gcloud: Fri Feb 20 11:39:38 UTC 2026

gcloud/alpha/container/clusters/create

@@ -32,7 +32,7 @@ SYNOPSIS
         [--default-max-pods-per-node=DEFAULT_MAX_PODS_PER_NODE]
         [--disable-default-snat] [--disable-l4-lb-firewall-reconciliation]
         [--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE]
-        [--disk-type=DISK_TYPE]
+        [--disk-type=DISK_TYPE] [--enable-ambient]
         [--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
         [--enable-autorepair] [--no-enable-autoupgrade]
         [--enable-cilium-clusterwide-network-policy] [--enable-cloud-logging]
@@ -528,6 +528,9 @@ FLAGS
         DISK_TYPE must be one of: pd-standard, pd-ssd, pd-balanced,
         hyperdisk-balanced, hyperdisk-extreme, hyperdisk-throughput.
 
+     --enable-ambient
+        Enable Ambient Networking on the cluster.
+
      --enable-authorized-networks-on-private-endpoint
         Enable enforcement of --master-authorized-networks CIDR ranges for
         traffic reaching cluster's control plane via private IP.

gcloud/alpha/container/clusters/create-auto

@@ -17,7 +17,7 @@ SYNOPSIS
         [--containerd-config-from-file=PATH_TO_FILE]
         [--create-subnetwork=[KEY=VALUE,...]]
         [--database-encryption-key=DATABASE_ENCRYPTION_KEY]
-        [--disable-l4-lb-firewall-reconciliation]
+        [--disable-l4-lb-firewall-reconciliation] [--enable-ambient]
         [--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
         [--enable-backup-restore] [--enable-cilium-clusterwide-network-policy]
         [--enable-confidential-nodes] [--enable-default-compute-class]
@@ -274,6 +274,9 @@ FLAGS
         Disable reconciliation on the cluster for L4 Load Balancer VPC
         firewalls targeting ingress traffic.
 
+     --enable-ambient
+        Enable Ambient Networking on the cluster.
+
      --enable-authorized-networks-on-private-endpoint
         Enable enforcement of --master-authorized-networks CIDR ranges for
         traffic reaching cluster's control plane via private IP.

gcloud/alpha/container/clusters/update

@@ -16,7 +16,7 @@ SYNOPSIS
           | --containerd-config-from-file=PATH_TO_FILE
           | --database-encryption-key=DATABASE_ENCRYPTION_KEY
           | --disable-database-encryption | --disable-default-snat
-          | --disable-workload-identity
+          | --disable-workload-identity | --[no-]enable-ambient
           | --[no-]enable-autopilot-compatibility-auditing
           | --enable-autoscaling
           | --[no-]enable-cilium-clusterwide-network-policy
@@ -356,6 +356,10 @@ REQUIRED FLAGS
 
               https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
 
+       --[no-]enable-ambient
+          Enable Ambient Networking on the cluster. Use --enable-ambient to
+          enable and --no-enable-ambient to disable.
+
        --[no-]enable-autopilot-compatibility-auditing
           Lets you run the gcloud container clusters
           check-autopilot-compatibility