gcloud: Wed Apr 3 09:23:31 UTC 2024

gcloud/alpha/container/clusters/create-auto

@@ -24,6 +24,8 @@ SYNOPSIS
         [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK]
         [--workload-policies=WORKLOAD_POLICIES]
         [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
+        [--additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          | --disable-additive-vpc-scope]
         [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
           --binauthz-policy-bindings=[name=BINAUTHZ_POLICY]]
         [--dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
@@ -329,13 +331,16 @@ FLAGS
         Sets the mode of the Kubernetes security posture API's off-cluster
         features.
 
+        To enable advanced mode explicitly set the flag to
+        --security-posture=enterprise.
+
         To enable in standard mode explicitly set the flag to
         --security-posture=standard
 
         To disable in an existing cluster, explicitly set the flag to
         --security-posture=disabled.
 
-        SECURITY_POSTURE must be one of: disabled, standard.
+        SECURITY_POSTURE must be one of: disabled, standard, enterprise.
 
      --services-ipv4-cidr=CIDR
         Set the IP range for the services IPs.
@@ -388,6 +393,16 @@ FLAGS
         WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
         enterprise.
 
+     ClusterDNS_AdditiveVPCScope_EnabledDisable
+
+     At most one of these can be specified:
+
+       --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          The domain used in Additive VPC scope. Only works with Cluster Scope.
+
+       --disable-additive-vpc-scope
+          Disables Additive VPC Scope.
+
      Flags for Binary Authorization:
 
        --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE