gcloud: Wed Sep 28 10:27:48 UTC 2022

gcloud/alpha/container/clusters/create-auto

@@ -5,7 +5,6 @@ NAME
 SYNOPSIS
     gcloud alpha container clusters create-auto NAME [--async]
         [--autoprovisioning-network-tags=TAGS,[TAGS,...]]
-        [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
         [--boot-disk-kms-key=BOOT_DISK_KMS_KEY]
         [--cluster-ipv4-cidr=CLUSTER_IPV4_CIDR]
         [--cluster-secondary-range-name=NAME]
@@ -15,6 +14,8 @@ SYNOPSIS
         [--release-channel=CHANNEL] [--security-group=SECURITY_GROUP]
         [--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
         [--subnetwork=SUBNETWORK]
+        [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
+          --binauthz-policy=BINAUTHZ_POLICY]
         [--enable-master-authorized-networks
           --master-authorized-networks=NETWORK,[NETWORK,...]]
         [--enable-private-endpoint
@@ -61,13 +62,6 @@ FLAGS
         https://cloud.google.com/sdk/gcloud/reference/compute/firewall-rules/create
         for examples.
 
-     Flags for Binary Authorization:
-
-       --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
-          Enable Binary Authorization for this cluster.
-          BINAUTHZ_EVALUATION_MODE must be one of: DISABLED,
-          PROJECT_SINGLETON_POLICY_ENFORCE.
-
      --boot-disk-kms-key=BOOT_DISK_KMS_KEY
         The Customer Managed Encryption Key used to encrypt the boot disk
         attached to each node in the node pool. This should be of the form
@@ -227,6 +221,18 @@ FLAGS
 
         Cannot be used with the "--create-subnetwork" option.
 
+     Flags for Binary Authorization:
+
+       --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
+          Enable Binary Authorization for this cluster.
+          BINAUTHZ_EVALUATION_MODE must be one of: DISABLED,
+          PROJECT_SINGLETON_POLICY_ENFORCE.
+
+       --binauthz-policy=BINAUTHZ_POLICY
+          The relative resource name of the Binary Authorization policy to
+          audit and/or enforce. GKE policies have the following format:
+          projects/{project_number}/platforms/gke/policies/{policy_id}.
+
      Master Authorized Networks
 
        --enable-master-authorized-networks