gcloud: Wed Dec 11 10:18:23 UTC 2024

gcloud/container/clusters/create-auto

@@ -30,6 +30,13 @@ SYNOPSIS
         [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK]
         [--tier=TIER] [--workload-policies=WORKLOAD_POLICIES]
         [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
+        [--additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          | --disable-additive-vpc-scope]
+        [--aggregation-ca=CA_POOL_PATH --cluster-ca=CA_POOL_PATH
+          --control-plane-disk-encryption-key=KEY --etcd-api-ca=CA_POOL_PATH
+          --etcd-peer-ca=CA_POOL_PATH --gkeops-etcd-backup-encryption-key=KEY
+          --service-account-signing-keys=KEY_VERSION,[KEY_VERSION,...]
+          --service-account-verification-keys=KEY_VERSION,[KEY_VERSION,...]]
         [--dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
           | --disable-dataplane-v2-flow-observability
           | --enable-dataplane-v2-flow-observability]
@@ -478,6 +485,48 @@ FLAGS
         WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
         enterprise.
 
+     At most one of these can be specified:
+
+       --additive-vpc-scope-dns-domain=ADDITIVE_VPC_SCOPE_DNS_DOMAIN
+          The domain used in Additive VPC scope. Only works with Cluster Scope.
+
+       --disable-additive-vpc-scope
+          Disables Additive VPC Scope.
+
+     Control Plane Keys
+
+       --aggregation-ca=CA_POOL_PATH
+          The Certificate Authority Service caPool that will back the
+          aggregation CA
+
+       --cluster-ca=CA_POOL_PATH
+          The Certificate Authority Service caPool that will back the cluster
+          CA
+
+       --control-plane-disk-encryption-key=KEY
+          The Cloud KMS symmetric encryption cryptoKey that will be used to
+          encrypt the control plane disks
+
+       --etcd-api-ca=CA_POOL_PATH
+          The Certificate Authority Service caPool that will back the etcd API
+          CA
+
+       --etcd-peer-ca=CA_POOL_PATH
+          The Certificate Authority Service caPool that will back the etcd peer
+          CA
+
+       --gkeops-etcd-backup-encryption-key=KEY
+          The Cloud KMS symmetric encryption cryptoKey that will be used to
+          encrypt the disaster recovery etcd backups for the cluster
+
+       --service-account-signing-keys=KEY_VERSION,[KEY_VERSION,...]
+          A Cloud KMS asymmetric signing cryptoKeyVersion that will be used to
+          sign service account tokens
+
+       --service-account-verification-keys=KEY_VERSION,[KEY_VERSION,...]
+          A Cloud KMS asymmetric signing cryptoKeyVersion that will be used to
+          verify service account tokens. Maybe specified multiple times.
+
      At most one of these can be specified:
 
        --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE