gcloud: Thu Oct 23 11:05:02 UTC 2025

gcloud/beta/container/clusters/create

@@ -13,6 +13,7 @@ SYNOPSIS
         [--alpha-cluster-feature-gates=[FEATURE=true|false,...]]
         [--anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG]
         [--async] [--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
+        [--autopilot-workload-policies=WORKLOAD_POLICIES]
         [--autoprovisioning-enable-insecure-kubelet-readonly-port]
         [--autoprovisioning-network-tags=TAGS,[TAGS,...]]
         [--autoprovisioning-resource-manager-tags=[KEY=VALUE,...]]
@@ -141,6 +142,8 @@ SYNOPSIS
           --master-ipv4-cidr=MASTER_IPV4_CIDR --private-cluster]
         [--enable-secret-manager --enable-secret-manager-rotation
           --secret-manager-rotation-interval=SECRET_MANAGER_ROTATION_INTERVAL]
+        [--enable-secret-sync --enable-secret-sync-rotation
+          --secret-sync-rotation-interval=SECRET_SYNC_ROTATION_INTERVAL]
         [--ephemeral-storage[=[local-ssd-count=LOCAL-SSD-COUNT]]
           | --ephemeral-storage-local-ssd[=[count=COUNT]]
           | --local-nvme-ssd-block[=[count=COUNT]]
@@ -271,6 +274,16 @@ FLAGS
         NONE: Disables Auto-Monitoring. AUTO_MONITORING_SCOPE must be one of:
         ALL, NONE.
 
+     --autopilot-workload-policies=WORKLOAD_POLICIES
+        Add Autopilot workload policies to the cluster.
+
+        Examples:
+
+            $ gcloud beta container clusters create example-cluster \
+                --autopilot-workload-policies=allow-net-admin
+
+        The only supported workload policy is 'allow-net-admin'.
+
      --autoprovisioning-enable-insecure-kubelet-readonly-port
         Enables the Kubelet's insecure read only port for Autoprovisioned Node
         Pools.
@@ -2449,6 +2462,19 @@ FLAGS
           provider component. If you don't specify a time interval for the
           rotation, it will default to a rotation period of two minutes.
 
+     Flags for Secret Sync configuration:
+
+       --enable-secret-sync
+          Enables the Secret Sync component. See
+          https://cloud.google.com/secret-manager/docs/sync-k8-secrets
+
+       --enable-secret-sync-rotation
+          Enables the rotation of secrets in the Secret Sync component.
+          provider component.
+
+       --secret-sync-rotation-interval=SECRET_SYNC_ROTATION_INTERVAL
+          Set the rotation period for secrets in the Secret Sync component.
+
      At most one of these can be specified:
 
        --ephemeral-storage[=[local-ssd-count=LOCAL-SSD-COUNT]]