_failed_deps [**, 2.0.0),
-        task_state [**, 2.0.0), tasks [2.0.0, 3.0.0), test [**, 2.0.0),
+        task_state [**, 2.0.0), tasks [1.10.14, 3.0.0), test [**, 2.0.0),
         trigger_dag [**, 2.0.0), unpause [**, 2.0.0), upgrade_check [1.10.15,
-        2.0.0), users [2.0.0, 3.0.0), variables [**, 3.0.0), version [**,
+        2.0.0), users [1.10.14, 3.0.0), variables [**, 3.0.0), version [**,
         3.0.0) (see
         https://airflow.apache.org/docs/apache-airflow/stable/cli-and-env-variables-ref.html
         for more info).
diff --git a/gcloud/beta/composer/environments/snapshots/load b/gcloud/beta/composer/environments/snapshots/load
index eef586474..381b71e8f 100644
--- a/gcloud/beta/composer/environments/snapshots/load
+++ b/gcloud/beta/composer/environments/snapshots/load
@@ -37,8 +37,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/snapshots/save b/gcloud/beta/composer/environments/snapshots/save
index 195107b20..296838aa3 100644
--- a/gcloud/beta/composer/environments/snapshots/save
+++ b/gcloud/beta/composer/environments/snapshots/save
@@ -36,8 +36,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/dags/delete b/gcloud/beta/composer/environments/storage/dags/delete
index 1ded73550..dccd4b38f 100644
--- a/gcloud/beta/composer/environments/storage/dags/delete
+++ b/gcloud/beta/composer/environments/storage/dags/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/dags/export b/gcloud/beta/composer/environments/storage/dags/export
index 316dfda85..5f75d4937 100644
--- a/gcloud/beta/composer/environments/storage/dags/export
+++ b/gcloud/beta/composer/environments/storage/dags/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/dags/import b/gcloud/beta/composer/environments/storage/dags/import
index 41647d806..a6bcd683e 100644
--- a/gcloud/beta/composer/environments/storage/dags/import
+++ b/gcloud/beta/composer/environments/storage/dags/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/dags/list b/gcloud/beta/composer/environments/storage/dags/list
index 4da221d17..8867756aa 100644
--- a/gcloud/beta/composer/environments/storage/dags/list
+++ b/gcloud/beta/composer/environments/storage/dags/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/data/delete b/gcloud/beta/composer/environments/storage/data/delete
index f0a6b467c..8e7e13f55 100644
--- a/gcloud/beta/composer/environments/storage/data/delete
+++ b/gcloud/beta/composer/environments/storage/data/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/data/export b/gcloud/beta/composer/environments/storage/data/export
index e89157040..936b133e1 100644
--- a/gcloud/beta/composer/environments/storage/data/export
+++ b/gcloud/beta/composer/environments/storage/data/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/data/import b/gcloud/beta/composer/environments/storage/data/import
index 107847f92..3c0b16a47 100644
--- a/gcloud/beta/composer/environments/storage/data/import
+++ b/gcloud/beta/composer/environments/storage/data/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/data/list b/gcloud/beta/composer/environments/storage/data/list
index e4d6f65f0..d05f9db0e 100644
--- a/gcloud/beta/composer/environments/storage/data/list
+++ b/gcloud/beta/composer/environments/storage/data/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/plugins/delete b/gcloud/beta/composer/environments/storage/plugins/delete
index 58328f0c7..1311b6f9a 100644
--- a/gcloud/beta/composer/environments/storage/plugins/delete
+++ b/gcloud/beta/composer/environments/storage/plugins/delete
@@ -45,8 +45,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/plugins/export b/gcloud/beta/composer/environments/storage/plugins/export
index fb6305f01..a014f155f 100644
--- a/gcloud/beta/composer/environments/storage/plugins/export
+++ b/gcloud/beta/composer/environments/storage/plugins/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/plugins/import b/gcloud/beta/composer/environments/storage/plugins/import
index 62663560f..1e81b25ca 100644
--- a/gcloud/beta/composer/environments/storage/plugins/import
+++ b/gcloud/beta/composer/environments/storage/plugins/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/storage/plugins/list b/gcloud/beta/composer/environments/storage/plugins/list
index b93cd097a..245bad210 100644
--- a/gcloud/beta/composer/environments/storage/plugins/list
+++ b/gcloud/beta/composer/environments/storage/plugins/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/composer/environments/update b/gcloud/beta/composer/environments/update
index a7eadd8f7..ea11a9598 100644
--- a/gcloud/beta/composer/environments/update
+++ b/gcloud/beta/composer/environments/update
@@ -66,8 +66,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/beta/compute/backend-buckets/create b/gcloud/beta/compute/backend-buckets/create
index edf775941..172235dce 100644
--- a/gcloud/beta/compute/backend-buckets/create
+++ b/gcloud/beta/compute/backend-buckets/create
@@ -60,7 +60,7 @@ OPTIONAL FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/beta/compute/backend-buckets/update b/gcloud/beta/compute/backend-buckets/update
index 93839a2fe..39000c257 100644
--- a/gcloud/beta/compute/backend-buckets/update
+++ b/gcloud/beta/compute/backend-buckets/update
@@ -38,7 +38,7 @@ FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/beta/compute/backend-services/create b/gcloud/beta/compute/backend-services/create
index 0ef914242..97167eea6 100644
--- a/gcloud/beta/compute/backend-services/create
+++ b/gcloud/beta/compute/backend-services/create
@@ -624,8 +624,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/beta/compute/backend-services/update b/gcloud/beta/compute/backend-services/update
index d9dea6361..b6d552232 100644
--- a/gcloud/beta/compute/backend-services/update
+++ b/gcloud/beta/compute/backend-services/update
@@ -429,8 +429,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/beta/compute/networks/subnets/create b/gcloud/beta/compute/networks/subnets/create
index 02bbbe65a..6bedd3057 100644
--- a/gcloud/beta/compute/networks/subnets/create
+++ b/gcloud/beta/compute/networks/subnets/create
@@ -55,11 +55,13 @@ OPTIONAL FLAGS
      --ipv6-access-type=IPV6_ACCESS_TYPE
         IPv6 access type can be specified only when the subnet is created, or
         when the subnet is first updated to have a stack type of IPV4_IPV6.
-        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be
-        (currently only one value is supported):
+        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be one
+        of:
 
          EXTERNAL
             VMs in this subnet can have external IPv6.
+         INTERNAL
+            VMs in this subnet can have internal IPv6.
 
      --logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL
         Can only be specified if VPC Flow Logs for this subnetwork is enabled.
diff --git a/gcloud/beta/compute/networks/subnets/update b/gcloud/beta/compute/networks/subnets/update
index f55fbad01..75e3d04fb 100644
--- a/gcloud/beta/compute/networks/subnets/update
+++ b/gcloud/beta/compute/networks/subnets/update
@@ -47,11 +47,13 @@ FLAGS
      --ipv6-access-type=IPV6_ACCESS_TYPE
         IPv6 access type can be specified only when the subnet is created, or
         when the subnet is first updated to have a stack type of IPV4_IPV6.
-        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be
-        (currently only one value is supported):
+        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be one
+        of:
 
          EXTERNAL
             VMs in this subnet can have external IPv6.
+         INTERNAL
+            VMs in this subnet can have internal IPv6.
 
      --logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL
         Can only be specified if VPC Flow Logs for this subnetwork is enabled.
diff --git a/gcloud/beta/container/binauthz/attestors/add-iam-policy-binding b/gcloud/beta/container/binauthz/attestors/add-iam-policy-binding
index 236329862..0cf25a561 100644
--- a/gcloud/beta/container/binauthz/attestors/add-iam-policy-binding
+++ b/gcloud/beta/container/binauthz/attestors/add-iam-policy-binding
@@ -4,20 +4,35 @@ NAME
 
 SYNOPSIS
     gcloud beta container binauthz attestors add-iam-policy-binding ATTESTOR
-        --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...]
+        --member=PRINCIPAL --role=ROLE
+        [--condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (BETA) Add an IAM policy binding to a Binary Authorization attestor.
+    (BETA) Add an IAM policy binding to the IAM policy of a Binary
+    Authorization attestor. One binding consists of a member, a role, and an
+    optional condition.
 
 EXAMPLES
     To add an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud beta container binauthz attestors add-iam-policy-binding \
             my_attestor --member='user:test-user@gmail.com' \
             --role='roles/binaryauthorization.attestorsEditor'
 
+    To add an IAM policy binding which expires at the end of the year 2018 for
+    the role of roles/binaryauthorization.attestorsEditor and the user
+    test-user@gmail.com on attestor my_attestor, run:
+
+        $ gcloud beta container binauthz attestors add-iam-policy-binding \
+            my_attestor --member='user:test-user@gmail.com' \
+            --role='roles/binaryauthorization.attestorsEditor' \
+            --condition='expression=request.time <
+         timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
+        tion=Expires at midnight on 2018-12-31'
+
     See https://cloud.google.com/iam/docs/managing-policies for details of
     policy role and member types.
 
@@ -59,6 +74,44 @@ REQUIRED FLAGS
         for a custom role, such as
         organizations/{ORGANIZATION_ID}/roles/logging.viewer.
 
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --condition=[KEY=VALUE,...]
+          A condition to include in the binding. When the condition is
+          explicitly specified as None (--condition=None), a binding without a
+          condition is added. When the condition is specified and is not None,
+          --role cannot be a basic role. Basic roles are roles/editor,
+          roles/owner, and roles/viewer. For more on conditions, refer to the
+          conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/beta/container/binauthz/attestors/remove-iam-policy-binding b/gcloud/beta/container/binauthz/attestors/remove-iam-policy-binding
index 9f1edee05..579719849 100644
--- a/gcloud/beta/container/binauthz/attestors/remove-iam-policy-binding
+++ b/gcloud/beta/container/binauthz/attestors/remove-iam-policy-binding
@@ -4,21 +4,37 @@ NAME
 
 SYNOPSIS
     gcloud beta container binauthz attestors remove-iam-policy-binding ATTESTOR
-        --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...]
+        --member=PRINCIPAL --role=ROLE
+        [--all | --condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (BETA) Remove an IAM policy binding of a Binary Authorization attestor.
+    (BETA) Remove an IAM policy binding from the IAM policy of a Binary
+    Authorization attestor. One binding consists of a member, a role, and an
+    optional condition.
 
 EXAMPLES
-    To Remove an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    To remove an IAM policy binding for the role of
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud beta container binauthz attestors \
             remove-iam-policy-binding my_attestor \
             --member='user:test-user@gmail.com' \
             --role='roles/binaryauthorization.attestorsEditor'
 
+    To remove an IAM policy binding which expires at the end of the year 2018
+    for the role of roles/binaryauthorization.attestorsEditor and the user
+    test-user@gmail.com on attestor my_attestor, run:
+
+        $ gcloud beta container binauthz attestors \
+            remove-iam-policy-binding my_attestor \
+            --member='user:test-user@gmail.com' \
+            --role='roles/binaryauthorization.attestorsEditor' \
+            --condition='expression=request.time <
+         timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
+        tion=Expires at midnight on 2018-12-31'
+
     See https://cloud.google.com/iam/docs/managing-policies for details of
     policy role and member types.
 
@@ -61,6 +77,48 @@ REQUIRED FLAGS
      --role=ROLE
         The role to remove the principal from.
 
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --all
+          Remove all bindings with this role and principal, irrespective of any
+          conditions.
+
+       --condition=[KEY=VALUE,...]
+          The condition of the binding that you want to remove. When the
+          condition is explicitly specified as None (--condition=None), a
+          binding without a condition is removed. Otherwise, only a binding
+          with a condition that exactly matches the specified condition
+          (including the optional description) is removed. For more on
+          conditions, refer to the conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/beta/container/binauthz/policy/add-iam-policy-binding b/gcloud/beta/container/binauthz/policy/add-iam-policy-binding
index 8b48db3cd..13bc14f3e 100644
--- a/gcloud/beta/container/binauthz/policy/add-iam-policy-binding
+++ b/gcloud/beta/container/binauthz/policy/add-iam-policy-binding
@@ -4,10 +4,14 @@ NAME
 
 SYNOPSIS
     gcloud beta container binauthz policy add-iam-policy-binding
-        --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...]
+        --member=PRINCIPAL --role=ROLE
+        [--condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (BETA) Add an IAM policy binding to a Binary Authorization policy.
+    (BETA) Add an IAM policy binding to the IAM policy of a Binary
+    Authorization policy. One binding consists of a member, a role, and an
+    optional condition.
 
 EXAMPLES
     To add an IAM policy binding for the role of
@@ -19,6 +23,18 @@ EXAMPLES
             --member='user:test-user@gmail.com' \
             --role='roles/binaryauthorization.attestationAuthoritiesEditor'
 
+    To add an IAM policy binding which expires at the end of the year 2018 for
+    the role of 'roles/binaryauthorization.attestationAuthoritiesEditor' and
+    the user 'test-user@gmail.com' on the current project's Binary
+    Authorization policy, run:
+
+        $ gcloud beta container binauthz policy add-iam-policy-binding \
+            --member='user:test-user@gmail.com' \
+            --role='roles/binaryauthorization.attestationAuthoritiesEditor' \
+        --condition='expression=request.time <
+         timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
+        tion=Expires at midnight on 2018-12-31'
+
     See https://cloud.google.com/iam/docs/managing-policies for details of
     policy role and member types.
 
@@ -43,6 +59,44 @@ REQUIRED FLAGS
         for a custom role, such as
         organizations/{ORGANIZATION_ID}/roles/logging.viewer.
 
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --condition=[KEY=VALUE,...]
+          A condition to include in the binding. When the condition is
+          explicitly specified as None (--condition=None), a binding without a
+          condition is added. When the condition is specified and is not None,
+          --role cannot be a basic role. Basic roles are roles/editor,
+          roles/owner, and roles/viewer. For more on conditions, refer to the
+          conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/beta/container/binauthz/policy/remove-iam-policy-binding b/gcloud/beta/container/binauthz/policy/remove-iam-policy-binding
index de79ba968..32346e060 100644
--- a/gcloud/beta/container/binauthz/policy/remove-iam-policy-binding
+++ b/gcloud/beta/container/binauthz/policy/remove-iam-policy-binding
@@ -4,13 +4,17 @@ NAME
 
 SYNOPSIS
     gcloud beta container binauthz policy remove-iam-policy-binding
-        --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...]
+        --member=PRINCIPAL --role=ROLE
+        [--all | --condition=[KEY=VALUE,...]
+          | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (BETA) Remove an IAM policy binding of a Binary Authorization policy.
+    (BETA) Remove an IAM policy binding from the IAM policy of a Binary
+    Authorization policy. One binding consists of a member, a role, and an
+    optional condition.
 
 EXAMPLES
-    To Remove an IAM policy binding for the role of
+    To remove an IAM policy binding for the role of
     'roles/binaryauthorization.attestationAuthoritiesEditor' for the user
     'test-user@gmail.com' on the current project's Binary Authorization policy,
     run:
@@ -19,6 +23,18 @@ EXAMPLES
             --member='user:test-user@gmail.com' \
             --role='roles/binaryauthorization.attestationAuthoritiesEditor'
 
+    To remove an IAM policy binding which expires at the end of the year 2018
+    for the role of 'roles/binaryauthorization.attestationAuthoritiesEditor'
+    and the user 'test-user@gmail.com' on the current project's Binary
+    Authorization policy, run:
+
+        $ gcloud beta container binauthz policy remove-iam-policy-binding \
+            --member='user:test-user@gmail.com' \
+            --role='roles/binaryauthorization.attestationAuthoritiesEditor' \
+        --condition='expression=request.time <
+         timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\
+        tion=Expires at midnight on 2018-12-31'
+
     See https://cloud.google.com/iam/docs/managing-policies for details of
     policy role and member types.
 
@@ -44,6 +60,48 @@ REQUIRED FLAGS
      --role=ROLE
         The role to remove the principal from.
 
+OPTIONAL FLAGS
+     At most one of these can be specified:
+
+       --all
+          Remove all bindings with this role and principal, irrespective of any
+          conditions.
+
+       --condition=[KEY=VALUE,...]
+          The condition of the binding that you want to remove. When the
+          condition is explicitly specified as None (--condition=None), a
+          binding without a condition is removed. Otherwise, only a binding
+          with a condition that exactly matches the specified condition
+          (including the optional description) is removed. For more on
+          conditions, refer to the conditions overview guide:
+          https://cloud.google.com/iam/docs/conditions-overview
+
+          When using the --condition flag, include the following key-value
+          pairs:
+
+           expression
+              (Required) Condition expression that evaluates to True or False.
+              This uses a subset of Common Expression Language syntax.
+
+              If the condition expression includes a comma, use a different
+              delimiter to separate the key-value pairs. Specify the delimiter
+              before listing the key-value pairs. For example, to specify a
+              colon (:) as the delimiter, do the following:
+              --condition=^:^title=TITLE:expression=EXPRESSION. For more
+              information, see
+              https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
+
+           title
+              (Required) A short string describing the purpose of the
+              expression.
+
+           description
+              (Optional) Additional description for the expression.
+
+       --condition-from-file=CONDITION_FROM_FILE
+          Path to a local JSON or YAML file that defines the condition. To see
+          available fields, see the help for --condition.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,
diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create
index 7c512e42f..f061c05b6 100644
--- a/gcloud/beta/container/clusters/create
+++ b/gcloud/beta/container/clusters/create
@@ -1212,16 +1212,10 @@ FLAGS
                 Number of extra (surge) nodes to be created on each upgrade of
                 an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
              --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                 Number of nodes that can be unavailable at the same time on
                 each upgrade of an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
            Flags to specify identity for autoprovisioned nodes:
 
              --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/beta/container/clusters/update b/gcloud/beta/container/clusters/update
index b67d96b0a..b7c166c3a 100644
--- a/gcloud/beta/container/clusters/update
+++ b/gcloud/beta/container/clusters/update
@@ -828,16 +828,10 @@ REQUIRED FLAGS
                   Number of extra (surge) nodes to be created on each upgrade
                   of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
                --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                   Number of nodes that can be unavailable at the same time on
                   each upgrade of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
              Flags to specify identity for autoprovisioned nodes:
 
                --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/beta/logging/logs/list b/gcloud/beta/logging/logs/list
index 55c51c095..e102d3918 100644
--- a/gcloud/beta/logging/logs/list
+++ b/gcloud/beta/logging/logs/list
@@ -2,8 +2,9 @@ NAME
     gcloud beta logging logs list - lists your project's logs
 
 SYNOPSIS
-    gcloud beta logging logs list [--filter=EXPRESSION] [--limit=LIMIT]
-        [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+    gcloud beta logging logs list
+        [--bucket=BUCKET --location=LOCATION --view=VIEW] [--filter=EXPRESSION]
+        [--limit=LIMIT] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (BETA) Only logs that contain log entries are listed.
@@ -13,6 +14,33 @@ EXAMPLES
 
         $ gcloud beta logging logs list
 
+    To list all logs for a view:
+
+        $ gcloud beta logging logs list --bucket=[BUCKET_ID] \
+            --location=[LOCATION] --view=[VIEW_ID]
+
+FLAGS
+     These arguments are used in conjunction with the parent to construct a
+     view resource.
+
+       --bucket=BUCKET
+          Id of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --location=LOCATION
+          Location of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --view=VIEW
+          Id of the view.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
 LIST COMMAND FLAGS
      --filter=EXPRESSION
         Apply a Boolean filter EXPRESSION to each resource item to be listed.
diff --git a/gcloud/beta/sql/instances/patch b/gcloud/beta/sql/instances/patch
index 70b8878c6..632d41985 100644
--- a/gcloud/beta/sql/instances/patch
+++ b/gcloud/beta/sql/instances/patch
@@ -112,7 +112,8 @@ FLAGS
         POSTGRES_14, SQLSERVER_2017_EXPRESS, SQLSERVER_2017_WEB,
         SQLSERVER_2017_STANDARD, SQLSERVER_2017_ENTERPRISE,
         SQLSERVER_2019_EXPRESS, SQLSERVER_2019_WEB, SQLSERVER_2019_STANDARD,
-        SQLSERVER_2019_ENTERPRISE, MYSQL_8_0_18, MYSQL_8_0_26.
+        SQLSERVER_2019_ENTERPRISE, MYSQL_8_0_18, MYSQL_8_0_26, MYSQL_8_0_27,
+        MYSQL_8_0_28.
 
      --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE
         Date when the deny maintenance period ends, that is 2021-01-10.
diff --git a/gcloud/composer/environments/create b/gcloud/composer/environments/create
index 864ec6963..15eb35dbf 100644
--- a/gcloud/composer/environments/create
+++ b/gcloud/composer/environments/create
@@ -79,8 +79,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/delete b/gcloud/composer/environments/delete
index 15222a888..521279564 100644
--- a/gcloud/composer/environments/delete
+++ b/gcloud/composer/environments/delete
@@ -44,8 +44,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environments. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environments on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/describe b/gcloud/composer/environments/describe
index a7080baf7..bb18aceae 100644
--- a/gcloud/composer/environments/describe
+++ b/gcloud/composer/environments/describe
@@ -35,8 +35,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/list-packages b/gcloud/composer/environments/list-packages
index 86a883542..daf432dc3 100644
--- a/gcloud/composer/environments/list-packages
+++ b/gcloud/composer/environments/list-packages
@@ -44,8 +44,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/run b/gcloud/composer/environments/run
index f660cd99c..9f4311b70 100644
--- a/gcloud/composer/environments/run
+++ b/gcloud/composer/environments/run
@@ -22,7 +22,7 @@ EXAMPLES
 
         airflow trigger_dag some_dag --run_id=foo
 
-    The following command (for environments with Airflow 2.0+):
+    The following command (for environments with Airflow 1.10.14+):
 
         gcloud composer environments run myenv dags list
 
@@ -52,8 +52,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
@@ -63,15 +63,15 @@ POSITIONAL ARGUMENTS
         The Airflow CLI subcommand to run. Available subcommands include
         (listed with Airflow versions that support): backfill [**, 2.0.0),
         clear [**, 2.0.0), connections [**, 3.0.0), dag_state [**, 2.0.0), dags
-        [2.0.0, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
+        [1.10.14, 3.0.0), delete_dag [1.10.1, 2.0.0), kerberos [**, 3.0.0),
         kubernetes [2.1.4, 3.0.0), list_dag_runs [1.10.2, 2.0.0), list_dags
         [**, 2.0.0), list_tasks [**, 2.0.0), next_execution [1.10.2, 2.0.0),
-        pause [**, 2.0.0), pool [**, 2.0.0), pools [2.0.0, 3.0.0), render [**,
-        2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [2.0.0,
+        pause [**, 2.0.0), pool [**, 2.0.0), pools [1.10.14, 3.0.0), render
+        [**, 2.0.0), roles [2.0.0, 3.0.0), run [**, 2.0.0), sync-perm [1.10.14,
         3.0.0), sync_perm [1.10.2, 2.0.0), task_failed_deps [**, 2.0.0),
-        task_state [**, 2.0.0), tasks [2.0.0, 3.0.0), test [**, 2.0.0),
+        task_state [**, 2.0.0), tasks [1.10.14, 3.0.0), test [**, 2.0.0),
         trigger_dag [**, 2.0.0), unpause [**, 2.0.0), upgrade_check [1.10.15,
-        2.0.0), users [2.0.0, 3.0.0), variables [**, 3.0.0), version [**,
+        2.0.0), users [1.10.14, 3.0.0), variables [**, 3.0.0), version [**,
         3.0.0) (see
         https://airflow.apache.org/docs/apache-airflow/stable/cli-and-env-variables-ref.html
         for more info).
diff --git a/gcloud/composer/environments/storage/dags/delete b/gcloud/composer/environments/storage/dags/delete
index 5b456d24a..a57e58bf8 100644
--- a/gcloud/composer/environments/storage/dags/delete
+++ b/gcloud/composer/environments/storage/dags/delete
@@ -44,8 +44,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/dags/export b/gcloud/composer/environments/storage/dags/export
index f1c03adae..a38db43d6 100644
--- a/gcloud/composer/environments/storage/dags/export
+++ b/gcloud/composer/environments/storage/dags/export
@@ -111,8 +111,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/dags/import b/gcloud/composer/environments/storage/dags/import
index 7b5561baa..54dd2b11f 100644
--- a/gcloud/composer/environments/storage/dags/import
+++ b/gcloud/composer/environments/storage/dags/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/dags/list b/gcloud/composer/environments/storage/dags/list
index 68bb84d02..57ba5268d 100644
--- a/gcloud/composer/environments/storage/dags/list
+++ b/gcloud/composer/environments/storage/dags/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/data/delete b/gcloud/composer/environments/storage/data/delete
index 78b9cd770..bc780d38d 100644
--- a/gcloud/composer/environments/storage/data/delete
+++ b/gcloud/composer/environments/storage/data/delete
@@ -44,8 +44,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/data/export b/gcloud/composer/environments/storage/data/export
index 3bb14ab99..fcbcd5eb0 100644
--- a/gcloud/composer/environments/storage/data/export
+++ b/gcloud/composer/environments/storage/data/export
@@ -111,8 +111,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/data/import b/gcloud/composer/environments/storage/data/import
index 8257b3951..b0cfdfa28 100644
--- a/gcloud/composer/environments/storage/data/import
+++ b/gcloud/composer/environments/storage/data/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/data/list b/gcloud/composer/environments/storage/data/list
index c14e41f38..16cd03f1c 100644
--- a/gcloud/composer/environments/storage/data/list
+++ b/gcloud/composer/environments/storage/data/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/plugins/delete b/gcloud/composer/environments/storage/plugins/delete
index ea15e375a..c65685188 100644
--- a/gcloud/composer/environments/storage/plugins/delete
+++ b/gcloud/composer/environments/storage/plugins/delete
@@ -44,8 +44,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/plugins/export b/gcloud/composer/environments/storage/plugins/export
index c937fcee7..b3e039571 100644
--- a/gcloud/composer/environments/storage/plugins/export
+++ b/gcloud/composer/environments/storage/plugins/export
@@ -112,8 +112,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/plugins/import b/gcloud/composer/environments/storage/plugins/import
index 7afc59451..35fc90b4f 100644
--- a/gcloud/composer/environments/storage/plugins/import
+++ b/gcloud/composer/environments/storage/plugins/import
@@ -122,8 +122,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/storage/plugins/list b/gcloud/composer/environments/storage/plugins/list
index 27f17c500..cd72bd5a8 100644
--- a/gcloud/composer/environments/storage/plugins/list
+++ b/gcloud/composer/environments/storage/plugins/list
@@ -38,8 +38,8 @@ REQUIRED FLAGS
           group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument --environment on the command line with a
             fully specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/composer/environments/update b/gcloud/composer/environments/update
index 030484185..698427f75 100644
--- a/gcloud/composer/environments/update
+++ b/gcloud/composer/environments/update
@@ -58,8 +58,8 @@ POSITIONAL ARGUMENTS
           this group are specified.
 
        --location=LOCATION
-          Compute Engine region in which to create the environment. To set the
-          location attribute:
+          Region where Composer environment runs or in which to create the
+          environment. To set the location attribute:
           ▸ provide the argument environment on the command line with a fully
             specified name;
           ▸ provide the argument --location on the command line;
diff --git a/gcloud/compute/backend-buckets/create b/gcloud/compute/backend-buckets/create
index 7d972c068..75726ab83 100644
--- a/gcloud/compute/backend-buckets/create
+++ b/gcloud/compute/backend-buckets/create
@@ -59,7 +59,7 @@ OPTIONAL FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/compute/backend-buckets/update b/gcloud/compute/backend-buckets/update
index 9ccdbef6b..3c6840144 100644
--- a/gcloud/compute/backend-buckets/update
+++ b/gcloud/compute/backend-buckets/update
@@ -36,7 +36,7 @@ FLAGS
 
      --cache-key-query-string-whitelist=[QUERY_STRING,...]
         Specifies a comma-separated list of query string parameters to include
-        in cache keys. All other parameters are excluded. '&' and '=' are
+        in cache keys. Default parameters are always included. '&' and '=' are
         percent encoded and not treated as delimiters.
 
      --cache-mode=CACHE_MODE
diff --git a/gcloud/compute/backend-services/create b/gcloud/compute/backend-services/create
index 0ab1cff88..29c0bdbc6 100644
--- a/gcloud/compute/backend-services/create
+++ b/gcloud/compute/backend-services/create
@@ -425,7 +425,7 @@ FLAGS
         Protocol for incoming requests.
 
         If the load-balancing-scheme is INTERNAL (Internal TCP/UDP Load
-        Balancing), the protocol must be one of: TCP, UDP.
+        Balancing), the protocol must be one of: TCP, UDP, UNSPECIFIED.
 
         If the load-balancing-scheme is INTERNAL_SELF_MANAGED (Traffic
         Director), the protocol must be one of: HTTP, HTTPS, HTTP2, GRPC.
@@ -438,7 +438,8 @@ FLAGS
         one of: HTTP, HTTPS, HTTP2, SSL, TCP.
 
         If the load-balancing-scheme is EXTERNAL and region is set (External
-        Network Load Balancing), the protocol must be one of: TCP, UDP.
+        Network Load Balancing), the protocol must be one of: TCP, UDP,
+        UNSPECIFIED.
 
         If the load-balancing-scheme is EXTERNAL_MANAGED (Envoy based External
         HTTP(S) Load Balancing), the protocol must be one of: HTTP, HTTPS,
@@ -583,8 +584,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/compute/backend-services/update b/gcloud/compute/backend-services/update
index c314caa59..67784bc76 100644
--- a/gcloud/compute/backend-services/update
+++ b/gcloud/compute/backend-services/update
@@ -251,7 +251,7 @@ FLAGS
         Protocol for incoming requests.
 
         If the load-balancing-scheme is INTERNAL (Internal TCP/UDP Load
-        Balancing), the protocol must be one of: TCP, UDP.
+        Balancing), the protocol must be one of: TCP, UDP, UNSPECIFIED.
 
         If the load-balancing-scheme is INTERNAL_SELF_MANAGED (Traffic
         Director), the protocol must be one of: HTTP, HTTPS, HTTP2, GRPC.
@@ -264,7 +264,8 @@ FLAGS
         one of: HTTP, HTTPS, HTTP2, SSL, TCP.
 
         If the load-balancing-scheme is EXTERNAL and region is set (External
-        Network Load Balancing), the protocol must be one of: TCP, UDP.
+        Network Load Balancing), the protocol must be one of: TCP, UDP,
+        UNSPECIFIED.
 
         If the load-balancing-scheme is EXTERNAL_MANAGED (Envoy based External
         HTTP(S) Load Balancing), the protocol must be one of: HTTP, HTTPS,
@@ -394,8 +395,14 @@ FLAGS
 
      --tracking-mode=TRACKING_MODE
         Specifies the connection key used for connection tracking. The default
-        value is PER_CONNECTION. TRACKING_MODE must be one of: PER_CONNECTION,
-        PER_SESSION.
+        value is PER_CONNECTION. Applicable only for backend service-based
+        network load balancers and internal TCP/UDP load balancers as part of a
+        connection tracking policy. For details, see: Connection tracking mode
+        for internal TCP/UDP load balancing
+        (https://cloud.google.com/load-balancing/docs/internal#tracking-mode)
+        and Connection tracking mode for network load balancing
+        (https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode).
+        TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION.
 
      At most one of these can be specified:
 
diff --git a/gcloud/compute/forwarding-rules/create b/gcloud/compute/forwarding-rules/create
index 1be74d57b..79b95b27f 100644
--- a/gcloud/compute/forwarding-rules/create
+++ b/gcloud/compute/forwarding-rules/create
@@ -177,12 +177,12 @@ OPTIONAL FLAGS
         IP protocol that the rule will serve. The default is TCP.
 
         Note that if the load-balancing scheme is INTERNAL, the protocol must
-        be one of: TCP, UDP.
+        be one of: TCP, UDP, L3_DEFAULT.
 
         For a load-balancing scheme that is EXTERNAL, all IP_PROTOCOL options
         are valid.
 
-        IP_PROTOCOL must be one of: AH, ESP, ICMP, SCTP, TCP, UDP.
+        IP_PROTOCOL must be one of: AH, ESP, ICMP, SCTP, TCP, UDP, L3_DEFAULT.
 
      --is-mirroring-collector
         If set, this forwarding rule can be used as a collector for packet
diff --git a/gcloud/compute/networks/subnets/create b/gcloud/compute/networks/subnets/create
index ffcfecd41..97b6c7dfe 100644
--- a/gcloud/compute/networks/subnets/create
+++ b/gcloud/compute/networks/subnets/create
@@ -55,11 +55,13 @@ OPTIONAL FLAGS
      --ipv6-access-type=IPV6_ACCESS_TYPE
         IPv6 access type can be specified only when the subnet is created, or
         when the subnet is first updated to have a stack type of IPV4_IPV6.
-        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be
-        (currently only one value is supported):
+        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be one
+        of:
 
          EXTERNAL
             VMs in this subnet can have external IPv6.
+         INTERNAL
+            VMs in this subnet can have internal IPv6.
 
      --logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL
         Can only be specified if VPC Flow Logs for this subnetwork is enabled.
diff --git a/gcloud/compute/networks/subnets/update b/gcloud/compute/networks/subnets/update
index 91bca4a5c..b5cba7d77 100644
--- a/gcloud/compute/networks/subnets/update
+++ b/gcloud/compute/networks/subnets/update
@@ -47,11 +47,13 @@ FLAGS
      --ipv6-access-type=IPV6_ACCESS_TYPE
         IPv6 access type can be specified only when the subnet is created, or
         when the subnet is first updated to have a stack type of IPV4_IPV6.
-        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be
-        (currently only one value is supported):
+        Once set, the access type is immutable. IPV6_ACCESS_TYPE must be one
+        of:
 
          EXTERNAL
             VMs in this subnet can have external IPv6.
+         INTERNAL
+            VMs in this subnet can have internal IPv6.
 
      --logging-aggregation-interval=LOGGING_AGGREGATION_INTERVAL
         Can only be specified if VPC Flow Logs for this subnetwork is enabled.
diff --git a/gcloud/compute/tpus/help b/gcloud/compute/tpus/help
index 6905a4e8b..6adffb891 100644
--- a/gcloud/compute/tpus/help
+++ b/gcloud/compute/tpus/help
@@ -30,6 +30,9 @@ GROUPS
      locations
         List or Describe Available Cloud TPU Locations.
 
+     tpu-vm
+        List, create, and manage Cloud TPU VM nodes.
+
      versions
         Explore Available Tensorflow versions for Cloud TPUs.
 
diff --git a/gcloud/compute/tpus/tpu-vm/accelerator-types/describe b/gcloud/compute/tpus/tpu-vm/accelerator-types/describe
new file mode 100644
index 000000000..cb7e9f456
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/accelerator-types/describe
@@ -0,0 +1,65 @@
+NAME
+    gcloud compute tpus tpu-vm accelerator-types describe - describe an
+        accelerator type available for Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm accelerator-types describe
+        (ACCELERATOR_TYPE : --zone=ZONE) [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Get details on an accelerator type.
+
+EXAMPLES
+    To describe the v3-8 accelerator type in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm accelerator-types describe v3-8 \
+            --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Accelerator type resource - Name of the accelerator type to describe. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways. To set the project attribute:
+      ◆ provide the argument accelerator_type on the command line with a
+        fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ACCELERATOR_TYPE
+          ID of the accelerator_type or fully qualified identifier for the
+          accelerator_type. To set the accelerator_type attribute:
+          ▸ provide the argument accelerator_type on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument accelerator_type on the command line with a
+            fully specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm accelerator-types describe
+
diff --git a/gcloud/compute/tpus/tpu-vm/accelerator-types/help b/gcloud/compute/tpus/tpu-vm/accelerator-types/help
new file mode 100644
index 000000000..f1cc60261
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/accelerator-types/help
@@ -0,0 +1,29 @@
+NAME
+    gcloud compute tpus tpu-vm accelerator-types - list or Describe Available
+        Cloud TPU VM node accelerator types
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm accelerator-types COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List or Describe Available Cloud TPU VM node accelerator types.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        Describe an accelerator type available for Cloud TPU VM nodes.
+
+     list
+        List available accelerator types for Cloud TPU VM nodes.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm accelerator-types
+
diff --git a/gcloud/compute/tpus/tpu-vm/accelerator-types/list b/gcloud/compute/tpus/tpu-vm/accelerator-types/list
new file mode 100644
index 000000000..4ee8ebc48
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/accelerator-types/list
@@ -0,0 +1,77 @@
+NAME
+    gcloud compute tpus tpu-vm accelerator-types list - list available
+        accelerator types for Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm accelerator-types list [--zone=ZONE]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List available accelerator types for for Cloud TPU VM nodes.
+
+EXAMPLES
+    To list all of the accelerator types available in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm accelerator-types list \
+            --zone=us-central1-b
+
+FLAGS
+     Location resource - Zone to list accelerator types for. This represents a
+     Cloud resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways. To set the project attribute:
+      ◆ provide the argument --zone on the command line with a fully
+        specified name;
+      ◆ set the property compute/zone with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --zone=ZONE
+          ID of the location or fully qualified identifier for the location. To
+          set the zone attribute:
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm accelerator-types list
+
diff --git a/gcloud/compute/tpus/tpu-vm/create b/gcloud/compute/tpus/tpu-vm/create
new file mode 100644
index 000000000..ca32441ae
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/create
@@ -0,0 +1,191 @@
+NAME
+    gcloud compute tpus tpu-vm create - create a new Cloud TPU VM node
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm create (TPU : --zone=ZONE) --version=VERSION
+        [--accelerator-type=ACCELERATOR_TYPE; default="v2-8"] [--async]
+        [--data-disk=DATA_DISK] [--description=DESCRIPTION] [--internal-ips]
+        [--labels=[LABELS,...]] [--metadata=[METADATA,...]]
+        [--metadata-from-file=[METADATA_FROM_FILE,...]]
+        [--network=NETWORK; default="default"] [--preemptible] [--range=RANGE]
+        [--reserved] [--scopes=[SCOPES,...]]
+        [--service-account=SERVICE_ACCOUNT] [--subnetwork=SUBNETWORK]
+        [--tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a new Cloud TPU VM node.
+
+EXAMPLES
+    To create a TPU VM node with ID my-tpu in the default user project, network
+    and compute/zone (with other defaults supplied by API), run:
+
+        $ gcloud compute tpus tpu-vm create my-tpu
+
+    To create a TPU VM node in a specific network, run:
+
+        $ gcloud compute tpus tpu-vm create my-tpu --zone=us-central1-a \
+            --network=my-tf-network --description='My TPU VM' \
+            --version='v2-alpha'
+
+    To create a small TPU VM v2 pod, run:
+
+        $ gcloud compute tpus tpu-vm create my-tpu --zone=us-central1-a \
+            --accelerator-type='v2-32' --description='My TPU VM' \
+            --version='v2-alpha'
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM node to create. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+REQUIRED FLAGS
+     --version=VERSION
+        Runtime version for the TPU, such as 2.3.
+
+        For a list of available versions run:
+
+        gcloud compute tpus tpu-vm versions list
+
+OPTIONAL FLAGS
+     --accelerator-type=ACCELERATOR_TYPE; default="v2-8"
+        TPU accelerator type for the TPU. If not specified, this defaults to
+        v2-8.
+
+        For a list of available accelerator types run:
+
+        gcloud compute tpus tpu-vm accelerator-types list
+
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --data-disk=DATA_DISK
+        Additional data disks for the TPU VM.
+
+        This flag must be repeated to provide multiple data disks. For example:
+
+            $ gcloud compute tpus tpu-vm create \
+                --data-disk \
+                source=projects/my-project/zones/us-central1-c/disks/my-disk,\
+            mode=read-only
+
+        The following keys are allowed:
+
+         source
+            Specifies the full path to an existing disk. Required. The disk
+            must be in the same zone.
+
+         mode
+            Specifies the mode in which to attach this disk. Valid options are
+            'read-write', 'read-only'. If not specified, the default is
+            'read-write'.
+
+     --description=DESCRIPTION
+        Text description of the TPU.
+
+     --internal-ips
+        Indicates that the IP addresses for the node should be internal. The
+        default is that external IP addresses will be associated with the TPU
+        workers.
+
+     --labels=[LABELS,...]
+        Resource labels to represent user-provided metadata. See
+        https://cloud.google.com/compute/docs/labeling-resources for details.
+
+     --metadata=[METADATA,...]
+        List of comma-separated metadata key-value pairs for the Cloud TPU VM
+        node.
+
+     --metadata-from-file=[METADATA_FROM_FILE,...]
+        Same as --metadata except the value for the entry will be read from a
+        local file.
+
+     --network=NETWORK; default="default"
+        Network that this TPU will be a part of.
+
+     --preemptible
+        If provided, the TPU will be preemptible and time-limited. It may be
+        preempted to free up resources for standard TPUs, and will only be able
+        to run for a limited amount of time.
+
+        Preemptible TPUs cannot be restarted.
+
+     --range=RANGE
+        CIDR Range for the TPU.
+
+        The IP range that the TPU will select an IP address from. Must be in
+        CIDR notation and a /29 range, for example 192.168.0.0/29. Errors will
+        occur if the CIDR range has already been used for a currently existing
+        TPU, the CIDR range conflicts with any networks in the user's provided
+        network, or the provided network is peered with another network that is
+        using that CIDR range.
+
+     --reserved
+        When specified, will attempt to create the TPU node under reservations
+        made in the current project. The reservations can be made separately
+        but used in aggregated form. i.e., the user can make a reservation of
+        128 V2 TPUs and later on make another reservation of 128 V2 TPUs then
+        creates a v2-256 TPU instance. If there exists no reservation or not
+        sufficient amount of reserved cores under the project, the request will
+        fail due to lack of capacity.
+
+     --scopes=[SCOPES,...]
+        List of comma-separated scopes to be made available for the service
+        account.
+
+     --service-account=SERVICE_ACCOUNT
+        Email address of the service account. If empty, default Google Compute
+        Engine service account will be used.
+
+     --subnetwork=SUBNETWORK
+        Subnetwork that this TPU will be a part of.
+
+     --tags=[TAGS,...]
+        Tags to apply to the TPU Node. Tags are used to identify valid sources
+        or targets for network firewalls. See
+        https://cloud.google.com/vpc/docs/add-remove-network-tags for more
+        details.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm create
+
diff --git a/gcloud/compute/tpus/tpu-vm/delete b/gcloud/compute/tpus/tpu-vm/delete
new file mode 100644
index 000000000..014385453
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/delete
@@ -0,0 +1,68 @@
+NAME
+    gcloud compute tpus tpu-vm delete - delete a Cloud TPU VM node
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm delete (TPU : --zone=ZONE) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a Cloud TPU VM node.
+
+EXAMPLES
+    To delete a TPU VM with ID my-tpu in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm delete my-tpu --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM node to delete. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm delete
+
diff --git a/gcloud/compute/tpus/tpu-vm/describe b/gcloud/compute/tpus/tpu-vm/describe
new file mode 100644
index 000000000..67bc1e55c
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/describe
@@ -0,0 +1,63 @@
+NAME
+    gcloud compute tpus tpu-vm describe - describe a Cloud TPU VM node
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm describe (TPU : --zone=ZONE)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Describe a Cloud TPU VM node.
+
+EXAMPLES
+    To describe a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm describe my-tpu --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM node to describe. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm describe
+
diff --git a/gcloud/compute/tpus/tpu-vm/get-guest-attributes b/gcloud/compute/tpus/tpu-vm/get-guest-attributes
new file mode 100644
index 000000000..d41cad5a5
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/get-guest-attributes
@@ -0,0 +1,110 @@
+NAME
+    gcloud compute tpus tpu-vm get-guest-attributes - retrieve the Guest
+        Attributes for a Cloud TPU VM
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm get-guest-attributes (TPU : --zone=ZONE)
+        [--query-path=QUERY_PATH] [--filter=EXPRESSION] [--limit=LIMIT]
+        [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Retrieve the Guest Attributes for a Cloud TPU VM.
+
+EXAMPLES
+    To retrieve the guest attributes, run:
+
+        $ gcloud compute tpus tpu-vm get-guest-attributes my-tpu \
+            --zone=us-central1-b
+
+    To select only a specific query path, use the --query-path flag:
+
+        $ gcloud compute tpus tpu-vm get-guest-attributes my-tpu \
+            --zone=us-central1-b --query-path=lifecycle/event
+
+    To only display the guest attributes for one of the workers in a TPU pod,
+    use the --filter flag:
+
+        $ gcloud compute tpus tpu-vm get-guest-attributes my-tpu \
+            --zone=us-central1-b --filter="worker_id:3"
+
+    where 3 is an example of the worker ID (0-indexed).
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM. The arguments in this group can
+     be used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways. To set
+     the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+FLAGS
+     --query-path=QUERY_PATH
+        Attribute path to query. Can be empty string or of the form
+        <namespace>/ or <namespace>/<key>. Default is the empty string.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm get-guest-attributes
+
diff --git a/gcloud/compute/tpus/tpu-vm/help b/gcloud/compute/tpus/tpu-vm/help
new file mode 100644
index 000000000..3175b2b0f
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/help
@@ -0,0 +1,61 @@
+NAME
+    gcloud compute tpus tpu-vm - list, create, and manage Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List, create, and manage Cloud TPU VM nodes.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     accelerator-types
+        List or Describe Available Cloud TPU VM node accelerator types.
+
+     service-identity
+        Commands for Cloud TPU VM service identity.
+
+     versions
+        Explore available runtime versions for Cloud TPU VM nodes.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Create a new Cloud TPU VM node.
+
+     delete
+        Delete a Cloud TPU VM node.
+
+     describe
+        Describe a Cloud TPU VM node.
+
+     get-guest-attributes
+        Retrieve the Guest Attributes for a Cloud TPU VM.
+
+     list
+        List Cloud TPU VM nodes.
+
+     scp
+        Copy files to and from a Cloud TPU VM via SCP.
+
+     ssh
+        SSH into a Cloud TPU VM.
+
+     start
+        Start a Cloud TPU VM node.
+
+     stop
+        Stop a Cloud TPU VM node.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm
+
diff --git a/gcloud/compute/tpus/tpu-vm/list b/gcloud/compute/tpus/tpu-vm/list
new file mode 100644
index 000000000..927bb5f7b
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/list
@@ -0,0 +1,86 @@
+NAME
+    gcloud compute tpus tpu-vm list - list Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm list [--zone=ZONE] [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List Cloud TPU VM nodes.
+
+EXAMPLES
+    To list the Cloud TPU VM nodes in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm list --zone=us-central1-b
+
+FLAGS
+     Location resource - Zone of the Cloud TPU VM node.
+
+     If not specified, will use the value of the [compute/zone] property in the
+     current gcloud configuration. To find a list of compute zones available
+     for Cloud TPUs in your project, run gcloud compute tpus locations list.
+     This represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument --zone on the command line with a fully
+        specified name;
+      ◆ set the property compute/zone with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --zone=ZONE
+          ID of the location or fully qualified identifier for the location. To
+          set the zone attribute:
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm list
+
diff --git a/gcloud/compute/tpus/tpu-vm/scp b/gcloud/compute/tpus/tpu-vm/scp
new file mode 100644
index 000000000..e3cd8ceec
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/scp
@@ -0,0 +1,146 @@
+NAME
+    gcloud compute tpus tpu-vm scp - copy files to and from a Cloud TPU VM via
+        SCP
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm scp [[USER@]INSTANCE:]SRC
+        [[[USER@]INSTANCE:]SRC ...] [[USER@]INSTANCE:]DEST [--compress]
+        [--dry-run] [--force-key-file-overwrite] [--internal-ip] [--plain]
+        [--recurse] [--scp-flag=SCP_FLAG] [--ssh-key-file=SSH_KEY_FILE]
+        [--strict-host-key-checking=STRICT_HOST_KEY_CHECKING]
+        [--worker=WORKER; default="0"] [--zone=ZONE]
+        [--ssh-key-expiration=SSH_KEY_EXPIRATION
+          | --ssh-key-expire-after=SSH_KEY_EXPIRE_AFTER] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Copy files to and from a Cloud TPU VM via SCP.
+
+EXAMPLES
+    To copy a file (for example, a text file in the local home directory) to a
+    Cloud TPU VM, run:
+
+        $ gcloud compute tpus tpu-vm scp ~/my-file my-tpu:
+
+    To copy a file into all workers in a Cloud TPU VM, run:
+
+        $ gcloud compute tpus tpu-vm scp ~/my-file my-tpu: --worker=all
+
+    To copy a file from a Cloud TPU VM to the home directory of the local
+    computer, run:
+
+        $ gcloud compute tpus tpu-vm scp my-tpu:~/my-file ~/
+
+    To copy all files in a folder to a Cloud TPU VM, run:
+
+        $ gcloud compute tpus tpu-vm scp ~/my-folder/ my-tpu: --recurse
+
+POSITIONAL ARGUMENTS
+     [[USER@]INSTANCE:]SRC [[[USER@]INSTANCE:]SRC ...]
+        Specifies the files to copy.
+
+     [[USER@]INSTANCE:]DEST
+        Specifies a destination for the source files.
+
+FLAGS
+     --compress
+        Enable compression.
+
+     --dry-run
+        Print the equivalent scp/ssh command that would be run to stdout,
+        instead of executing it.
+
+     --force-key-file-overwrite
+        If enabled, the gcloud command-line tool will regenerate and overwrite
+        the files associated with a broken SSH key without asking for
+        confirmation in both interactive and non-interactive environments.
+
+        If disabled, the files associated with a broken SSH key will not be
+        regenerated and will fail in both interactive and non-interactive
+        environments.
+
+     --internal-ip
+        Connect to TPU VMs using their internal IP addresses rather than their
+        external IP addresses. Use this to connect from a Google Compute Engine
+        VM to a TPU VM on the same VPC network, or between two peered VPC
+        networks.
+
+     --plain
+        Suppress the automatic addition of ssh(1)/scp(1) flags. This flag is
+        useful if you want to take care of authentication yourself or use
+        specific ssh/scp features.
+
+     --recurse
+        Upload directories recursively.
+
+     --scp-flag=SCP_FLAG
+        Additional flags to be passed to scp(1). This flag may be repeated.
+
+     --ssh-key-file=SSH_KEY_FILE
+        The path to the SSH key file. By default, this is
+        ~/.ssh/google_compute_engine.
+
+     --strict-host-key-checking=STRICT_HOST_KEY_CHECKING
+        Override the default behavior of StrictHostKeyChecking for the
+        connection. By default, StrictHostKeyChecking is set to 'no' the first
+        time you connect to an instance, and will be set to 'yes' for all
+        subsequent connections. STRICT_HOST_KEY_CHECKING must be one of: yes,
+        no, ask.
+
+     --worker=WORKER; default="0"
+        TPU worker to connect to. The supported value is a single 0-based index
+        of the worker in the case of a TPU Pod. When also using the --command
+        flag, it additionally supports a comma-separated list (e.g. '1,4,6'),
+        range (e.g. '1-3'), or special keyword ``all" to run the command
+        concurrently on each of the specified workers.
+
+        Note that when targeting multiple workers, you should run 'ssh-add'
+        with your private key prior to executing the gcloud command. Default:
+        'ssh-add ~/.ssh/google_compute_engine'.
+
+     --zone=ZONE
+        Zone of the tpu to scp. If not specified and the compute/zone property
+        isn't set, you might be prompted to select a zone (interactive mode
+        only).
+
+        To avoid prompting when this flag is omitted, you can set the
+        compute/zone property:
+
+            $ gcloud config set compute/zone ZONE
+
+        A list of zones can be fetched by running:
+
+            $ gcloud compute zones list
+
+        To unset the property, run:
+
+            $ gcloud config unset compute/zone
+
+        Alternatively, the zone can be stored in the environment variable
+        CLOUDSDK_COMPUTE_ZONE.
+
+     At most one of these can be specified:
+
+       --ssh-key-expiration=SSH_KEY_EXPIRATION
+          The time when the ssh key will be valid until, such as
+          "2017-08-29T18:52:51.142Z." This is only valid if the instance is not
+          using OS Login. See $ gcloud topic datetimes for information on time
+          formats.
+
+       --ssh-key-expire-after=SSH_KEY_EXPIRE_AFTER
+          The maximum length of time an SSH key is valid for once created and
+          installed, e.g. 2m for 2 minutes. See $ gcloud topic datetimes for
+          information on duration formats.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm scp
+
diff --git a/gcloud/compute/tpus/tpu-vm/service-identity/create b/gcloud/compute/tpus/tpu-vm/service-identity/create
new file mode 100644
index 000000000..9f5c1bd13
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/service-identity/create
@@ -0,0 +1,67 @@
+NAME
+    gcloud compute tpus tpu-vm service-identity create - create a Cloud TPU VM
+        service identity for a project
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm service-identity create [--zone=ZONE]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a Cloud TPU VM service identity for a project.
+
+    The Cloud TPU VM creates a service identity (Google-owned service account)
+    for management of resources when the first Cloud TPU VM is created in a
+    project after TPU service activation. However, there are cases where the
+    service identity may need to be created beforehand to grant specific IAM
+    permissions to it, like access to a Google Cloud Storage bucket. This
+    method generates the service account without need to first create a Cloud
+    TPU VM.
+
+    This command generates a service identity valid for Cloud TPU VMs across
+    all zones in a project. The zone is required (either set in the gcloud
+    config defaults, as an environment variable, or --zone flag), but the
+    service identity generated will work across all Cloud TPU VM zones.
+
+EXAMPLES
+    To generate a Cloud TPU VM service identity for a project (using zone
+    europe-west4-a), run:
+
+        $ gcloud compute tpus tpu-vm service-identity create \
+            --zone=europe-west4-a
+
+FLAGS
+     Location resource - Zone to use for the request.
+
+     If not specified, will use the value of the [compute/zone] property in the
+     current gcloud configuration. This represents a Cloud resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument --zone on the command line with a fully
+        specified name;
+      ◆ set the property compute/zone with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --zone=ZONE
+          ID of the location or fully qualified identifier for the location. To
+          set the zone attribute:
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm service-identity create
+
diff --git a/gcloud/compute/tpus/tpu-vm/service-identity/help b/gcloud/compute/tpus/tpu-vm/service-identity/help
new file mode 100644
index 000000000..030a3f4ff
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/service-identity/help
@@ -0,0 +1,26 @@
+NAME
+    gcloud compute tpus tpu-vm service-identity - commands for Cloud TPU VM
+        service identity
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm service-identity COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Commands for Cloud TPU VM service identity.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Create a Cloud TPU VM service identity for a project.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm service-identity
+
diff --git a/gcloud/compute/tpus/tpu-vm/ssh b/gcloud/compute/tpus/tpu-vm/ssh
new file mode 100644
index 000000000..dc20095e1
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/ssh
@@ -0,0 +1,187 @@
+NAME
+    gcloud compute tpus tpu-vm ssh - SSH into a Cloud TPU VM
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm ssh [USER@]TPU [--dry-run]
+        [--force-key-file-overwrite] [--internal-ip] [--plain]
+        [--ssh-flag=SSH_FLAG] [--ssh-key-file=SSH_KEY_FILE]
+        [--strict-host-key-checking=STRICT_HOST_KEY_CHECKING]
+        [--worker=WORKER; default="0"] [--zone=ZONE]
+        [--command=COMMAND --output-directory=OUTPUT_DIRECTORY]
+        [--ssh-key-expiration=SSH_KEY_EXPIRATION
+          | --ssh-key-expire-after=SSH_KEY_EXPIRE_AFTER] [GCLOUD_WIDE_FLAG ...]
+        [-- SSH_ARGS ...]
+
+DESCRIPTION
+    SSH into a Cloud TPU VM.
+
+EXAMPLES
+    To SSH into a Cloud TPU VM, run:
+
+        $ gcloud compute tpus tpu-vm ssh my-tpu
+
+    To SSH into worker 1 on a Cloud TPU VM Pod, run:
+
+        $ gcloud compute tpus tpu-vm ssh my-tpu --worker=1
+
+    To run an SSH command in a Cloud TPU VM (for example, to print the time
+    since last boot), run:
+
+        $ gcloud compute tpus tpu-vm ssh my-tpu --command="last boot"
+
+    To run the same command in all workers in a Cloud TPU VM simultaneously,
+    run:
+
+        $ gcloud compute tpus tpu-vm ssh my-tpu --command="last boot" \
+          --worker=all
+
+POSITIONAL ARGUMENTS
+     [USER@]TPU
+        Specifies the Cloud TPU VM to SSH into.
+
+        USER specifies the username with which to SSH. If omitted, the user
+        login name is used.
+
+        TPU specifies the name of the Cloud TPU VM to SSH into.
+
+     [-- SSH_ARGS ...]
+        Flags and positionals passed to the underlying ssh implementation.
+
+        The '--' argument must be specified between gcloud specific args on the
+        left and SSH_ARGS on the right. Example:
+
+            $ gcloud compute tpus tpu-vm ssh example-instance \
+            --zone=us-central1-a -- -vvv -L 80:%TPU%:80
+
+FLAGS
+     --dry-run
+        Print the equivalent scp/ssh command that would be run to stdout,
+        instead of executing it.
+
+     --force-key-file-overwrite
+        If enabled, the gcloud command-line tool will regenerate and overwrite
+        the files associated with a broken SSH key without asking for
+        confirmation in both interactive and non-interactive environments.
+
+        If disabled, the files associated with a broken SSH key will not be
+        regenerated and will fail in both interactive and non-interactive
+        environments.
+
+     --internal-ip
+        Connect to TPU VMs using their internal IP addresses rather than their
+        external IP addresses. Use this to connect from a Google Compute Engine
+        VM to a TPU VM on the same VPC network, or between two peered VPC
+        networks.
+
+     --plain
+        Suppress the automatic addition of ssh(1)/scp(1) flags. This flag is
+        useful if you want to take care of authentication yourself or use
+        specific ssh/scp features.
+
+     --ssh-flag=SSH_FLAG
+        Additional flags to be passed to ssh(1). It is recommended that flags
+        be passed using an assignment operator and quotes. Example:
+
+            $ gcloud compute tpus tpu-vm ssh example-instance \
+                --zone=us-central1-a --ssh-flag="-vvv" \
+                --ssh-flag="-L 80:localhost:80"
+
+        This flag will replace occurences of %USER% and %TPU% with their
+        dereferenced values. For example, passing ``80:%TPU%:80`` into the flag
+        is equivalent to passing 80:162.222.181.197:80 to ssh(1) if the
+        external IP address of 'example-instance' is 162.222.181.197.
+
+        If connecting to the instance's external IP, then %TPU% is replaced
+        with that, otherwise it is replaced with the internal IP.
+
+     --ssh-key-file=SSH_KEY_FILE
+        The path to the SSH key file. By default, this is
+        ~/.ssh/google_compute_engine.
+
+     --strict-host-key-checking=STRICT_HOST_KEY_CHECKING
+        Override the default behavior of StrictHostKeyChecking for the
+        connection. By default, StrictHostKeyChecking is set to 'no' the first
+        time you connect to an instance, and will be set to 'yes' for all
+        subsequent connections. STRICT_HOST_KEY_CHECKING must be one of: yes,
+        no, ask.
+
+     --worker=WORKER; default="0"
+        TPU worker to connect to. The supported value is a single 0-based index
+        of the worker in the case of a TPU Pod. When also using the --command
+        flag, it additionally supports a comma-separated list (e.g. '1,4,6'),
+        range (e.g. '1-3'), or special keyword ``all" to run the command
+        concurrently on each of the specified workers.
+
+        Note that when targeting multiple workers, you should run 'ssh-add'
+        with your private key prior to executing the gcloud command. Default:
+        'ssh-add ~/.ssh/google_compute_engine'.
+
+     --zone=ZONE
+        Zone of the tpu to ssh. If not specified and the compute/zone property
+        isn't set, you might be prompted to select a zone (interactive mode
+        only).
+
+        To avoid prompting when this flag is omitted, you can set the
+        compute/zone property:
+
+            $ gcloud config set compute/zone ZONE
+
+        A list of zones can be fetched by running:
+
+            $ gcloud compute zones list
+
+        To unset the property, run:
+
+            $ gcloud config unset compute/zone
+
+        Alternatively, the zone can be stored in the environment variable
+        CLOUDSDK_COMPUTE_ZONE.
+
+     These arguments are used to run commands using SSH.
+
+       --command=COMMAND
+          Command to run on the Cloud TPU VM.
+
+          Runs the command on the target Cloud TPU VM and then exits.
+
+          Note: in the case of a TPU Pod, it will only run the command in the
+          workers specified with the --worker flag (defaults to worker 0 if not
+          set).
+
+       --output-directory=OUTPUT_DIRECTORY
+          Path to the directory to output the logs of the commands.
+
+          The path can be relative or absolute. The directory must already
+          exist.
+
+          If not specified, standard output will be used.
+
+          The logs will be written in files named {WORKER_ID}.log. For example:
+          "2.log".
+
+     At most one of these can be specified:
+
+       --ssh-key-expiration=SSH_KEY_EXPIRATION
+          The time when the ssh key will be valid until, such as
+          "2017-08-29T18:52:51.142Z." This is only valid if the instance is not
+          using OS Login. See $ gcloud topic datetimes for information on time
+          formats.
+
+       --ssh-key-expire-after=SSH_KEY_EXPIRE_AFTER
+          The maximum length of time an SSH key is valid for once created and
+          installed, e.g. 2m for 2 minutes. See $ gcloud topic datetimes for
+          information on duration formats.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm ssh
+
diff --git a/gcloud/compute/tpus/tpu-vm/start b/gcloud/compute/tpus/tpu-vm/start
new file mode 100644
index 000000000..433a60128
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/start
@@ -0,0 +1,68 @@
+NAME
+    gcloud compute tpus tpu-vm start - start a Cloud TPU VM node
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm start (TPU : --zone=ZONE) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Start a Cloud TPU VM node.
+
+EXAMPLES
+    To start a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm start my-tpu --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM node to start. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm start
+
diff --git a/gcloud/compute/tpus/tpu-vm/stop b/gcloud/compute/tpus/tpu-vm/stop
new file mode 100644
index 000000000..c817ea497
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/stop
@@ -0,0 +1,68 @@
+NAME
+    gcloud compute tpus tpu-vm stop - stop a Cloud TPU VM node
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm stop (TPU : --zone=ZONE) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Stop a Cloud TPU VM node.
+
+EXAMPLES
+    To stop a Cloud TPU VM node with ID my-tpu in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm stop my-tpu --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Tpu resource - Name of the Cloud TPU VM node to stop. The arguments in
+     this group can be used to specify the attributes of this resource. (NOTE)
+     Some attributes are not given arguments in this group but can be set in
+     other ways. To set the project attribute:
+      ◆ provide the argument tpu on the command line with a fully specified
+        name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       TPU
+          ID of the tpu or fully qualified identifier for the tpu. To set the
+          tpu attribute:
+          ▸ provide the argument tpu on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument tpu on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm stop
+
diff --git a/gcloud/compute/tpus/tpu-vm/versions/describe b/gcloud/compute/tpus/tpu-vm/versions/describe
new file mode 100644
index 000000000..2f0187789
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/versions/describe
@@ -0,0 +1,65 @@
+NAME
+    gcloud compute tpus tpu-vm versions describe - describe a runtime version
+        available for Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm versions describe (VERSION : --zone=ZONE)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Get details on a runtime version.
+
+EXAMPLES
+    To describe the TensorFlow 1.15 runtime version in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm versions describe 1.15 \
+            --zone=us-central1-b
+
+POSITIONAL ARGUMENTS
+     Runtime version resource - Name of the runtime version to describe. The
+     arguments in this group can be used to specify the attributes of this
+     resource. (NOTE) Some attributes are not given arguments in this group but
+     can be set in other ways. To set the project attribute:
+      ◆ provide the argument version on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       VERSION
+          ID of the runtime_version or fully qualified identifier for the
+          runtime_version. To set the version attribute:
+          ▸ provide the argument version on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --zone=ZONE
+          Zone of the Cloud TPU.
+
+          If not specified, will use default compute/zone.
+
+          To set the zone attribute:
+          ▸ provide the argument version on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm versions describe
+
diff --git a/gcloud/compute/tpus/tpu-vm/versions/help b/gcloud/compute/tpus/tpu-vm/versions/help
new file mode 100644
index 000000000..33d2736b1
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/versions/help
@@ -0,0 +1,29 @@
+NAME
+    gcloud compute tpus tpu-vm versions - explore available runtime versions
+        for Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm versions COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Explore available runtime versions for Cloud TPU VM nodes.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        Describe a runtime version available for Cloud TPU VM nodes.
+
+     list
+        List available runtime versions for Cloud TPU VM nodes.
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm versions
+
diff --git a/gcloud/compute/tpus/tpu-vm/versions/list b/gcloud/compute/tpus/tpu-vm/versions/list
new file mode 100644
index 000000000..880985914
--- /dev/null
+++ b/gcloud/compute/tpus/tpu-vm/versions/list
@@ -0,0 +1,76 @@
+NAME
+    gcloud compute tpus tpu-vm versions list - list available runtime versions
+        for Cloud TPU VM nodes
+
+SYNOPSIS
+    gcloud compute tpus tpu-vm versions list [--zone=ZONE]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List runtime versions available for Cloud TPU VM nodes.
+
+EXAMPLES
+    To list all of the runtime versions available in zone us-central1-b, run:
+
+        $ gcloud compute tpus tpu-vm versions list --zone=us-central1-b
+
+FLAGS
+     Location resource - Zone to list runtime versions for. This represents a
+     Cloud resource. (NOTE) Some attributes are not given arguments in this
+     group but can be set in other ways. To set the project attribute:
+      ◆ provide the argument --zone on the command line with a fully
+        specified name;
+      ◆ set the property compute/zone with a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+       --zone=ZONE
+          ID of the location or fully qualified identifier for the location. To
+          set the zone attribute:
+          ▸ provide the argument --zone on the command line;
+          ▸ set the property compute/zone.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the tpu/v2 API. The full documentation for this API can
+    be found at: https://cloud.google.com/tpu/
+
+NOTES
+    This variant is also available:
+
+        $ gcloud alpha compute tpus tpu-vm versions list
+
diff --git a/gcloud/container/aws/node-pools/update b/gcloud/container/aws/node-pools/update
index 6b0162d21..f3ce43bb8 100644
--- a/gcloud/container/aws/node-pools/update
+++ b/gcloud/container/aws/node-pools/update
@@ -10,6 +10,8 @@ SYNOPSIS
         [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN]
         [--root-volume-size=ROOT_VOLUME_SIZE]
         [--root-volume-type=ROOT_VOLUME_TYPE] [--validate-only]
+        [--clear-proxy-config | --proxy-secret-arn=PROXY_SECRET_ARN
+          --proxy-secret-version-id=PROXY_SECRET_VERSION_ID]
         [--clear-security-group-ids
           | --security-group-ids=[SECURITY_GROUP_ID,...]]
         [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] [GCLOUD_WIDE_FLAG ...]
@@ -90,6 +92,23 @@ FLAGS
      --validate-only
         Validate the node pool to update, but don't actually perform it.
 
+     Proxy config
+
+     At most one of these can be specified:
+
+       --clear-proxy-config
+          Clear the proxy configuration, if any, associated with the node pool.
+
+       Update existing proxy config parameters
+
+         --proxy-secret-arn=PROXY_SECRET_ARN
+            ARN of the AWS Secrets Manager secret that contains a proxy
+            configuration.
+
+         --proxy-secret-version-id=PROXY_SECRET_VERSION_ID
+            Version ID string of the AWS Secrets Manager secret that contains a
+            proxy configuration.
+
      Security groups
 
      At most one of these can be specified:
diff --git a/gcloud/container/binauthz/attestors/add-iam-policy-binding b/gcloud/container/binauthz/attestors/add-iam-policy-binding
index 67b81854f..184665e87 100644
--- a/gcloud/container/binauthz/attestors/add-iam-policy-binding
+++ b/gcloud/container/binauthz/attestors/add-iam-policy-binding
@@ -11,8 +11,8 @@ DESCRIPTION
 
 EXAMPLES
     To add an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud container binauthz attestors add-iam-policy-binding \
             my_attestor --member='user:test-user@gmail.com' \
diff --git a/gcloud/container/binauthz/attestors/remove-iam-policy-binding b/gcloud/container/binauthz/attestors/remove-iam-policy-binding
index 3eaf5a56a..8f9699c2e 100644
--- a/gcloud/container/binauthz/attestors/remove-iam-policy-binding
+++ b/gcloud/container/binauthz/attestors/remove-iam-policy-binding
@@ -11,8 +11,8 @@ DESCRIPTION
 
 EXAMPLES
     To Remove an IAM policy binding for the role of
-    'roles/binaryauthorization.attestorsEditor' for the user
-    'test-user@gmail.com' on attesttor 'my_attestor', run:
+    roles/binaryauthorization.attestorsEditor for the user test-user@gmail.com
+    on attestor my_attestor, run:
 
         $ gcloud container binauthz attestors remove-iam-policy-binding \
             my_attestor --member='user:test-user@gmail.com' \
diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create
index 4cb72ba0e..f26be2a40 100644
--- a/gcloud/container/clusters/create
+++ b/gcloud/container/clusters/create
@@ -1098,16 +1098,10 @@ FLAGS
                 Number of extra (surge) nodes to be created on each upgrade of
                 an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
              --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                 Number of nodes that can be unavailable at the same time on
                 each upgrade of an autoprovisioned node pool.
 
-                This flag must be specified if any of the other arguments in
-                this group are specified.
-
            Flags to specify identity for autoprovisioned nodes:
 
              --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/container/clusters/update b/gcloud/container/clusters/update
index 9ff529223..6eadda3af 100644
--- a/gcloud/container/clusters/update
+++ b/gcloud/container/clusters/update
@@ -750,16 +750,10 @@ REQUIRED FLAGS
                   Number of extra (surge) nodes to be created on each upgrade
                   of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
                --autoprovisioning-max-unavailable-upgrade=AUTOPROVISIONING_MAX_UNAVAILABLE_UPGRADE
                   Number of nodes that can be unavailable at the same time on
                   each upgrade of an autoprovisioned node pool.
 
-                  This flag must be specified if any of the other arguments in
-                  this group are specified.
-
              Flags to specify identity for autoprovisioned nodes:
 
                --autoprovisioning-scopes=[SCOPE,...]
diff --git a/gcloud/database-migration/migration-jobs/create b/gcloud/database-migration/migration-jobs/create
index ac46282ce..5e8d99243 100644
--- a/gcloud/database-migration/migration-jobs/create
+++ b/gcloud/database-migration/migration-jobs/create
@@ -106,31 +106,37 @@ OPTIONAL FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     The connectivity method used by the migration job. If not specified, uses
+     the default IP allowlist method which will create a public IP when used
+     with a Cloud SQL destination DB.
+
      At most one of these can be specified:
 
        --peer-vpc=PEER_VPC
           Name of the VPC network to peer with the Cloud SQL private network.
 
-       --vm-ip=VM_IP
-          Bastion Virtual Machine IP.
+       Parameters for the reverse-SSH tunnel connectivity method.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vm-ip=VM_IP
+            Bastion Virtual Machine IP.
 
-       --vm-port=VM_PORT
-          Forwarding port for the SSH tunnel.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vm-port=VM_PORT
+            Forwarding port for the SSH tunnel.
 
-       --vpc=VPC
-          Name of the VPC network where the VM is hosted.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
 
-          This flag must be specified if any of the other arguments in this
-          group are specified.
+         --vpc=VPC
+            Name of the VPC network where the VM is hosted.
 
-       --vm=VM
-          Name of VM that will host the SSH tunnel bastion.
+            This flag must be specified if any of the other arguments in this
+            group are specified.
+
+         --vm=VM
+            Name of VM that will host the SSH tunnel bastion.
 
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
diff --git a/gcloud/database-migration/migration-jobs/update b/gcloud/database-migration/migration-jobs/update
index 7038ecae8..2222c1c33 100644
--- a/gcloud/database-migration/migration-jobs/update
+++ b/gcloud/database-migration/migration-jobs/update
@@ -124,22 +124,28 @@ FLAGS
           silently ignored. If --update-labels is also specified then
           --update-labels is applied first.
 
+     The connectivity method used by the migration job. If not specified, uses
+     the default IP allowlist method which will create a public IP when used
+     with a Cloud SQL destination DB.
+
      At most one of these can be specified:
 
        --peer-vpc=PEER_VPC
           Name of the VPC network to peer with the Cloud SQL private network.
 
-       --vm=VM
-          Name of VM that will host the SSH tunnel bastion.
+       Parameters for the reverse-SSH tunnel connectivity method.
 
-       --vm-ip=VM_IP
-          Bastion Virtual Machine IP.
+         --vm=VM
+            Name of VM that will host the SSH tunnel bastion.
 
-       --vm-port=VM_PORT
-          Forwarding port for the SSH tunnel.
+         --vm-ip=VM_IP
+            Bastion Virtual Machine IP.
 
-       --vpc=VPC
-          Name of the VPC network where the VM is hosted.
+         --vm-port=VM_PORT
+            Forwarding port for the SSH tunnel.
+
+         --vpc=VPC
+            Name of the VPC network where the VM is hosted.
 
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
diff --git a/gcloud/logging/logs/list b/gcloud/logging/logs/list
index 826f6aaec..9bb6bd0cf 100644
--- a/gcloud/logging/logs/list
+++ b/gcloud/logging/logs/list
@@ -2,8 +2,9 @@ NAME
     gcloud logging logs list - lists your project's logs
 
 SYNOPSIS
-    gcloud logging logs list [--filter=EXPRESSION] [--limit=LIMIT]
-        [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
+    gcloud logging logs list [--bucket=BUCKET --location=LOCATION --view=VIEW]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--sort-by=[FIELD,...]]
+        [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Only logs that contain log entries are listed.
@@ -13,6 +14,33 @@ EXAMPLES
 
         $ gcloud logging logs list
 
+    To list all logs for a view:
+
+        $ gcloud logging logs list --bucket=[BUCKET_ID] \
+            --location=[LOCATION] --view=[VIEW_ID]
+
+FLAGS
+     These arguments are used in conjunction with the parent to construct a
+     view resource.
+
+       --bucket=BUCKET
+          Id of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --location=LOCATION
+          Location of the log bucket.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
+       --view=VIEW
+          Id of the view.
+
+          This flag must be specified if any of the other arguments in this
+          group are specified.
+
 LIST COMMAND FLAGS
      --filter=EXPRESSION
         Apply a Boolean filter EXPRESSION to each resource item to be listed.
diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch
index 88a52f79f..8c6129c4f 100644
--- a/gcloud/sql/instances/patch
+++ b/gcloud/sql/instances/patch
@@ -95,7 +95,8 @@ FLAGS
         The database engine type and versions. If left unspecified, no changes
         occur. See the list of database versions at
         https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion.
-        DATABASE_VERSION must be one of: MYSQL_8_0_18, MYSQL_8_0_26.
+        DATABASE_VERSION must be one of: MYSQL_8_0_18, MYSQL_8_0_26,
+        MYSQL_8_0_27, MYSQL_8_0_28.
 
      --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE
         Date when the deny maintenance period ends, that is 2021-01-10.