Google Cloud CLI - Release Notes

Copyright 2014-2026 Google Inc. All rights reserved.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

581.0.0 (2026-08-18)

Breaking Changes

  • (Cloud Services) Removed gcloud beta services mcp enable, gcloud beta services mcp disable, and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

  • Promoted gcloud ai semantic-governance-policies (create, describe, update, delete, list) and gcloud ai semantic-governance-policy-engine (describe, update, deprovision) commands from beta to GA.

BigQuery

  • Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.
  • Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.

Cloud Auth

  • Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.

Cloud Bigtable

  • Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.

Cloud IAM

  • Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).
  • Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.

Cloud Services

  • API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.

Cluster Director

  • Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.
  • Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.
  • Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.

Compute Engine

  • Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta, preview, and GA.
  • Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta, preview, and GA.
  • Added gcloud compute packet-mirrorings test-iam-permissions command for beta, preview and GA tracks.

Container

  • Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong, to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.

Database Migration

  • Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.
  • Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.

Kubernetes Engine

  • Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.

Oracle Database

  • Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type, --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

580.0.0 (2026-08-11)

Breaking Changes

Google Cloud CLI

  • Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.

Apihub

  • Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.

Certificate Authority Service

  • Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool, --issuer-location, and --issuer-ca flags.
  • Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.

Certificate Manager

  • Added --tags flag to gcloud certificate-manager create commands (certificates create, dns-authorizations create, issuance-configs create, maps create, and trust-configs create).

Cloud Backup DR

  • Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.
  • Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.

Cloud Composer

  • Enabled the 'backfill' Airflow CLI sub-command for Composer environments running Airflow 3.
  • Enabled the 'config lint' Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.

Cloud Dataflow

  • Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.
  • Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.

Cloud IAM

  • Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.

Cloud Spanner

  • Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.

Cloud Storage

  • gcloud storage rsync:
    • Skipping syncing files which goes outside of destination directory.

Cluster Director

  • Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.

Compute Engine

  • Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA, beta, preview, and alpha.
  • Added gcloud compute snapshot-groups set-iam-policy command in beta.
  • Added --kms-key-service-account to gcloud compute disks create, gcloud compute images create, gcloud compute machine-images create and gcloud compute snapshots create for beta track.
  • Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.
  • Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.
  • Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.
  • Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta, preview, and GA.
  • Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.
  • Added gcloud compute firewall-policies test-iam-permissions command.
  • Promoted --graceful-shutdown, --graceful-shutdown-max-duration, and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.
  • Added --identity-type flag to gcloud compute instances create, gcloud compute instances update, and gcloud compute instance-templates create in alpha.
  • Promoted exapool capacity flags to beta and GA tracks for gcloud compute storage-pools update command.
  • Added --maintenance-freeze-duration and --clear-maintenance-freeze-duration flags to gcloud compute instances set-scheduling and gcloud compute instances create in beta.
  • Added gcloud compute images test-iam-permissions command to test IAM permissions on a Compute Engine image in beta, preview, and GA.

Device Run

  • Promoted gcloud device-run sessions wait command to beta.
  • Updated --instrumentation-timeout flag of gcloud beta device-run sessions submit instrumentation to allow a maximum duration of 3 hours.
  • Updated gcloud device-run devices describe to display hardware_type instead of form.
  • Updated gcloud device-run devices list to display HARDWARE_TYPE column instead of FORM.

GKE Hub

  • Promoted API field schema for --fleet-default-member-config flag on gcloud container fleet|hub config-management enable command to beta.

Metastore

  • Updated gcloud beta metastore services migrations start to support migrations to Lakehouse runtime catalog(s).
  • Deprecated Cloud SQL migration arguments in gcloud beta metastore services migrations start.

Network Connectivity

  • Added --export-psc-published-services-and-regional-google-apis and --export-psc-global-google-apis flags to gcloud beta network-connectivity hubs create and gcloud beta network-connectivity hubs update commands.

Network Security

  • Promoted mcp and policyProfile fields to GA in gcloud network-security authz-policies import and export commands.
  • Made loadBalancingScheme optional in gcloud network-security authz-policies import and export commands.

Network Services

  • Promoted gcloud network-services telemetry-policies delete command to BETA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

579.0.0 (2026-08-04)

Breaking Changes

  • (API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.
  • (Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.

AI

  • Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.

Agent Identity

  • Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.

Cloud Auth

  • Enabled ECP HTTP Proxy support for external users (disabled by default).
  • Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.

Cloud Dataproc

  • Promoted --master-instance-selection, --master-instance-flexibility-policy-file, --worker-instance-selection, --worker-instance-flexibility-policy-file, --secondary-worker-instance-selection, and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.

Cloud Firestore Emulator

  • Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.

Cloud Functions

  • Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.
  • Promoted gcloud functions upgrade command to GA.

Cloud NetApp

  • Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.

Cloud Quotas

  • Promoted gcloud quotas surface (info, preferences, and adjuster settings) to General Availability (GA).

Cloud SQL

  • Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances, removing the previous downtime warning. Instances using C4, C4A, or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.

Cloud Services

  • Updated gcloud beta services mcp enable command to be a no-op, as MCP enablement is no longer required.

Cluster Director

  • Fixed an issue where the default zone for cluster resources (storage, network, etc.) was always set to the location's "b" zone, overriding the user-specified zone in compute flags.
  • Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.
  • Added support for 3500GB, and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.
  • Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.
  • Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.
  • Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA, beta, and preview.
  • Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta, preview, and GA.
  • Added --exapool-capacity-optimized-capacity, --exapool-read-optimized-capacity, and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.
  • Added Arm CCA support to the confidential-compute-type option in gcloud compute instance create.
  • Added gcloud compute network-firewall-policies test-iam-permissions command.
  • Added gcloud compute disks test-iam-permissions command to test IAM permissions on a Compute Engine disk.
  • Promoted --ipv6-network-tier flag of gcloud compute networks subnets create and gcloud compute networks subnets update to beta.
  • Added STANDARD option to --ipv6-network-tier flag of gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances network-interfaces add, and gcloud compute instances network-interfaces update in beta.
  • Added gcloud compute routers test-iam-permissions command to test specific IAM permissions on a Compute Engine router in beta.

Compute Firewall Policies

  • Promoted new ULL_POLICY value for --policy-type flag of gcloud compute network-firewall-policies create to GA.

Distributed Cloud Edge

  • Promoted gcloud edge-cloud zones list to GA.

GKE Hub

  • Promoted gcloud container fleet|hub config-management update command to beta.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud iam policy-bindings create.

Kpt

Kubernetes Engine

  • Updated default kubectl to 1.35.6.
  • Additional kubectl versions:
    • 1.30.14
    • 1.31.14
    • 1.32.13
    • 1.33.13