gcloud: Wed Jun 19 09:33:28 UTC 2024

gcloud/compute/instances/create

@@ -10,9 +10,9 @@ SYNOPSIS
         [--boot-disk-provisioned-iops=BOOT_DISK_PROVISIONED_IOPS]
         [--boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT]
         [--boot-disk-size=BOOT_DISK_SIZE] [--boot-disk-type=BOOT_DISK_TYPE]
-        [--can-ip-forward] [--confidential-compute]
-        [--create-disk=[PROPERTY=VALUE,...]] [--csek-key-file=FILE]
-        [--deletion-protection] [--description=DESCRIPTION]
+        [--can-ip-forward] [--create-disk=[PROPERTY=VALUE,...]]
+        [--csek-key-file=FILE] [--deletion-protection]
+        [--description=DESCRIPTION]
         [--disk=[auto-delete=AUTO-DELETE],[boot=BOOT],[device-name=DEVICE-NAME],
           [force-attach=FORCE-ATTACH],[mode=MODE],[name=NAME],[scope=SCOPE]]
         [--enable-display-device] [--[no-]enable-nested-virtualization]
@@ -55,6 +55,8 @@ SYNOPSIS
           : --boot-disk-kms-keyring=BOOT_DISK_KMS_KEYRING
           --boot-disk-kms-location=BOOT_DISK_KMS_LOCATION
           --boot-disk-kms-project=BOOT_DISK_KMS_PROJECT]
+        [--confidential-compute
+          | --confidential-compute-type=CONFIDENTIAL_COMPUTE_TYPE]
         [--custom-cpu=CUSTOM_CPU --custom-memory=CUSTOM_MEMORY
           : --custom-extensions --custom-vm-type=CUSTOM_VM_TYPE]
         [--image-family-scope=IMAGE_FAMILY_SCOPE
@@ -183,11 +185,6 @@ FLAGS
         If provided, allows the instances to send and receive packets with
         non-matching destination or source IP addresses.
 
-     --confidential-compute
-        The instance boots with Confidential Computing enabled. Confidential
-        Computing is based on Secure Encrypted Virtualization (SEV), an AMD
-        virtualization feature for running confidential instances.
-
      --create-disk=[PROPERTY=VALUE,...]
         Creates and attaches persistent disks to the instances.
 
@@ -967,6 +964,29 @@ FLAGS
           ▸ provide the argument --boot-disk-kms-project on the command line;
           ▸ set the property core/project.
 
+     At most one of these can be specified:
+
+       --confidential-compute
+          (DEPRECATED) The instance boots with Confidential Computing enabled.
+          Confidential Computing is based on Secure Encrypted Virtualization
+          (SEV), an AMD virtualization feature for running confidential
+          instances.
+
+          The --confidential-compute flag will soon be deprecated. Please use
+          --confidential-compute-type=SEV instead
+
+       --confidential-compute-type=CONFIDENTIAL_COMPUTE_TYPE
+          The instance boots with Confidential Computing enabled. Confidential
+          Computing can be based on Secure Encrypted Virtualization (SEV) or
+          Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP),
+          both of which are AMD virtualization features for running
+          confidential instances. CONFIDENTIAL_COMPUTE_TYPE must be one of:
+
+           SEV
+              Secure Encrypted Virtualization
+           SEV_SNP
+              Secure Encrypted Virtualization - Secure Nested Paging
+
      Custom machine type extensions.
 
        --custom-cpu=CUSTOM_CPU