gcloud: Wed Apr 3 09:23:31 UTC 2024

gcloud/alpha/container/clusters/create

@@ -79,7 +79,9 @@ SYNOPSIS
           --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
           | --enable-binauthz]
         [--cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN
-          --cluster-dns-scope=CLUSTER_DNS_SCOPE]
+          --cluster-dns-scope=CLUSTER_DNS_SCOPE
+          --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          | --disable-additive-vpc-scope]
         [--dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
           | --disable-dataplane-v2-flow-observability
           | --enable-dataplane-v2-flow-observability]
@@ -1126,13 +1128,16 @@ FLAGS
         Sets the mode of the Kubernetes security posture API's off-cluster
         features.
 
+        To enable advanced mode explicitly set the flag to
+        --security-posture=enterprise.
+
         To enable in standard mode explicitly set the flag to
         --security-posture=standard
 
         To disable in an existing cluster, explicitly set the flag to
         --security-posture=disabled.
 
-        SECURITY_POSTURE must be one of: disabled, standard.
+        SECURITY_POSTURE must be one of: disabled, standard, enterprise.
 
      --services-ipv4-cidr=CIDR
         Set the IP range for the services IPs.
@@ -1426,6 +1431,17 @@ FLAGS
            vpc
               Configures the Cloud DNS zone to be private to the VPC Network.
 
+       ClusterDNS_AdditiveVPCScope_EnabledDisable
+
+       At most one of these can be specified:
+
+         --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+            The domain used in Additive VPC scope. Only works with Cluster
+            Scope.
+
+         --disable-additive-vpc-scope
+            Disables Additive VPC Scope.
+
      At most one of these can be specified:
 
        --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE

gcloud/alpha/container/clusters/create-auto

@@ -24,6 +24,8 @@ SYNOPSIS
         [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK]
         [--workload-policies=WORKLOAD_POLICIES]
         [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
+        [--additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          | --disable-additive-vpc-scope]
         [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
           --binauthz-policy-bindings=[name=BINAUTHZ_POLICY]]
         [--dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
@@ -329,13 +331,16 @@ FLAGS
         Sets the mode of the Kubernetes security posture API's off-cluster
         features.
 
+        To enable advanced mode explicitly set the flag to
+        --security-posture=enterprise.
+
         To enable in standard mode explicitly set the flag to
         --security-posture=standard
 
         To disable in an existing cluster, explicitly set the flag to
         --security-posture=disabled.
 
-        SECURITY_POSTURE must be one of: disabled, standard.
+        SECURITY_POSTURE must be one of: disabled, standard, enterprise.
 
      --services-ipv4-cidr=CIDR
         Set the IP range for the services IPs.
@@ -388,6 +393,16 @@ FLAGS
         WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
         enterprise.
 
+     ClusterDNS_AdditiveVPCScope_EnabledDisable
+
+     At most one of these can be specified:
+
+       --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          The domain used in Additive VPC scope. Only works with Cluster Scope.
+
+       --disable-additive-vpc-scope
+          Disables Additive VPC Scope.
+
      Flags for Binary Authorization:
 
        --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE

gcloud/alpha/container/clusters/update

@@ -64,6 +64,8 @@ SYNOPSIS
           --resource-usage-bigquery-dataset=RESOURCE_USAGE_BIGQUERY_DATASET
           | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN
           --cluster-dns-scope=CLUSTER_DNS_SCOPE
+          --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          | --disable-additive-vpc-scope
           | --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
           | --disable-dataplane-v2-flow-observability
           | --enable-dataplane-v2-flow-observability
@@ -607,13 +609,16 @@ REQUIRED FLAGS
           Sets the mode of the Kubernetes security posture API's off-cluster
           features.
 
+          To enable advanced mode explicitly set the flag to
+          --security-posture=enterprise.
+
           To enable in standard mode explicitly set the flag to
           --security-posture=standard
 
           To disable in an existing cluster, explicitly set the flag to
           --security-posture=disabled.
 
-          SECURITY_POSTURE must be one of: disabled, standard.
+          SECURITY_POSTURE must be one of: disabled, standard, enterprise.
 
        --security-profile=SECURITY_PROFILE
           Name and version of the security profile to be applied to the
@@ -968,6 +973,17 @@ REQUIRED FLAGS
              vpc
                 Configures the Cloud DNS zone to be private to the VPC Network.
 
+         ClusterDNS_AdditiveVPCScope_EnabledDisable
+
+         At most one of these can be specified:
+
+           --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+              The domain used in Additive VPC scope. Only works with Cluster
+              Scope.
+
+           --disable-additive-vpc-scope
+              Disables Additive VPC Scope.
+
        At most one of these can be specified:
 
          --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE