gcloud: Wed Dec 6 10:10:36 UTC 2023

gcloud/container/fleet/create

@@ -4,7 +4,9 @@ NAME
 SYNOPSIS
     gcloud container fleet create [--async] [--display-name=DISPLAY_NAME]
         [--labels=[KEY=VALUE,...]]
-        [--security-posture=SECURITY_POSTURE
+        [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
+          --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...]
+          --security-posture=SECURITY_POSTURE
           --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
         [GCLOUD_WIDE_FLAG ...]
 
@@ -41,6 +43,22 @@ FLAGS
 
      Default cluster configurations to apply across the fleet.
 
+       Binary Authorization config.
+
+         --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
+            Configure binary authorization mode for clusters to onboard the
+            fleet,
+
+                $ gcloud container fleet create \
+                    --binauthz-evaluation-mode=POLICY_BINDINGS
+
+            BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, POLICY_BINDINGS.
+
+         --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...]
+            The relative resource name of the Binary Authorization policy to
+            audit and/or enforce. GKE policies have the following format:
+            projects/{project_number}/platforms/gke/policies/{policy_id}.
+
        Security posture config.
 
          --security-posture=SECURITY_POSTURE