Google Cloud CLI - Release Notes

Copyright 2014-2026 Google Inc. All rights reserved.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

581.0.0 (2026-08-18)

Breaking Changes

  • (Cloud Services) Removed gcloud beta services mcp enable, gcloud beta services mcp disable, and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

  • Promoted gcloud ai semantic-governance-policies (create, describe, update, delete, list) and gcloud ai semantic-governance-policy-engine (describe, update, deprovision) commands from beta to GA.

BigQuery

  • Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.
  • Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.

Cloud Auth

  • Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.

Cloud Bigtable

  • Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.

Cloud IAM

  • Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).
  • Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.

Cloud Services

  • API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.

Cluster Director

  • Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.
  • Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.
  • Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.

Compute Engine

  • Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta, preview, and GA.
  • Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta, preview, and GA.
  • Added gcloud compute packet-mirrorings test-iam-permissions command for beta, preview and GA tracks.

Container

  • Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong, to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.

Database Migration

  • Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.
  • Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.

Kubernetes Engine

  • Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.

Oracle Database

  • Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type, --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

580.0.0 (2026-08-11)

Breaking Changes

Google Cloud CLI

  • Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.

Apihub

  • Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.

Certificate Authority Service

  • Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool, --issuer-location, and --issuer-ca flags.
  • Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.

Certificate Manager

  • Added --tags flag to gcloud certificate-manager create commands (certificates create, dns-authorizations create, issuance-configs create, maps create, and trust-configs create).

Cloud Backup DR

  • Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.
  • Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.

Cloud Composer

  • Enabled the 'backfill' Airflow CLI sub-command for Composer environments running Airflow 3.
  • Enabled the 'config lint' Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.

Cloud Dataflow

  • Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.
  • Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.

Cloud IAM

  • Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.

Cloud Spanner

  • Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.

Cloud Storage

  • gcloud storage rsync:
    • Skipping syncing files which goes outside of destination directory.

Cluster Director

  • Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.

Compute Engine

  • Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA, beta, preview, and alpha.
  • Added gcloud compute snapshot-groups set-iam-policy command in beta.
  • Added --kms-key-service-account to gcloud compute disks create, gcloud compute images create, gcloud compute machine-images create and gcloud compute snapshots create for beta track.
  • Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.
  • Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.
  • Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.
  • Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta, preview, and GA.
  • Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.
  • Added gcloud compute firewall-policies test-iam-permissions command.
  • Promoted --graceful-shutdown, --graceful-shutdown-max-duration, and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.
  • Added --identity-type flag to gcloud compute instances create, gcloud compute instances update, and gcloud compute instance-templates create in alpha.
  • Promoted exapool capacity flags to beta and GA tracks for gcloud compute storage-pools update command.
  • Added --maintenance-freeze-duration and --clear-maintenance-freeze-duration flags to gcloud compute instances set-scheduling and gcloud compute instances create in beta.
  • Added gcloud compute images test-iam-permissions command to test IAM permissions on a Compute Engine image in beta, preview, and GA.

Device Run

  • Promoted gcloud device-run sessions wait command to beta.
  • Updated --instrumentation-timeout flag of gcloud beta device-run sessions submit instrumentation to allow a maximum duration of 3 hours.
  • Updated gcloud device-run devices describe to display hardware_type instead of form.
  • Updated gcloud device-run devices list to display HARDWARE_TYPE column instead of FORM.

GKE Hub

  • Promoted API field schema for --fleet-default-member-config flag on gcloud container fleet|hub config-management enable command to beta.

Metastore

  • Updated gcloud beta metastore services migrations start to support migrations to Lakehouse runtime catalog(s).
  • Deprecated Cloud SQL migration arguments in gcloud beta metastore services migrations start.

Network Connectivity

  • Added --export-psc-published-services-and-regional-google-apis and --export-psc-global-google-apis flags to gcloud beta network-connectivity hubs create and gcloud beta network-connectivity hubs update commands.

Network Security

  • Promoted mcp and policyProfile fields to GA in gcloud network-security authz-policies import and export commands.
  • Made loadBalancingScheme optional in gcloud network-security authz-policies import and export commands.

Network Services

  • Promoted gcloud network-services telemetry-policies delete command to BETA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

579.0.0 (2026-08-04)

Breaking Changes

  • (API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.
  • (Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.

AI

  • Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.

Agent Identity

  • Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.

Cloud Auth

  • Enabled ECP HTTP Proxy support for external users (disabled by default).
  • Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.

Cloud Dataproc

  • Promoted --master-instance-selection, --master-instance-flexibility-policy-file, --worker-instance-selection, --worker-instance-flexibility-policy-file, --secondary-worker-instance-selection, and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.

Cloud Firestore Emulator

  • Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.

Cloud Functions

  • Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.
  • Promoted gcloud functions upgrade command to GA.

Cloud NetApp

  • Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.

Cloud Quotas

  • Promoted gcloud quotas surface (info, preferences, and adjuster settings) to General Availability (GA).

Cloud SQL

  • Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances, removing the previous downtime warning. Instances using C4, C4A, or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.

Cloud Services

  • Updated gcloud beta services mcp enable command to be a no-op, as MCP enablement is no longer required.

Cluster Director

  • Fixed an issue where the default zone for cluster resources (storage, network, etc.) was always set to the location's "b" zone, overriding the user-specified zone in compute flags.
  • Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.
  • Added support for 3500GB, and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.
  • Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.
  • Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.
  • Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA, beta, and preview.
  • Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta, preview, and GA.
  • Added --exapool-capacity-optimized-capacity, --exapool-read-optimized-capacity, and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.
  • Added Arm CCA support to the confidential-compute-type option in gcloud compute instance create.
  • Added gcloud compute network-firewall-policies test-iam-permissions command.
  • Added gcloud compute disks test-iam-permissions command to test IAM permissions on a Compute Engine disk.
  • Promoted --ipv6-network-tier flag of gcloud compute networks subnets create and gcloud compute networks subnets update to beta.
  • Added STANDARD option to --ipv6-network-tier flag of gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances network-interfaces add, and gcloud compute instances network-interfaces update in beta.
  • Added gcloud compute routers test-iam-permissions command to test specific IAM permissions on a Compute Engine router in beta.

Compute Firewall Policies

  • Promoted new ULL_POLICY value for --policy-type flag of gcloud compute network-firewall-policies create to GA.

Distributed Cloud Edge

  • Promoted gcloud edge-cloud zones list to GA.

GKE Hub

  • Promoted gcloud container fleet|hub config-management update command to beta.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud iam policy-bindings create.

Kpt

Kubernetes Engine

  • Updated default kubectl to 1.35.6.
  • Additional kubectl versions:
    • 1.30.14
    • 1.31.14
    • 1.32.13
    • 1.33.13
    • 1.34.10
    • 1.35.7
    • 1.36.3

Network Services

  • Deprecated clientTlsPolicy field in gcloud network-services endpoint-policies.
  • Updated gcloud network-services endpoint-policies resource name pattern to support regional locations.

Vmware Engine

  • Added --kms-key flag to gcloud vmware private-clouds create. Specifying this flag with a valid KMS key resource name enables CMEK.
  • Added --encryption-type and --kms-key flags to gcloud vmware private-clouds update. --kms-key (valid KMS key resource name) is required when --encryption-type is CMEK.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

578.0.0 (2026-07-28)

Breaking Changes

  • (Database Migration) Made --auto-commit flag the default for gcloud database-migration conversion-workspaces seed|convert|import-rules operations. To disable auto-committing, use --no-auto-commit flag.

  • The run_bq_command tool exposes the BigQuery CLI (bq) within the Cloud CLI remote MCP server. You can send natural language prompts to your AI application to execute specific BigQuery SQL commands on your behalf.

    For more information, see Use the Cloud CLI remote MCP server.

Google Cloud CLI

  • Fixed an issue where running gcloud init crashed when Enterprise Certificate Proxy (ECP) binaries were missing from configuration.
  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.6.

AlloyDB

  • Promote AlloyDB Backup DR restore flags (--backupdr-backup and --backupdr-data-source) to the GA track.

BigLake

  • Fixed a bug where gcloud biglake iceberg tables commands failed to send the X-Iceberg-Access-Delegation: vended-credentials header.

BigQuery

  • Added -f/--force support to bq rm --connection to ignore NOT_FOUND errors if the connection does not exist.
  • Fixed reading configuration from gcloud CLI with --nouse_google_auth flag.
  • Added a predefined label for jobs created in specific metrics environments.
  • Updated the help text for several global flags.
  • Updated command format in the user-agent HTTP header of API requests.

Cloud Backup DR

  • Added --log-retention-days flag across gcloud backup-dr backup-plans create and update across all release tracks to enable Point-in-Time Recovery (PITR) log retention configuration.

Cloud Bigtable

  • Added --ignore-warnings flag to gcloud bigtable instances tables update and gcloud bigtable tables update.
  • Promoted --ignore-warnings flag of gcloud bigtable materialized-views create to GA.

Cloud Composer

  • Enabled Airflow CLI commands for Composer environments running Airflow 3.2.

Cloud IAM

  • Promoted enabled-for-users-groups option for --scim-usage flag to beta in gcloud beta iam workforce-pools providers.

Cloud Run

  • Added --sandbox-launcher flag to gcloud beta run jobs and gcloud beta run worker-pools command groups to allow setting a container as sandbox launcher when creating or updating a Cloud Run job or a worker pool.

Cloud Workstations

  • Added --idle-action flag to gcloud alpha workstations configs create, gcloud alpha workstations configs update, gcloud beta workstations configs create, and gcloud beta workstations configs update commands.

Compute Engine

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in beta.
  • Added --metadata-filter flag to gcloud compute forwarding-rules create command across all release tracks.
  • Added --metadata-filter flag to gcloud compute forwarding-rules update commands across all release tracks.
  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added gcloud compute instant-snapshot-groups set-iam-policy command to set the IAM policy for a Compute Engine instant snapshot group.
  • Added gcloud compute networks subnets test-iam-permissions command in beta, preview, and GA.
  • Added gcloud compute image-views describe command in beta.
  • Added gcloud compute snapshots test-iam-permissions to test IAM permissions for Compute Engine snapshots.
  • Added gcloud compute interconnects attachments groups set-iam-policy command to set IAM policy on an interconnect attachment group in beta, preview, and GA.
  • Added --internal-range flag to gcloud compute addresses create to support allocating global internal IP addresses from an Internal Range for Private Service Connect.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.

Developer Connect

  • Updated gcloud beta developer-connect account-connectors commands to support Bring Your Own (BYO) and Bitbucket Cloud (BBC) connection types.

GKE Hub

  • Promoted --view, --memberships, --filter, and --sort-by flags on gcloud container fleet|hub config-management describe command to beta.

Network Management

  • Added --source-dms-private-connection flag to gcloud network-management connectivity-tests.

Secret Manager

  • Added the --secret-type flag to gcloud secrets create to support creating secrets of different types (e.g. Cloud SQL credentials).
  • Added the gcloud secrets enable-managed-rotation command to enable managed rotation for a secret using Cloud SQL credentials.
  • Added the gcloud secrets rotate-secret command to rotate a secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

577.0.0 (2026-07-21)

Agent Identity

  • Promoted gcloud agent-identity auth-providers and gcloud agent-identity access-summaries to GA.

AlloyDB

  • Modify flag --no-enable-autoscaler of gcloud beta alloydb instances create|update commands to only set the enabled field to false and not clear autoscaling config.
  • Modify gcloud beta alloydb instances update command to only allow one of --autoscaler-delete-schedule, --autoscaler-disable-schedule, --autoscaler-enable-schedule, or --autoscaler-set-schedule to be specified.

Artifact Registry

  • Added connector-repository mode to gcloud artifacts repositories create.

BigQuery

  • Added support for --s3_service_directory_service flag to pass custom Service Directory endpoints for AWS connection make and update operations. This is used for routing traffic over a private network connection through Cross-Cloud Interconnect.
  • Updated the data source of agent name value set in the user agent HTTP header.
  • Stopped enforcing bq init when --oauth_access_token is provided.

Cloud Bigtable

  • fix: cbt cli escape row keys and column qualifiers in printRow.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.22.0
    • Added DML support for the Firestore Pipelines API
    • Added ability to model when composite indexes are required in Datastore mode using new --require-indexes and --index-file flags
    • Added depreciation warning for JRE versions <25

Cloud Key Management Service

  • (GA) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.

Cloud Workstations

  • Added gcloud beta workstations suspend and gcloud alpha workstations suspend commands.

Compute Engine

  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added --logging-http-request-headers and --logging-http-response-headers flags to gcloud compute backend-services create and update commands to configure Cloud Logging HTTP headers for external L7 load balancers.
  • Added --local-ssd-encryption-mode flag to gcloud compute instances create to specify the encryption mode for Local SSDs.
  • Deprecated customer-supplied encryption keys (CSEK) flags --csek-key-file, --require-csek-key-create, --source-machine-image-csek-key-file, --source-disk-csek-key, --source-disk-key-file, and --source-instant-snapshot-key-file for gcloud compute commands.

GKE Hub

  • Changed both --config flag on gcloud beta container fleet|hub config-management apply command and --fleet-default-member-config flag on gcloud beta container fleet|hub config-management enable command to no longer default spec.upgrades: manual population since auto-upgrades is no longer supported from Config Sync version 1.21.0 and spec.upgrades: manual is behaviorally equivalent to not setting this field.

Kubernetes Engine

  • Fix overwriting autoscaling settings in gcloud container clusters update.

Network Security

  • Updated gcloud beta network-security authz-policies import to support networkRules and snis fields.

Recaptcha

  • Added --universal option to gcloud recaptcha keys create and gcloud recaptcha keys update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

576.0.0 (2026-07-14)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage rsync to default decompresses downloaded gzip files to match the behavior of gcloud storage cp. To retain the previous behavior, use the new --do-not-decompress flag.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

  • The Cloud CLI remote MCP server provides a secure environment that lets you send natural language prompts to your AI application to execute command-line interface (CLI) commands on your behalf. Only gcloud commands are supported.

    For more information, see Use the Cloud CLI remote MCP server.

Artifact Registry

  • Fixed a performance regression in gcloud artifacts docker images list when listing a large number of image versions.

BigLake

  • Promoted gcloud biglake delta-sharing <catalogs|shares|schemas|tables> to GA.
  • Promoted gcloud biglake data-product-sharing publish to GA.
  • Added lakehouse option to --catalog=type flag to gcloud biglake iceberg catalogs.
  • Added gcloud biglake hive tables update to beta.

BigQuery

  • Added environment information to the user-agent HTTP header.
  • Added support for --label flag in bq cp, bq extract, and bq load commands to configure job-level labels.
  • Fixed 'bq show' command failures displaying timestamps without fractional seconds.

Cloud Data Lineage

  • Added gcloud datalineage runs command group to manage data lineage runs.
  • Added gcloud datalineage lineage-events command group to manage data lineage runs.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans create data-documentation and gcloud dataplex datascans update data-documentation commands.
  • Added --mode flag to gcloud dataplex datascans create data-profile and gcloud dataplex datascans update data-profile commands to support specifying profiling mode.

Cloud Dataproc

  • Promoted gcloud dataproc batches submit pyspark-notebook to GA.

Cloud Identity-Aware Proxy

  • Promoted support for agent-registry resource type in gcloud iap web IAM commands to GA.

Cloud Key Management Service

  • (Alpha, Beta) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.
  • Added --hsm-trusted-wrapping flag to gcloud kms keys create and gcloud kms keys versions import to enable trusted wrapping capabilities.
  • Promoted gcloud kms keys versions export-trusted-key-wrapped and gcloud kms keys versions import-trusted-key-wrapped to GA.
  • Added --crypto-key-version-name and --two-factor-public-key-pem flags to gcloud kms single-tenant-hsm proposal create for --operation-type=upgrade_key_trust.

Cloud Managed Kafka

  • Added util function to validate and remove byte units from broker disk input.

Cloud Run

  • Modified gcloud run services proxy to fail immediately if the service has its default URL disabled.

Cloud SQL

  • Upgraded --storage-auto-increase-limit flag for gcloud sql instances create and gcloud sql instances patch commands to GA.

Cloud Storage

Cluster Director

  • Added support for Lustre dynamic tier in gcloud cluster-director clusters commands.

Compliance Manager

  • Updated gcloud compliance-manager commands to support project-level resources.

Compute Engine

  • Promoted --nat-ips-per-endpoint flag to GA in gcloud compute service-attachments create and gcloud compute service-attachments update.
  • Promoted gcloud compute hosts and gcloud compute reservations hosts to beta.
  • Added gcloud compute sole-tenancy node-templates test-iam-permissions command to test IAM permissions on a node template in beta, preview, and GA.
  • Added gcloud compute instant-snapshots set-iam-policy command to support setting IAM policy bindings for instant snapshots in alpha, beta, preview, and GA.
  • Added gcloud compute network-attachments test-iam-permissions command to test IAM permissions on a network attachment in beta, preview, and GA.
  • Added gcloud beta compute instance-groups managed adopt-instances to support adopting instances into regional managed instance groups.
  • Added gcloud compute instant-snapshots test-iam-permissions command to test IAM permissions on an instant snapshot in beta, preview, and GA.
  • Added get-iam-policy and set-iam-policy commands to gcloud compute firewall-policies and gcloud compute network-firewall-policies to manage policy-level IAM policy.
  • Promote the --location flag of gcloud compute interconnects update to GA.
  • Added gcloud compute backend-buckets test-iam-permissions command to test IAM permissions on backend buckets.
  • Promoted --on-repair-allow-changing-zone flag to GA in gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Added gcloud compute interconnects test-iam-permissions command to test IAM permissions on a Compute Engine interconnect in beta.
  • Added gcloud compute instant-snapshot-groups test-iam-permissions command.
  • Added test-iam-permissions command to gcloud compute target-tcp-proxies to test IAM permissions on a target TCP proxy. Global proxies are supported in all tracks, and regional proxies are supported in alpha and beta tracks.
  • Added support for displaying dynamic field GRACEFUL_SHUTDOWN_TIMESTAMP to gcloud compute instance-groups managed list-instances in GA, beta and alpha.
  • Added gcloud compute service-attachments set-iam-policy command to set IAM policy on a service attachment in beta, preview, and GA.
  • Added --async flag to gcloud compute instance-groups managed delete.
  • Promoted --load-balancing-scheme flag to GA in gcloud compute target-tcp-proxies create.
  • Promoted --instances flag of gcloud create instance-groups managed resize-requests create to GA to support specific instance names.
  • Added gcloud compute reservations sub-blocks test-iam-permissions command to beta, preview and GA release tracks.
  • Added on-update-action enum class to --create-disk flag for an instance creation. And it is added to the following release tracks alpha, beta, preview, and GA.
  • Added gcloud compute external-vpn-gateways test-iam-permissions command to test IAM permissions on an external VPN gateway.
  • Added gcloud compute sole-tenancy node-groups test-iam-permissions command to test IAM permissions on a node group in alpha, beta, GA, and preview.
  • Promoted --identity, --identity-certificate and --most-disruptive-allowed-action flags to GA.
  • Added gcloud compute disks bulk set-labels command to alpha, beta, ga, and preview release tracks.

Developer Connect

  • Promoted gcloud developer-connect insights-configs deployment-events list and describe commands to GA.

Kubernetes Engine

  • Added KCP_VPA option to --logging flag of gcloud container clusters create to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters create-auto to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters update to enable VPA Decision Logs feature.
  • Added node config options nodeVfioConfig to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains VFIO-related configurations for this node.
  • Added node config options diskIoScheduler to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains the configuration for the disk IO scheduler.
  • Promoted Rollbackable Upgrades (Two-Step Upgrades) to GA. Added --control-plane-soak-duration flag to gcloud container clusters upgrade and promoted gcloud container clusters complete-control-plane-upgrade to GA.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create-auto to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters update to enable Managed OpenTelemetry feature.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Looker

  • Promoted --release-channel and --accelerated-security-patch-enabled flags to GA for gcloud looker instances create and gcloud looker instances update.
  • Added RELEASE_CHANNEL and ACCELERATED_SECURITY_PATCH_ENABLED columns to gcloud looker instances describe output in GA track.

Network Security

  • Added support for project-level security profiles to gcloud network-security security-profiles wildfire-analysis commands in BETA.

Transfer

  • Deprecated --s3-compatible-mode flag in gcloud transfer agents install. It is no longer needed as Transfer Service automatically detects S3-compatible job.

Vmware Engine

  • Updated gcloud vmware private-clouds create command to use full resource names for --preferred-zone and --secondary-zone flags when creating a stretched private cloud. This update ensures compliance with VPC Service Controls.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.1 (2026-07-07)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.0 (2026-06-30)

Google Cloud CLI

  • Added any-reservation-then-fail argument for flag --reservation-affinity in gcloud container clusters node-pools create.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

AlloyDB

  • Added --failover flag to gcloud beta alloydb clusters promote to support cross-region failover.

Apigee

  • Added gcloud apigee apis import which allows customers to upload API Proxy bundles in archive ZIP or feature template YAML format.

Artifact Registry

  • Expose the Registry URL in the output of gcloud artifacts repositories describe and in the output of gcloud artifacts repositories create (upon synchronous creation).

Assured Workloads

  • Added SWITZERLAND_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS option to --compliance-regime flag of gcloud assured workloads create.

BigLake

  • Added gcloud biglake hive tables create to beta.

Cloud Access Context Manager

  • Exposed --service-account and --service-account-project-number for gcloud access-context-manager cloud-bindings commands in the GA track.

Cloud Bigtable

  • Added support for --tags flag to gcloud bigtable instances create to allow binding tags on instance creation.

Cloud Data Lineage

  • Added gcloud datalineage processes command group to manage data lineage processes.

Cloud Dataproc

  • Added --master-machine-types flag in gcloud dataproc clusters create.

Cloud IAM

  • Updated gcloud iam service-accounts create to print the created service account's email address.

Cloud Run

  • Made the FILE positional argument optional for all gcloud run * replace commands, defaulting to their respective standard filenames if not specified.
  • Promoted regional inference to beta for Cloud Run services, jobs, and worker pools. When --region or the run/region property is not specified, the command line looks for a resource with that name in all regions.
  • Added --sandbox-launcher flag to gcloud beta run deploy and gcloud beta run services update to allow setting a container as sandbox launcher.
  • Promoted --workdir flag for gcloud run commands to GA.
  • Promoted interactive project prompt when project is not specified in gcloud run deploy to GA.
  • Promoted suggesting project and region from Artifact Registry URL in gcloud run deploy to GA.
  • Added --tail flag to gcloud beta run jobs execute to tail logs of the running execution.
  • Added --dry-run flag to gcloud beta run deploy, gcloud beta run services update, gcloud beta run services delete, gcloud beta run worker-pools deploy, gcloud beta run worker-pools update, and gcloud beta run worker-pools delete to validate configuration without persisting changes.
  • Added gcloud run jobs executions describe-latest command to describe the latest execution of a job.
  • Call out proxy when deploying or updating services with gcloud run deploy or gcloud run services update that require authentication in all tracks.

Cloud SQL

  • Added --user and --password-secret-version to gcloud sql instances execute-sql.

Cloud Storage

Cloud Workstations

  • Promoted --pd-disk-size flag of gcloud workstations update to GA.

Cluster Director

  • Users must supply a staticNodeCount if they want one. This no longer defaults to 1.

Compute Engine

  • Added gcloud alpha compute instance-groups managed configure-accelerator-topologies command to configure accelerator topologies of a managed instance group.
  • Added gcloud compute instances set-machine-resources command to allow setting machine resources for a virtual machine instances in alpha, beta, and GA.
  • Added test-iam-permissions command to gcloud compute storage-pools to return permissions that a caller has on the specified storage pool.
  • Added gcloud compute reservations sub-blocks set-iam-policy command to beta and GA release tracks.
  • Added gcloud compute reservations blocks set-iam-policy command to set IAM policy on a reservation block in beta, preview, and GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests create for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests cancel for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests delete for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests describe for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests list for regional MIG to GA.
  • Added gcloud compute instance-templates test-iam-permissions command to test IAM permissions on an instance template in alpha, beta, GA, and preview.
  • Added gcloud compute target-https-proxies set-quic-override command in beta, preview, and GA.
  • Added gcloud compute reservations test-iam-permissions to test IAM permissions on Compute Engine reservations.
  • Added gcloud compute network-attachments set-iam-policy command to set IAM policy on a network attachment in alpha, beta, preview, and GA.
  • Added gcloud compute instances list-referrers command to alpha, beta, and GA release tracks.
  • Added gcloud compute reservations blocks test-iam-permissions command to test IAM permissions on a reservation block in beta.
  • Added gcloud compute interconnects attachments groups test-iam-permissions command to test IAM permissions on an interconnect attachment group in beta, preview, and GA.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in GA.

Database Migration

  • Added --source-database-name-override flag to gcloud database-migration conversion-workspaces seed|update to allow overriding the database name for the seed operation.

GKE Hub

  • Promoted gcloud container fleet rollouts to GA.
  • Promoted gcloud container fleet rolloutsequences to GA.

Kpt

Kubernetes Engine

  • Promoted GKE custom image flags (--image and --image-project) to GA, making them publicly visible in gcloud container clusters create, gcloud container clusters create-auto, and gcloud container node-pools create (and --image/--image-project in gcloud container clusters upgrade).
  • Added stack-type option to --additional-node-network flag of gcloud container node-pools create to configure the stack type (ipv4, ipv4-ipv6, or ipv6) for additional network interfaces.

Network Management

  • Added --source-cloud-run-job flag to gcloud network-management connectivity-tests.

Network Services

  • Updated gcloud edge-cache services import schemas to support specifying up to 100 allowed origins in CORSPolicy.allowOrigins and a client TTL of 0s in CDNPolicy.clientTtl.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

574.0.0 (2026-06-23)

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

Agent Identity

  • Added gcloud beta agent-identity auth-providers get-iam-policy|set-iam-policy|add-iam-policy-binding|remove-iam-policy-binding|test-iam-permissions commands.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

Backup For GKE

  • Made gcloud container backup-restore command groups compatible with non-default universe domains.

BigQuery

  • Fixed a bug where stderr messages from gcloud CLI output would be printed to stdout.
  • Added --gcloud_config_cache flag to enable caching data retrieved from the gcloud CLI.
  • Added display of container request concurrency of BigQuery Python UDF in bq show --routine.
  • Added information about AI Agent in the execution environment to the user-agent HTTP header in the API request.

Cloud Datastream

  • Added Regional Endpoints (REP) support for all Datastream commands.

Cloud Memorystore

  • Added --zone-distribution-config-zones flag to gcloud memorystore instances create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.
  • Added --zone-distribution-config-zones flag to gcloud redis clusters create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.

Cluster Director

  • Added support for creating clusters using --quickstart-cluster in gcloud beta cluster-director clusters create.

Colab

  • Added Hyperdisk options to --disk-type of gcloud colab runtime-templates create: HYPERDISK_BALANCED.

Compute Engine

  • Fixed an issue where gcloud compute url-maps import reset custom timeout and retryPolicy (specifically numRetries) values to defaults when updating an existing URL map.
  • Added --vsock-mode flag to gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances bulk create, and gcloud compute queued-resources create in ALPHA to support enabling/disabling VSOCK mode.
  • Promoted --purpose flag to gcloud compute public-delegated-prefixes create in beta.

Database Migration

  • Added Regional Endpoints (REP) support for all Database Migration Service (DMS) commands.

Kubernetes Engine

  • Updated default kubectl from 1.35.3 to 1.35.6.
  • Added new kubectl version 1.36.2 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Network Security

  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to beta.
  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

573.0.0 (2026-06-16)

Breaking Changes

  • (Anthos Multi-Cloud) Deprecated gcloud container attached clusters get-credentials. Use gcloud container fleet memberships get-credentials to get credentials for a running Attached cluster.

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.5.

AI

  • Added gcloud ai tuning-jobs command group to manage Vertex AI supervised fine-tuning jobs.

App Engine

Artifact Registry

  • Added gcloud artifacts image-streaming-cache command group to manage image streaming caches per region. This group includes create, describe, delete, and list commands.

BigLake

  • Promoted --unity-service-principal-application-id flag for gcloud biglake iceberg catalogs create and update to BETA, making it publicly visible.
  • Promoted BigLake catalogs and arguments for gcloud biglake iceberg catalogs to GA.

Cloud Data Lineage

  • Added gcloud datalineage command group to manage Cloud Data Lineage resources.
  • Added gcloud datalineage config describe and gcloud datalineage config update commands to manage Data Lineage configurations.

Cloud Datastream

  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow connection profiles to gcloud datastream connection-profiles create and update commands.
  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow streams to gcloud datastream streams create and update commands.

Cloud Run

  • Promoted --readiness_probe in gcloud run deploy and gcloud run services update to GA.

Cloud Services

  • API Keys: Updated gcloud services api-keys create and update commands' --api-target flag to accept a colon-separated list of methods inline (e.g. --api-target="service=foo,methods=m1:m2").

Cloud Storage

  • Promoted gcloud storage batch-operations bucket-operations commands to GA.

Cluster Director

  • Added support for creating clusters using blueprints in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted --action-on-vm-failed-health-check flag to GA for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Fixed an issue where waiting for asynchronous operations would fail for certain global nested resources (like cross-site-networks wire-groups).
  • Added any-reservation-then-fail choice to --reservation-affinity flag in beta for gcloud compute instances create, gcloud compute instances bulk create, gcloud compute instance-templates create, gcloud compute instances create-with-container, and gcloud compute instance-templates create-with-container commands.
  • Promoted --include-disks and --exclude-disks flags for gcloud compute machine-images create to the BETA release track.

Kubernetes Engine

  • Added --dataplane-optimization-mode flag to gcloud container clusters create to select scalability mode for Dataplane V2.
  • Deprecated None value of --release-channel flag from gcloud container clusters create and update command. Use RAPID, REGULAR, STABLE or EXTENDED instead.

Network Connectivity

  • Updated help text for --region flag in gcloud network-connectivity transports create to include supported regions list.

Network Security

  • Added gcloud network-security operations command group (describe, wait, list, cancel).
  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.
  • Promoted gcloud network-security security-profiles wildfire-analysis commands to BETA.
  • Promoted gcloud network-security firewall-endpoints wildfire-verdict-change-requests commands to beta.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints create command to BETA.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints update command to BETA.

Recaptcha

  • Fixed an issue where gcloud recaptcha keys create ignored --testing-score when creating Android or iOS keys.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

572.0.0 (2026-06-09)

Google Cloud CLI

  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.5 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

AI

  • Fixed gcloud ai endpoints deploy-model to honor --machine-type for Gemini on GDC connected deployments. Previously the flag was silently ignored.

App Engine

App Lifecycle Manager

  • Added validation to enforce required sub-fields within arguments for releases, unit-kinds, and unit-operations commands.

Cloud Access Context Manager

  • Modified --group-key flag of gcloud access-context-manager cloud-bindings create to be optional.

Cloud IAM

  • Remove deprecated from Extended Attributes parameters. Extended Attributes are marked as restricted.

Cloud Workstations

  • Added gcloud beta workstations update command to update a workstation's properties, such as its persistent directory disk size.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute forwarding-rules in beta.
  • Promoted --ip_addresses flag of gcloud compute forwarding-rules to beta.
  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute backend-services in beta.
  • Added folder share support to gcloud compute reservations update.
  • Promoted --ncc-gateway flag to GA.

Database Migration

  • Added support for seeding a conversion workspace from a Cloud Storage bucket via --gcs-path flag in gcloud database-migration conversion-workspaces seed.
  • Added --dry-run flag to gcloud database-migration conversion-workspaces apply to allow validation of apply process by applying the draft version to a copy of the destination database.
  • Decoupled --host and --port requirements in gcloud database-migration connection-profiles create postgresql for destination connection profiles leveraging Cloud SQL or AlloyDB.

Kubernetes Engine

  • Added --maintenance-window-duration flag to gcloud container clusters create command as an alternative to --maintenance-window-end.
  • Added --maintenance-window-duration flag to gcloud container clusters update command as an alternative to --maintenance-window-end.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways advertised-routes command group to GA, including create, delete, describe, and list commands.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.

Security Command Center

  • Added external-exposure service to the SUPPORTED_SERVICES list.

Service Extensions

  • Updated import and export schemas for gcloud service-extensions authz-extensions.

Workbench

  • Added --image-family flag to gcloud workbench instances upgrade.
  • Added NVIDIA_RTX6000 to --accelerator-type choices on gcloud workbench instances create and update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

571.0.0 (2026-06-02)

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Fixed issue where gcloud compute scp file transfers were extremely slow when using --tunnel-through-iap in PY 3.14.

AlloyDB

  • Added flag --labels to gcloud alloydb instances create|create-secondary commands to assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud alloydb instances update commands to update, remove, or clear labels for an instance.

BigLake

  • Promoted gcloud biglake hive tables to beta.

Cloud Dataproc

  • Added --confidential-compute-type flag to gcloud dataproc clusters create to allow specifying the Confidential Computing technology (e.g., SEV, SEV_SNP, TDX).
  • Deprecated --confidential-compute flag for gcloud dataproc clusters create. Use --confidential-compute-type flag instead.

Cloud Datastream

  • Added --sql-where-clause flag to gcloud datastream objects start-backfill, which starts a partial backfill on the specified object.

Cloud NetApp

  • Added gcloud netapp volumes start-split and get-split-status commands to alpha and beta tracks of the volumes group.
  • Added gcloud netapp storage-pool update-backup-config command to GA track.
  • Added --ontap-source flag to gcloud netapp backup-vaults backups create GA track.
  • Added gcloud netapp storage-pools list-backup-configs command to the GA track of the storage-pools group.
  • Added gcloud netapp storage-pools restore-volume command to GA track.

Cloud Run

  • Added regional endpoint support for gcloud beta run worker-pools and gcloud beta run jobs executions tasks commands. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.22.0 of the Cloud SQL Proxy.

Cloud Storage

  • Added --set-object-acls-from-file flag to gcloud storage batch-operations jobs create.

Compute Engine

  • Promoted --source-machine-image and --source-machine-image-disk-device-name flags for gcloud compute disks create in beta.

Network Security

  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, create, delete, delete-override, describe, list, list-overrides, update-override) to GA.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to GA.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

570.0.0 (2026-05-27)

Google Cloud CLI

  • Rebuilt Windows bundled Python for the gcloud CLI with cryptography 46.0.7 and pyOpenSSL 26.0.0.
  • Updated Linux bundled Python for the gcloud CLI to 3.14.5.
  • Updated the gcloud CLI authentication caching logic to natively store and refresh Regional Access Boundary (RAB) data.
  • Reverted Windows PuTTY executables to version 0.81 due to a breakage.

AlloyDB

  • Added flag --labels to gcloud beta alloydb instances create|create-secondary commands assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud beta alloydb instances update commands to update, remove, or clear labels for an instance.

Beyondcorp

  • Enabled IAM conditions support for add-iam-policy-binding and remove-iam-policy-binding commands under gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications. Added sample values for conditions in command help text.

BigLake

  • Promoted gcloud biglake hive catalogs to beta.
  • Promoted gcloud biglake hive databases to beta.
  • Promoted federated unity catalog flags of gcloud biglake iceberg catalogs to beta.
  • Promoted --primary-location flag of gcloud biglake iceberg catalogs to GA.

BigQuery

  • Remove --alpha=reservation_groups in bq mk, show, ls and rm --reservation_group operations.
  • Added support for table identifiers in the form of project.catalog.namespace.table.
  • Added support for dataset identifiers in the form of catalog.namespace.
  • Added support for showing and removing row access policies using the bq show and bq rm commands.
  • Fixed 'NoneType' error handling and short assignment ID parsing in bq mk --reservation_assignment when reservation_id is not specified.
  • Added support for specifying a reservation assignment name in bq mk --reservation_assignment.
  • Added support for principal field for the bq mk, bq ls, and bq show commands with the flag --reservation_assignment.
  • Removed the frozen dependency on an old version of absl.

Cloud Alerting

  • Fixing List Alerts gcloud CLI example commands.

Cloud Backup DR

  • Added --use-project-service-account flag for gcloud backup-dr backups restore compute and gcloud backup-dr backups restore disk.

Cloud Dataplex

  • Added --all-schema-fields flag to gcloud dataplex context lookup to include all schema fields in the context.

Cloud Key Management Service

  • Added --project flag to gcloud kms autokey-config describe to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support the key-project-resolution-mode field.

Cloud Run

  • Added interactive prompt instead of erroring out when project is not specified in gcloud beta run deploy.
  • Added support for suggesting project and region from Artifact Registry URL in gcloud beta run deploy.
  • Added --[no]--ssh flag to gcloud beta run deploy and gcloud beta run services update to enable or disable SSH access to the Cloud Run service's container instances.
  • Added --domain flag to gcloud beta run deploy to create domain mappings on the fly during service deployment.

Cloud Spanner

  • Add --labels flag to gcloud spanner instances create command to support specifying labels during instance creation.
  • Add --update-labels, --clear-labels and --remove-labels flags to gcloud spanner instances update command to support updating labels.

Cloud Storage

  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches update to support enabling cache ingest on write, and enabled rendering of the parsed property in the anywhere-caches describe command output.
  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches create to support enabling cache ingest on write.

Cloud Workstations

  • Added --disk-archive-timeout flag to gcloud workstations configs create and gcloud workstations configs update commands.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters create command.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters update command.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added centos/rhel/rocky 10, debian 13, ubuntu 24.04/25.10 to allowed list of values for osShortName and osVersion of gcloud compute instances ops-agents policies [create|update].
  • Promoted the --location flag of gcloud compute interconnects update to beta.
  • Promoted --post-quantum-key-exchange flag on gcloud compute ssl-policies create and gcloud compute ssl-policies update to GA.
  • Promoted gcloud compute advice capacity to beta.
  • Promoted gcloud compute advice capacity-history to beta.
  • Promoted --resource-manager-tags flag for gcloud compute commitments create to beta and GA.

  • Added --stabilization-period flag to gcloud compute instance-groups managed <set-autoscaling|update-autoscaling> to configure autoscaler load stabilization period before scale-in decisions.

  • Added --minimal-action flag to gcloud compute instances update.

  • Promoted --view flag of gcloud compute forwarding-rules describe to GA.

  • Promoted gcloud compute org-rollouts cancel to beta.

  • Promoted gcloud compute org-rollouts delete to beta.

  • Promoted gcloud compute org-rollouts describe to beta.

  • Promoted gcloud compute org-rollouts list to beta.

  • Promoted gcloud compute org-rollout-plans create to beta.

  • Promoted gcloud compute org-rollout-plans delete to beta.

  • Promoted gcloud compute org-rollout-plans describe to beta.

  • Promoted gcloud compute org-rollout-plans list to beta.

  • Removed validation on empty folder share list on gcloud compute reservations create.

  • Promoted --secondary-ipv6-range flag on gcloud compute networks subnets create, and --add-secondary-ipv6-range and --remove-secondary-ipv6-range flags on gcloud compute networks subnets update to beta.

  • Promoted --ipv6-aliases flag to gcloud compute instances create, gcloud compute instances network-interfaces [add|update], and gcloud compute instance-templates create in beta.

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in alpha.

Kubernetes Engine

  • Promoted --enable-agent-sandbox flag to GA for gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways command group to GA, including create and update commands.
  • Added support for HYBRID_INSPECTION preset topology to gcloud network-connectivity hubs create in GA.

Network Management

  • Added gcloud network-management network-monitoring-providers command group which manages the enablement state of the Network Insights service.
  • Added gcloud network-management network-monitoring-providers monitoring-points command group which manages agents within a network or application infrastructure that send probes.
  • Added gcloud network-management network-monitoring-providers network-paths command group which manages the hop-by-hop route and active network delivery quality between a monitoring point and a target destination.
  • Added gcloud network-management network-monitoring-providers web-paths command group which manages monitored web applications or URLs.

Network Security

  • Promoted gcloud network-security secure-access-connect command group to GA, including attachments and realms commands.
  • Restricted Symantec integration and localization arguments (such as --symantec-site and --country) to ALPHA and BETA tracks only.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

569.0.0 (2026-05-19)

Breaking Changes

  • (Google Cloud CLI) The anthoscli component is no longer included by default in Debian and RPM package installations to significantly reduce the default install size. Users who require anthoscli can install it manually by running gcloud components install anthoscli or sudo apt-get install google-cloud-cli-anthoscli.

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Updated Windows bundled Python for the gcloud CLI to 3.14.4.

AI

  • Fixed --format field selection in gcloud ai model-garden models list.

Anthos

  • Updated anthos-cli with newer go version and library dependencies.

App Engine

Certificate Authority Service

  • Added support for allowing requesters to specify the certificate validity start time, configurable via the CA pool's issuance policy.
  • Added --requested-not-before-time flag to gcloud privateca certificates create.

Cloud Dataproc

  • Added --resource-manager-tag flag to gcloud dataproc batches submit and gcloud dataproc sessions create commands to allow associating Resource Manager Tags with compute resources.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud kms inventory get-protected-resources-summary.
  • Updated gcloud kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.
  • Added --project flag to gcloud beta kms autokey-config describe and gcloud beta kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud beta kms autokey-config update to support the key-resolution-mode field.

Cloud SQL

  • Added MySQL 9.7 to supported database versions.

Cloud Storage

  • Promoted gcloud storage intelligence-findings commands to GA.

Compute Engine

  • Added --request-body-to-exclude flag to the alpha and beta levels of:
    • gcloud compute security-policies rules add-preconfig-waf-exclusion
    • gcloud compute security-policies rules remove-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules add-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules remove-preconfig-waf-exclusion
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.

Compute Firewall Policies

  • Promoted --target-type and --target-forwarding-rules flags of gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update to GA.

Database Migration

  • Allowed --ssl-type=REQUIRED without specifying certificates.

Kubernetes Engine

  • Added --add-maintenance-exclusion-until-end-of-support and --remove-maintenance-exclusion-until-end-of-support flag in gcloud container node-pools create/update.
  • Added --node-creation-mode flag to gcloud container clusters create, create-auto, and update to allow control plane node creation mode.
  • Added --enable-secret-sync, --enable-secret-sync-rotation and secret-sync-rotation-interval flags to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update for GA.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.12)
    • kubectl.1.34 (1.34.8)
    • kubectl.1.35 (1.35.5)
    • kubectl.1.36 (1.36.1)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

568.0.0 (2026-05-12)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.4 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

Apigee

  • Added support for DRZ endpoints for SA region.

App Optimize

  • Modified gcloud beta app-optimize reports read to show the Report data in a tabular format by default.

Cloud Backup DR

  • Added --compute-instance-properties flag to gcloud backup-dr backup-plans create and update to support workload-specific properties for Compute Engine instance backups.

Cloud Composer

  • Added --cloud-run-functions-routing flag to gcloud composer environments create and gcloud composer environments update (alpha and beta).

Cloud Firestore

  • Added search-config option to field-config flag in gcloud firestore indexes composite create in beta.
  • Added search-index-options option to gcloud firestore indexes composite create in beta.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap tcp IAM commands to beta.

Compute Engine

  • Promoted gcloud compute global-vm-extension-policies to GA.
  • Promoted PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP0 and PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP1 values of --purpose flag on gcloud compute addresses create to beta.
  • Promoted --view flag on gcloud compute forwarding-rules describe to beta.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in beta.

Kpt

Kubernetes Engine

  • Added --node-pool-upgrade-concurrency-config flag in gcloud container clusters create/create-auto/update.
  • Added --node-architecture-taint-behavior flag to gcloud container clusters create, gcloud container node-pools create and gcloud container node-pools update to control architecture taints for nodes specifically for ARM nodes.
  • Added gcloud container container workload profiles manifests create command. This command Provides optimized deployment manifests for non-inference workloads running on GKE.

Pubsub Emulator

  • Add support for keep alive pings.

Workbench

  • Added --data-disk-resource-policies flag to gcloud workbench instances update to support attaching and updating snapshot schedule resource policies on data disks.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

567.0.0 (2026-05-05)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI to resolve CVE-2024-9979.

AI

  • Added --system-labels flag to gcloud ai model-garden models deploy for custom weights deployments.

API Registry

AlloyDB

  • Added IAM_GROUP option to --type flag of gcloud alloydb users create to represent IAM groups.

App Engine

  • Removed --entrypoint flag from gcloud beta app migrate-to-run and updated the command to extract it from configuration files (app.yaml or version config) automatically.
  • Updated the Go SDK to version 1.9.78. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/go/release-notes.

Artifact Registry

  • Added gcloud artifacts projects command group, including gcloud artifacts projects describe and gcloud artifacts projects update, to view and manage project-level settings per location.
  • Added --clear-platform-logs, --disable-platform-logs, --enable-platform-logs, and --severity flags to gcloud artifacts projects update, gcloud artifacts repositories create, and gcloud artifacts repositories update to configure platform logging.

BigLake

  • Fixed issue where gcloud biglake iceberg catalogs list does not return replicas or storage-regions.

Cloud Dataplex

  • Added --context-format flag to gcloud dataplex context lookup to specify the output format (yaml, json, xml).
  • Added --options flag to gcloud dataplex context lookup to provide additional configurations via a JSON string.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.21.0
    • Added support for subqueries, subcollections, let(...) stage, and nested field modification in add_fields(...) & select(...) stages in the emulator.

Cloud Identity-Aware Proxy

  • Added support for --resource-type=agent-registry for gcloud beta iap web get-iam-policy command in alpha and beta.
  • Added --agent, --mcp-server and --endpoint flag to gcloud beta iap web get-iam-policy --resource-type=agent-registry.

Cloud Key Management Service

  • Added a new enum value external-mu to Digest.
  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud NetApp

  • Added gcloud netapp storage-pools restore-volume command to alpha and beta tracks of the storage-pool group.
  • Added --ontap-source flag to gcloud beta netapp backups create.
  • Added gcloud netapp storage-pools list-backup-configs command to alpha and beta tracks of the storage-pool group.
  • Added gcloud netapp storage-pools update-backup-config command to alpha and beta tracks of the storage-pool group.

Cloud Spanner

  • Added --clear-kms-keys flag to gcloud spanner databases update to support reverting a Cloud Spanner database from customer-managed encryption keys (CMEK) to Google-managed default encryption.

Cloud Storage

  • Introduced --delete-source-objects flag to gcloud storage objects compose command.
  • Enables the use of Objects:move API for intra-bucket gcloud storage mv operations.
  • Updated gsutil component to 5.37.

Cloud Workstations

  • Added --start-workstation flag to gcloud workstations start-tcp-tunnel and gcloud workstations ssh commands to automatically start the workstation if its stopped.

Compute Engine

  • Promoted --accelerator-topology-mode flag on gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement to V1.

Database Migration

  • For PostgreSQL migrations, added --postgres-max-additional-subscriptions to gcloud database-migration migration-jobs create and gcloud database-migration migration-jobs update to specify the maximum number of additional subscriptions to use for the migration job.

Kubernetes Engine

  • Added new kubectl version 1.36.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)
    • kubectl.1.36 (1.36.0)
  • Added --confidential-node-type flag to gcloud container clusters create-auto to allow creation of confidential nodes of types: sev, sev_snp, tdx on GKE Autopilot clusters.

Network Connectivity

  • Add --group flag to gcloud network-connectivity spokes linked-vpc-network create and gcloud network-connectivity spokes linked-producer-vpc-network create to allow creating spokes in other groups.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security firewall-endpoint-associations create command to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoints commands.
  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoint-associations commands.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to the beta track.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to the beta track.

Network Services

  • Promoted gcloud compute networks peerings cancel-request-delete to GA.

Service Health

  • Added gcloud service-health command group to GA.

Workbench

  • Added Hyperdisk options to --boot-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML.
  • Added Hyperdisk options to --data-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML, HYPERDISK_EXTREME, HYPERDISK_THROUGHPUT.
  • Added support for Gen-4 machine series (e.g. N4, C4, C4A, C4D, M4, X4, H4, Z4, G4, E4) in gcloud workbench instances create. When a Gen-4 machine type is used without an explicit --boot-disk-type / --data-disk-type, gcloud defaults the disk type to HYPERDISK_BALANCED since these machine series do not support Persistent Disk.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

566.0.0 (2026-04-28)

Google Cloud CLI

  • Made gcloud-man-pages component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using --help flag.

AI

  • Fixed region choice for custom weights deployment in gcloud ai model-garden models deploy.

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

  • Added gcloud beta ai semantic-governance-policy-engine command group. Commands in this group allow users to manage the semantic governance policy engine configuration in Vertex AI.

AlloyDB

  • Promoted --backupdr-backup-plan flag for gcloud alloydb clusters create to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.

Apigee

  • Added support for DRZ endpoints for US, IN and EU region.

App Engine

App Lifecycle Manager

  • Added Application Design Center integration flags to gcloud app-lifecycle-manager commands.
  • Added --application-template, --application-template-revision, and --clear-application-template flags to gcloud app-lifecycle-manager saas create and update to manage Application Templates.
  • Added --app-params-group, --scope-type, and --clear-app-params flags to gcloud app-lifecycle-manager unit-kinds create and update to manage Application parameters.
  • Added --application and --clear-application flags to gcloud app-lifecycle-manager units create and update to manage Application references.
  • Added gcloud beta app-lifecycle-manager flags command group to support Feature Flags.

Assured Workloads

  • Added SPAIN_DATA_BOUNDARY_BY_TELEFONICA as option for --partner for gcloud assured workloads create.

Certificate Authority Service

  • Added --filter flag to gcloud privateca root list. The flag is able to allow filtering results based on specified boolean expression.

Cloud Backup DR

  • Promoted gcloud backup-dr to beta.

Cloud Bigtable

  • Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726, CVE-2026-34986, CVE-2025-58181, and CVE-2026-24051.

Cloud Dataflow

  • Added --launcher-vm-timeout-secs flag to gcloud dataflow flex-template run command, allowing users to configure the timeout duration for the launcher VM.

Cloud Dataplex

  • Added gcloud dataplex entries modify command.
  • Added --use-user-credential and --service-account flags to gcloud dataplex datascans create data-quality command.

Cloud Dataproc

  • Removed legacy --tier flag from gcloud dataproc clusters create. Please use the new flag --engine to create clusters with Lightning Engine or the default engine.

Cloud Firestore

  • Added --concurrency-mode flag to gcloud firestore databases create and gcloud firestore databases update commands to allow configuring the concurrency control mode of a Firestore database.
  • Added --expiration-offset flag to gcloud firestore fields ttls update (when used with --enable-ttl) to allow an offset to be specified when updating TTL configuration.

Cloud Key Management Service

  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud Logging

  • Added list command to gcloud logging recent-queries.
  • Added create, delete, describe, list, and update commands to gcloud logging saved-queries.

Cloud NetApp

  • Added --cross-project-vault to gcloud beta netapp backup-vaults create.

Cloud Run

  • Fixed an issue where GPU zonal redundancy setting is not cleared when --gpu=0 flag is specified to clear GPU settings.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.3 of the Cloud SQL Proxy.

Cloud Storage

  • Updated gcloud-crc32c with latest version of golang go1.26.2.

Cloud Workstations

  • Added --enable-http2 flag to gcloud workstations cluster create command.
  • Added --enable-http2 and --no-enable-http2 flags to gcloud workstations cluster update command.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.
  • Promoted --resource-manager-tags flag for gcloud compute future-reservations create to beta and GA.
  • Promoted gcloud compute rollouts commands to GA.
  • Promoted gcloud compute rollout-plans commands to GA.
  • Promoted cachePolicy support for gcloud compute url-maps to GA.
  • Promoted gcloud compute instant-snapshot-groups create to GA.
  • Promoted gcloud compute instant-snapshot-groups delete to GA.
  • Promoted gcloud compute instant-snapshot-groups describe to GA.
  • Promoted gcloud compute instant-snapshot-groups list to GA.
  • Promoted gcloud compute disks bulk create to beta.
  • Added --identity, --identity-certificate and --most-disruptive-allowed-action flags to gcloud compute instances update in alpha.
  • Promoted --discard-local-ssd flag on gcloud compute instances update-from-file to beta and GA.
  • Promoted gcloud compute disks bulk create to GA.

GKE Hub

  • Added support for container/use_application_default_credentials property in gcloud container fleet memberships get-credentials. When set to true, generated kubeconfig includes --use-application-default-credentials flag for gke-gcloud-auth-plugin.

Kubernetes Engine

  • Promoted --enable-pod-snapshots and --disable-pod-snapshots flags of gcloud container clusters create to GA.
  • Promoted --control-plane-egress flag of gcloud container clusters create command and gcloud container clusters update command to GA.
  • Added --subnetwork flag to gcloud container node-pools create.
  • Add --enable-autoprovisioning to gcloud container clusters create|update commands to support configuring auto-provisioning settings without enabling NAP.
  • Updated default kubectl from 1.34.6 to 1.35.3.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)

Network Services

  • Added AgentGateway support in beta.

Privileged Access Manager

  • Added --scheduled-activation-time flag to gcloud beta pam grants create to support scheduled activation times for grants.

Security Command Center

  • Added gcloud scc sources list command to list Security Command Center sources.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

565.0.0 (2026-04-14)

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

Beyondcorp

  • Added add-iam-policy-binding and remove-iam-policy-binding commands to gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications.

BigLake

  • Promoted gcloud biglake iceberg tables to GA.

Cloud Bigtable

  • Added --edition flag to gcloud bigtable instances create and gcloud bigtable instances update to support Bigtable Editions.
  • Added gcloud beta bigtable memory-layers describe and gcloud beta bigtable memory-layers update commands to read, enable, or disable Cloud Bigtable memory layers.
  • Added --use-memory-layer and --no-use-memory-layer flags to gcloud beta bigtable app-profiles create and gcloud beta bigtable app-profiles update to support enabling and disabling memory layer usage for app profiles.

Cloud Dataproc

  • Added --master-attached-disks, --worker-attached-disks, and secondary-worker-attached-disks flags to gcloud dataproc clusters create to allow attaching non-boot disks to group of instances.
  • Added --engine flag to gcloud dataproc clusters create to allow creating clusters with Lightning Engine or the default engine.

Cloud Interconnect

  • Add a new section "DEFAULTABLE PER-INTERCONNECT FLAGS" for gcloud compute interconnects groups create-members.

Cloud Memorystore

  • Added new node types (redis-highcpu-medium, redis-standard-large, redis-highmem-2xlarge) for Memorystore for Redis Cluster.
  • Added new node types (custom-pico, custom-micro, custom-mini, highcpu-medium, standard-large, highmem-2xlarge) for Memorystore for Valkey.

Cloud NetApp

  • Added --scale-type flag to gcloud netapp storage-pools create to specify the storage pool scale-type (e.g., SCALEOUT) upon creation.
  • Added --large-capacity-config flag to gcloud netapp volumes create to specify the large-capacity-config upon creation.
  • Added --mode flag to GA track for gcloud netapp storage-pools create.
  • Added gcloud netapp storage-pool execute command to GA track of the storage-pool group.

Cloud Run

  • Promoted volumes shortcut (allowing optional name parameter in --add-volume flag when mount-path is provided) to gcloud run command groups.
  • Promoted gcloud run flags --scaling-cpu-target and --scaling-concurrency-target to beta.
  • Promoted gcloud run worker-pools, gcloud run worker-pools revisions and gcloud run worker-pools logs to GA.

Cloud Storage

  • Updated gcloud-crc32c to support computing CRC32C checksums for data chunks.

Compute Engine

  • Promoted gcloud compute addresses update to GA.
  • Promoted regional backend buckets and aggregated list support in gcloud compute backend-buckets to GA.
  • Promoted regional backend bucket support in gcloud compute url-maps to GA.
  • Promoted gcloud compute zone-vm-extension-policies to GA.

Database Migration

  • Added --use-postgres-native flag to gcloud database-migration migration-jobs create command to allow users to create native postgres migrations.

Network Connectivity

  • promoting gcloud networkconnectivity transports from beta.
  • added transports create flag group in beta for NCC Hub fields.
  • set transports create --stack_type default value to ipv4-only because API requires it is set.

Network Security

  • Added describe command to gcloud network-security security-profiles threat-prevention.

Service Health

  • Added gcloud service-health command group to beta.
  • Added --encryption-spec-crypto-key-name flag to gcloud vector-search collections create to allow creating collections with CMEK encryption.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

564.0.0 (2026-04-07)

Breaking Changes

  • (Saas Runtime) Deprecated gcloud saas-runtime command group. Use gcloud app-lifecycle-manager instead.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.11 with grpcio v1.80.0.
  • Updated Windows bundled Python for the gcloud CLI with grpcio v1.80.0 and setuptools v80.10.2 which fixed CVE-2026-23949.
  • Added --check-certs flag to gcloud info --run-diagnostics to troubleshoot certificate validation failures when using proxy servers and custom CA certs.
    • For example, to troubleshoot certificate verification failures for compute.googleapis.com, run: gcloud info --run-diagnostics --check-certs=compute.googleapis.com

App Lifecycle Manager

  • Added gcloud app-lifecycle-manager command group to replace gcloud saas-runtime.

BigLake

  • Added list pagination to gcloud biglake iceberg catalogs.
  • Added --description flag to gcloud biglake iceberg catalogs create/update.

Cloud Data Fusion

  • Added regional endpoint support for gcloud beta data-fusion. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud Firestore

  • Added support for search indexes in gcloud firestore indexes composite and gcloud firestore indexes describe.

Cloud Run

  • Added support for volumes with type=ephemeral-disk to gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs update, gcloud run worker-pools deploy and gcloud run worker-pools update in beta.
  • Added regional endpoint support for the following gcloud beta run commands:
    • gcloud beta run deploy
    • gcloud beta run services
    • gcloud beta run revisions
    • gcloud beta run jobs
    • gcloud beta run executions Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Supported build arguments in gcloud run compose up.

Cloud Storage

  • Promoted --destination-kms-key-name flag of gcloud storage buckets relocate to GA.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted --resource-manager-tags flag for gcloud compute reservations create to beta and GA.
  • Promoted gcloud compute reservations slots get-version to GA.
  • Promoted gcloud compute reservations sub-blocks get-version to GA.

Network Connectivity

  • Added --bandwidth=BANDWIDTH flag to gcloud beta network-connectivity transports update.
  • Added --stack-type=STACK_TYPE flag to gcloud beta network-connectivity transports update.
  • Removed default behaviour of --auto-accept flag for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

563.0.0 (2026-03-31)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.13.12.

AlloyDB

  • Added gcloud beta alloydb connect which provides a secure connection to your instance using the AlloyDB Auth Proxy and psql.
  • Added support for c4a-highmem-2-lssd machine-type in gcloud alloydb instances create and gcloud alloydb instances update.

App Engine

  • Reduced the flags to only those that were needed for migrate-to-run command.

Beyondcorp

  • Added --service-discovery flag to gcloud beyondcorp security-gateways create and update commands.

BigLake

  • Added gcloud biglake iceberg tables create to beta.
  • Promoted gcloud biglake iceberg catalogs to GA.
  • Promoted gcloud biglake iceberg namespaces to GA.
  • Added gcloud biglake iceberg tables update to beta.

BigQuery

  • Fixed a bug that would fail to load Cloud CLI configs when reauthentication is required of the user.
  • Improved authentication performance for user account credentials. Note that changing the active Cloud CLI account during a long-running bq command may cause the command to fail if the new account has no access to the corresponding resource.

Certificate Authority Service

  • Added rdn sequence subject argument to gcloud privateca certificates create to use exact distinguished name from CSR.

Cloud Identity-Aware Proxy

  • Added get-iam-policy, set-iam-policy, add-iam-policy-binding, and remove-iam-policy-binding commands to gcloud alpha iap tcp.

Cloud Memorystore

  • Added maintenance_version, available_maintenance_versions, and effective_maintenance_version fields to the output of gcloud memcache instances describe.
  • Added --maintenance-version flag to gcloud memcache instances update to support self-service updates.

Cloud Observability

Cloud SQL

  • Promoted gcloud sql instances perform-storage-shrink to the GA track.
  • Promoted gcloud sql instances get-storage-shrink-config to the GA track.
  • Updated 'cloud-sql-proxy' packaged component to use 2.21.2 of the Cloud SQL Proxy.
  • Added Microsoft Entra ID authentication support for Cloud SQL instances.
  • Added --entra-id-tenant-id and --entra-id-application-id flags to gcloud sql instances create.
  • Added --entra-id-tenant-id, --entra-id-application-id, and --clear-entra-id-config flags to gcloud sql instances patch.
  • Added Entra ID certificate management commands:
    • gcloud sql ssl entraid-certs create
    • gcloud sql ssl entraid-certs list
    • gcloud sql ssl entraid-certs rotate
    • gcloud sql ssl entraid-certs rollback

Cloud Services

  • Updated gcloud services mcp enable command to only perform service enablement, as MCP enablement is no longer required.
  • Updated gcloud services mcp disable command to be a no-op, as MCP enablement is no longer required.
  • Updated gcloud services mcp list command to list enabled services with MCP configuration. No behavior change to --available.

Compute Engine

  • Promoted --service flag for gcloud compute backend-services add-backend, gcloud compute backend-services update-backend, and compute backend-services remove-backend to beta.
  • Fixed typo in --resource-manager-tags flag for Regional Backend Services.
  • Promoted gcloud compute disks update-kms-key to GA.
  • Promoted gcloud compute snapshots update-kms-key to GA.

Database Migration

  • Added --auto-conversion, --quality-assessment --conversion-assistance, and --pattern-matching flags to gcloud database-migration conversion-workspaces create and update to control Gemini settings.

Developer Connect

  • Added dataform option to --github-config-app of gcloud developer connect connections create.

Kubernetes Engine

  • Updated default kubectl from 1.34.5 to 1.34.6.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.10)
    • kubectl.1.34 (1.34.6)
    • kubectl.1.35 (1.35.3)
  • Added --accelerator-network-profile flag to gcloud container node-pools create command.

Network Connectivity

  • Added --auto-accept, --hub, and --psc-routing-enabled flags to gcloud beta network-connectivity transports create.
  • Made --network flag optional for gcloud beta network-connectivity transports create.

Secure Source Manager

  • Added --custom-hostname-api, --custom-hostname-git-http, --custom-hostname-git-ssh, and --custom-hostname-html flags to gcloud source-manager instances create command to allow users to specify custom hostnames for Git HTTP/SSH, API and HTML access when creating a private instance.

Service Extensions

  • Added --kms-key-name flag to gcloud beta service-extensions wasm-plugins command group to enable CMEK support.

Vector Search

  • Modified --use-index flag of gcloud vector-search collections data-objects search to accept index ID as a value.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

562.0.0 (2026-03-24)

BigQuery

  • Added regional endpoint support for bq migration-workflows. Use global flag --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Fixed a bug where an actual authorization error may be masked by a "missing x-goog-user-project header" error.
  • Errors with the reason alreadyExists are now thrown as BigqueryDuplicateError instead of BigqueryServiceError.
  • Fixed quota project HTTP header fallback value when using legacy auth.
  • Updated the data source for Cloud CLI properties when --use_gcloud_config is set.
  • Add information about the resource that is being managed to the user-agent HTTP header in the API request.

Cloud Backup DR

  • Unhide --disk-properties flag in gcloud backup-dr backup-plans create and gcloud backup-dr backup-plans update to allow configuring disk-level properties like guest-flush.

Cloud DNS

  • Improved robustness of gcloud dns record-sets transaction commands by allowing transaction files to be empty or omit sections, and added a "Nothing to do" message for transactions with no changes.

Cloud Dataplex

  • Promoted dataplex context to GA.
  • Added --semantic-search flag to gcloud dataplex entries search to enable search based on meaning and intent, rather than just keywords.

Cloud Dataproc

  • Fixed a security issue where a race condition could allow local files staged for job submission to be modified before job execution.

Cloud IAM

  • Added gcloud iam workload-identity-pools add-attestation-rule|remove-attestation-rule|set-attestation-ruleslist-attestation-rules which is part of the Managed Workload Identity feature.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud beta kms inventory get-protected-resources-summary.
  • Updated gcloud beta kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.

Cloud Run

  • Promoted gcloud run compose up command to GA.

Cloud SQL

  • Upgraded --reconcile-psa-networking flag for gcloud sql instances patch command to GA. This field reconciles the instance's PSA networking configuration. If the instance is already on a PSA network, the DNS zone and records associated with the PSA write endpoint are either added if missing or updated if incorrect.

Cloud Storage

  • Updated gcloud storage cp, gcloud storage mv and gcloud storage rsync to support Rapid Bucket see https://docs.cloud.google.com/storage/docs/rapid/rapid-bucket.
  • Added a new predefined key, storage-class to the existing --rewrite-object flag in gcloud storage batch-operations jobs create to rewrite object storage classes.

Compute Engine

  • Added --load-balancing-scheme flag to gcloud beta compute target-tcp-proxies create.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create command in GA.
  • Promoted health-aggregation-policies command in gcloud compute to GA.
  • Promoted health-sources command in gcloud compute to GA.
  • Promoted composite-health-checks command in gcloud compute to GA.
  • Promoted --target-size-policy-mode flag for gcloud compute instance-groups managed create to GA.

Compute Network Policies

  • Promoted compute network-policies to beta.

Gemini

  • Added gcloud gemini gda-observability-settings API.
  • Added gcloud gemini gda-observability-settings setting-bindings API.
  • Added gcloud gemini gibq-observability-settings API.
  • Added gcloud gemini gibq-observability-settings setting-bindings API.

Kubernetes Engine

  • Added --enable-scheduled-upgrades to gcloud alpha|beta container clusters create|update command.
  • Added --disable-scheduled-upgrades to gcloud alpha|beta container clusters update command.

Model Armor

  • Added support for --google-mcp-server-apis, --add-google-mcp-server-apis, --remove-google-mcp-server-apis, and --clear-google-mcp-server-apis flags to manage Google MCP server APIs in floor settings.
  • Added support for repeated --add-integrated-services and --remove-integrated-services flags to gcloud model-armor floorsettings update.

Network Connectivity

  • Modified --include-import-ranges flag, and added --exclude-import-ranges, --include-export-ranges, --exclude-export-ranges flags to gcloud network-connectivity spokes linked-router-appliances create, gcloud network-connectivity spokes linked-router-appliances update, gcloud network-connectivity spokes linked-interconnect-attachments create, gcloud network-connectivity spokes linked-interconnect-attachments update, gcloud network-connectivity spokes linked-vpn-tunnels create, gcloud network-connectivity spokes linked-vpn-tunnels update to support hybrid spoke filters.

Network Management

  • Removed deprecated 'alpha network-management simulation'.

Network Security

  • Added command group network-security security-profiles url-filtering and promoted it to GA.
  • Added flag --url-filtering-profile to command network-security security-profile-groups create in the GA track.
  • Moved flag --threat-prevention-profile to a mutex with flag --clear-threat-prevention-profile for command network-security security-profile-groups update in the GA track.
  • Added mutex with flags --url-filtering-profile and --clear-url-filtering-profile to command network-security security-profile-groups update in the GA track.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

561.0.0 (2026-03-17)

AI

  • - Added europe-north2 to online prediction supported regions.
  • Added us-west8 to online prediction supported regions.

AlloyDB

  • Added the --[no-]observability-config-track-active-query-plan flag to gcloud beta alloydb instances create and gcloud beta alloydb instances update to enable or disable the tracking of active query plans.

BigLake

  • Promoted gcloud biglake iceberg namespaces to beta. Create, Update, Delete, Describe, and List commands are now available in beta.
  • Promoted gcloud biglake iceberg tables to beta. Delete, Describe, Get-Iam-Policy, List, Register, and Set-Iam-Policy commands are now available in beta.

Cloud DNS

  • Added --skip-soa-update flag to gcloud dns record-sets transaction start and gcloud dns record-sets import to allow initiating transactions without automatically staging an SOA serial number increment.

Cloud Filestore

  • Add source-backup-project flag to gcloud filestore instances create.

Cloud IAM

  • Deprecated the extended-attributes flags used in gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc in favor of SCIM.

  • Added the --[no-]use-default-shared-ca flag to gcloud iam workload-identity-pools create and update commands to let you provision certificates from default shared certificate authorities (CAs).

Cloud Key Management Service

  • Added support for post-quantum asymmetric signing algorithms: ML-DSA-44, ML-DSA-88, and the external-mu ML-DSA variants.

Cloud SQL

  • Added support in gcloud sql instances point-in-time-restore to perform cross-project PITR with flags: --activation-policy, --assign-ip, --network, --authorized-networks, --enable-google-private-path, --availability-type, --backup, --backup-location, --backup-start-time, --collation, --cpu, --database-version, --enable-bin-log, --enable-point-in-time-recovery, --maintenance-release-channel, --maintenance-window-day, --maintenance-window-hour, --deny-maintenance-period-start-date, --deny-maintenance-period-end-date, --deny-maintenance-period-time, --insights-config-query-insights-enabled, --insights-config-query-string-length, --insights-config-record-application-tags, --insights-config-record-client-address, --insights-config-query-plans-per-minute, --memory, --region, --zone, --secondary-zone, --require-ssl, --retained-backups-count, --retained-transaction-log-days, --storage-auto-increase, --storage-size, --storage-provisioned-iops, --storage-provisioned-throughput, --storage-type, --tier, --t, --edition, --disk-encryption-key, --active-directory-domain, --audit-bucket-path, --audit-retention-interval, --audit-upload-interval, --deletion-protection, --time-zone, --connector-enforcement, --timeout, --enable-private-service-connect, --allowed-psc-projects, --ssl-mode, --final-backup, --final-backup-retention-days, --clear-network, --active-directory-mode, --active-directory-dns-servers, --active-directory-organizational-unit, --active-directory-secret-manager-key, --clear-active-directory-dns-servers, --clear-active-directory, --clear-disk-encryption.

Cloud Storage

  • Promoted object-contexts feature to GA.

Compute Engine

  • Promoted endpoint-based connection policies feature for gcloud compute service-attachments update to GA. This feature allows specifying endpoint URLs in --consumer-accept-list and --consumer-reject-list.
  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud compute service-attachments update to cleanup obsolete entries.
  • Promoted cachePolicy support for gcloud compute url-maps to beta.
  • Promoted --zonal-affinity-spillover and --zonal-affinity-spillover-ratio of gcloud compute backend-services create|update commands to GA.
  • Promoted --preemption-notice-duration flag to gcloud compute instances in beta.

Database Migration

  • Added --enable-iam-authentication and --disable-iam-authentication to gcloud database-migrate connection-profiles create and gcloud database-migrate connection-profiles update. The flag enabled or disables IAM authentication using DMS service agent to the destination instance. Currently supported only for Postgres destinations (Cloud SQL & AlloyDB).

Kubernetes Engine

  • Added support for enabling PTP-KVM time synchronization in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Looker

  • Added --catalog-integration-opt-out flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Network Services

  • Updated gcloud network-services tls-routes import and gcloud network-services tls-routes export to support targetProxies field.

Vector Search

  • Promoted gcloud vector-search collections export-data-objects to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

560.0.0 (2026-03-10)

Google Cloud CLI

  • Fixed issue where API enablement was checked on the wrong project for some commands depending on where --project was specified on the command line.

AlloyDB

  • Added --enable-dataplex-integration flag to gcloud alloydb clusters create|update|create-secondary|restore|migrate-cloud-sql to enable or disable Dataplex integration.

App Engine

Auth Login

  • Fixed an issue where auth/token_host property was ignored when context_aware/use_client_certificate was set to True.

BigQuery

  • Added new --reservation_group flag that can be used in bq mk, show, ls and rm operations.
  • Added information about command that is being executed to the user-agent header.
  • Added new --reservation_group_name flag that can be used in bq update reservation operation.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager supported-permissions describe ROLE_ID to beta and GA.
  • Promoted gcloud access-context-manager supported-permissions list to beta and GA.

Cloud Build

  • Added --publish flag to gcloud builds submit for pack builds, which will directly build images on Artifact Registry and not on local Docker.

Cloud Datastream

  • Fixed an issue where gcloud datastream streams update did not properly handle --rule-sets flag.

Cloud Firestore Emulator

  • Added --edition flag to gcloud emulators firestore start to allow starting the emulator in both 'enterprise' and 'standard' edition.

Cloud IAM

  • Added azure-ad-groups-display-name field to --extra-attributes-type flag to gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc which allow user to setup attributes type for extra attributes oauth2 that fetches azure ad group display name property.

Cloud SQL

  • Added gcloud sql instances execute-sql in GA.

Cloud Storage

  • Promoted --update-object-custom-contexts, update-object-custom-contexts-file, clear-object-custom-contexts, and clear-all-object-custom-contexts flags in gcloud storage batch-operations jobs create to GA.
  • Updated gsutil component to 5.36.
  • Promoted --encryption-enforcement-file flag of gcloud storage buckets create and gcloud storage buckets update to GA.

Compute Engine

  • Updated gcloud compute images list to include public images from the almalinux-cloud project in the default search.
  • Promoted gcloud compute storage-pools list support for Exapools to GA.
  • Added --forward-proxy-direct-forwarding flag to gcloud compute backend-services create in beta.
  • Added --forward-proxy-cloud-run flag to gcloud compute backend-services create in beta.
  • Promoted --early-access-maintenance in gcloud compute reservations update to GA.
  • Promoted the following gcloud compute routers command groups to beta: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.

Config Connector

Database Migration

  • Added gcloud database-migration connection-profiles fetch-static-ips command to fetch the static IP addresses that need to be allowlisted for static IP connectivity.

Kubernetes Engine

  • Added flag option --autopilot-privileged-admission to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update commands. This flag allows specifying Cloud Storage or GKE-specific object paths pointing to privileged workload allowlists to be authorized for use in Autopilot mode.
  • Added support for setting max container restart period in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.
  • Updated default kubectl from 1.34.4 to 1.34.5.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.9)
    • kubectl.1.34 (1.34.5)
    • kubectl.1.35 (1.35.2)
  • Added --enable-agent-sandbox flag to gcloud container clusters create and update commands to enable or disable GKE Agent Sandbox feature.

Vector Search

  • Added gcloud vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources via v1 API.
  • Added support for Data Objects aggregation, query and search via v1 API.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

559.0.0 (2026-03-03)

Breaking Changes

  • (Compute Engine) The command gcloud compute project-info set-usage-bucket has been deprecated. Please use BigQuery Export instead.

Google Cloud CLI

  • Adjusted the maximum wait time between poll retries for async Long-Running Operations from 3 minutes to 20 seconds for some commands.

AI

  • Modified --region flag of gcloud ai custom-jobs to include new custom job regions.

AlloyDB

  • Added support for POSTGRES_18 as a version in alloydb clusters create for GA track.
  • Added support for POSTGRES_18 as a version in alloydb clusters migrate-cloud-sql for GA track.
  • Added support for POSTGRES_18 as a target version using alloydb clusters upgrade for GA track.

BigLake

  • Modified gcloud biglake iceberg catalogs delete to prompt for confirmation by default. Use --quiet flag to get the old behavior.

Certificate Authority Service

  • Added gcloud privateca operations command group to manage long-running operations.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.4
    • Minor bug fixes in Firestore Native mode

Cloud Key Management Service

  • Added gcloud beta kms kaj-config to help users view and updates KAJ default policy on a project/folder/organization.
  • Added gcloud beta kms kaj-enrollment to help users view the KAJ enrollment config of a project.

Cloud NetApp

  • Added gcloud netapp storage-pool execute command to the storage-pool group. This command allows execution of ONTAP CLI commands on the storage pool.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.1 of the Cloud SQL Proxy.

Cluster Director

  • Added id field to all storage resources. Users can set an identifier for storage resources when creating a cluster.

Compute Engine

  • Promoted --resolve-subnet-mask flag for gcloud compute networks subnets create to GA.
  • Added --resource-manager-tags flag to gcloud compute instant-snapshots create in beta and GA.

Database Migration

  • Added --original-migration-name flag to gcloud database-migration migration-jobs create command to allow users to create failback migration jobs.
  • Added --psc-service-attachment flag to gcloud database-migration connection-profiles create sqlserver command to allow users to create SQL Server connection profile for failback migration jobs.
  • Added --private-connection flag to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Private Connection connectivity method.
  • Added --forward-ssh-hostname, --forward-ssh-port, --forward-ssh-username, --forward-ssh-password, and --forward-ssh-private-key flags to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Forward SSH Tunnel connectivity method.

Kubernetes Engine

  • Added --consolidation-delay flag to gcloud container node-pools create and update to control when the Cluster Autoscaler can scale down underutilized nodes.
  • Added flag option --disable-multi-nic-lustre to add support for enabling/disabling the Lustre MultiNIC on GKE Standard and Autopilot clusters.

Network Security

  • Updated import and export schemas for gcloud network-security security-profile-groups.
  • Updated import and export schemas for gcloud network-security security-profiles.
  • Promoted the network-security security-profiles list command to GA.
  • Promoted the network-security security-profiles describe command to GA.
  • Promoted the network-security security-profiles export command to GA.
  • Promoted the network-security security-profiles import command to GA.
  • Add network-security security-profiles delete command.

Vector Search

  • Removed unsupported Vertex Ranker flags from gcloud beta vector-search collections data-objects batch-search command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

558.0.0 (2026-02-24)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added new value POSTGRES_18 to --version flag from gcloud alpha|beta alloydb clusters upgrade to support for upgrading AlloyDB clusters to PostgreSQL 18.

Apihub

  • Promoted gcloud apihub surface to GA which allows management of Apihub resources.

Cloud Functions

  • Promoted Direct VPC support for gcloud functions deploy to GA. Use flags --network, --subnet, --network-tags, and --direct-vpc-egress to configure Direct VPC egress for functions.

Cloud Identity-Aware Proxy

  • Promoted cloud-run resource-type support for IAP CLI to GA.

Cloud Key Management Service

  • Added gcloud kms keys versions delete command to support deletion of CryptoKey Versions.
  • Added gcloud kms keys delete command to support deletion of CryptoKeys.
  • Added gcloud kms retired-resources describe command to support retrieval of a RetiredResource.
  • Added gcloud kms retired-resources list command to support retrieval of RetiredResources.

Cloud NetApp

  • Added --mode flag to gcloud netapp storage-pools create.

Cloud Run

  • Promoted --[no-]iap flag to GA for commands gcloud run deploy, gcloud run services update and gcloud run multi-region-services update.

Cloud SQL

  • Added --data-api-access flag to gcloud sql instances create and patch in GA.

Cluster Director

  • Promoted gcloud alpha cluster-director to beta.

Compute Engine

  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud beta compute service-attachments update to remove entries for Private Service Connect endpoints that are no longer connected.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create to beta.
  • Added --instance-flexibility-policy flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update commands in beta.
  • Added CHIP_ERROR as a valid value for --fault-reasons in gcloud compute instances report-host-as-faulty in alpha, beta, and GA.
  • Promoted --target-service flag for gcloud compute service-attachments update to GA.
  • Added --resource-manager-tags flag to gcloud compute images create in beta and GA.
  • Promoted --network-ddos-adaptive-protection, --network-ddos-impacted-baseline-threshold, and --clear-network-ddos-impacted-baseline-threshold flags for gcloud compute security-policies update to beta.
  • Added --resource-manager-tags flag to gcloud compute disks create in beta and GA.
  • Added --resource-manager-tags flag to gcloud compute snapshots create in beta and GA.

GKE Hub

  • Promoted container fleet workload-identity methods to GA.

Kubernetes Engine

  • Added --maintenance-minor-version-disruption-interval and --maintenance-patch-version-disruption-interval flag in gcloud container clusters create/create-auto/update.

  • Updated default kubectl from 1.33.5 to 1.34.4.

  • Additional kubectl versions:

    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.12)
    • kubectl.1.33 (1.33.8)
    • kubectl.1.34 (1.34.4)
    • kubectl.1.35 (1.35.1)

Vector Search

  • Introduced etag support to gcloud beta vector-search data-objects methods.
  • Added configuration management support to gcloud beta vector-search collections indexes create method.
  • Added --dense-scann-search-leaves-pct and --dense-scann-initial-candidate-count flags to gcloud beta vector-search collections data-objects search to support dense ScaNN parameters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

557.0.0 (2026-02-18)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.2 to fix CVE CVE-2026-24049.
  • Update gcloud feedback to remove Stack Overflow and IRC as communication channels.

App Engine

Cloud Backup DR

  • Added --cloudsql-edition flag to gcloud backup-dr service-config init to support initializing Cloud SQL instances.

Cloud Bigtable

  • Rebuilt with Go 1.24.11 to fix CVE-2025-61727 and CVE-2025-61729.

Cloud DNS

  • Enforce version 3 in setIamPolicy managed zone command.

Cloud Interconnect

  • Deprecate --subzone flag of gcloud compute interconnects create.

Compute Engine

  • Added --template flag for gcloud compute instance-groups managed update command in GA.
  • Promoted gcloud compute instant-snapshot-groups create to beta.
  • Promoted gcloud compute instant-snapshot-groups delete to beta.
  • Promoted gcloud compute instant-snapshot-groups describe to beta.
  • Promoted gcloud compute instant-snapshot-groups list to beta.
  • Promoted gcloud compute rollouts describe to beta.
  • Promoted gcloud compute rollouts list to beta.
  • Promoted gcloud compute rollouts cancel to beta.
  • Promoted gcloud compute rollouts delete to beta.
  • Added min-cpu-platform field in --instance-selection flag of gcloud compute instance-groups managed create and gcloud compute instance-groups managed update in beta.
  • Added --discard-local-ssd flag to gcloud compute instances create in alpha.
  • Updated the network troubleshooting logic within gcloud compute ssh --troubleshoot to handle IAP and IPv6 connectivity scenarios.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --priority and --associated-policy-to-be-replaced flags of gcloud compute network-firewall-policies associations create to beta.
  • Promoted gcloud compute network-firewall-policies associations update command to beta.

Container Registry

  • Fixed an issue where gcloud container images list-tags would crash with a stack trace when receiving a non-JSON response from the server (e.g. an HTML error page). It now displays a user-friendly error message.

Eventarc

  • Added --clear-max-retry-attempts to gcloud eventarc triggers update to support unsetting a RetryPolicy delivery attempt setting.

Looker

  • Added --catalog-integration-enabled flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Pubsub Emulator

  • Add support for AI Inference Single Message Transforms (SMTs).
  • Fix race condition in unit tests.

Workbench

  • Promoted gcloud workbench executions and gcloud workbench schedules to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

556.0.0 (2026-02-10)

Google Cloud CLI

  • Fixed --filter parsing errors in gcloud compute list commands when filter expression contained "region" or "zone" as a substring somewhere in a parenthesized sub-expression.

AI

  • Added support for --disable-dedicated-endpoint to gcloud ai model-garden models deploy.

App Engine

BigQuery

  • Added a queryId in the execution metadata of RunQueryRpc return value if a job was not created.
  • Added support for labels in RunQueryRpc method.
  • Improved stack trace format for Python UDF error messages.
  • Fixed a bug where Google Cloud CLI config properties would not be read correctly.
  • Fixed a bug where a failed Data Transfer config update would display a Success message.

Cloud Backup DR

  • Added --clear-encryption-key flag to gcloud backup-dr backups restore compute to revert the CMEK encryption of disks of a VM to GMEK encryption.
  • Added kms-key property to --create-disk flag to support encryption of restored disk with a Customer Managed Encryption Key (CMEK).

Cloud Run

  • Added warning message for orgless project while deploying cloud-run service with IAP enabled.

Cloud SQL

  • Promoted --server-certificate-rotation-mode flag to GA in gcloud sql instances create and patch command.
  • Updated help text for --server-certificate-rotation-mode flag.

Compute Engine

  • Unhided gcloud compute advice capacity command in alpha.
  • Fix bug with updating standby target size to 0 when calling gcloud beta compute instance-groups managed update with flags --stopped-size or --suspended-size.
    • Added --resource-manager-tags flag to gcloud compute machine-images create in beta.
  • Added --resource-manager-tags flag to gcloud compute machine-images create in v1.
  • Promoted gcloud compute rollout-plans command group to beta.

Compute Firewall Policy Rules

  • Promoted new values for --policy-type flag of gcloud compute network-firewall-policies create to beta.

Developer Connect

  • Added flag --secure-source-manager-instance-config to gcloud developer-connect connections create and gcloud developer-connect connections update.
  • Non-scm providers for developer-connect account-connectors will not be deprecated.

GKE Hub

  • Promoted container fleet workload-identity methods to beta.

Kpt

Kubernetes Engine

  • Announced General Availability (GA) of support for the Image Streaming and Secondary Boot Disk feature on Ubuntu node images (UBUNTU_CONTAINERD) within Google Kubernetes Engine. This allows clusters using Ubuntu nodes to benefit from faster container startups by streaming image data.
  • Updated the help text for --enable-image-streaming flag (in gcloud container clusters create/update and gcloud container node-pools create/update). The enhanced help text now directs users to the public documentation for detailed version requirements and usage instructions for Image Streaming with both UBUNTU_CONTAINERD and COS_CONTAINERD node images.
  • Updated the help text for --secondary-boot-disk flag (in gcloud container node-pools create). The help text now provides links to the public documentation for detailed version requirements and usage instructions across different node image types, including UBUNTU_CONTAINERD.
  • Added flag option --autopilot-general-profile to gcloud container clusters create, create-auto and updatecommands. Accepted values are: none, no-performance. This flag allows specifying the Autopilot general compute profile for a cluster, available on clusters running version 1.32 or later. For more information, see https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#autopilot-compute-platform.

Network Connectivity

  • Fix gcloud beta network-connectivity transports profiles by adding REGION as a column on list, and align on --region flag for describe.
  • Marked advertised-routes as optional in gcloud beta network-connectivity transports create.

Vector Search

  • Added gcloud beta vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources.
  • Added support for Data Objects aggregation, query and search.
  • Added vector_search/location property to set default region for gcloud beta vector-search commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

555.0.0 (2026-02-03)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.1 to fix CVE GHSA-58pv-8j8x-9vj2.

Cloud Run

  • To reduce delay between the end of the build phase and the beginning of the service deployment phase, gcloud run deploy --source commands poll the build for completion more frequently. This reduces overall latency for the command.

Cloud SQL

  • Added gcloud sql users assign-roles which allows granting new roles and revoking existing roles to/from Postgres/MySQL users.
  • Added --database-roles flag to gcloud sql users create to allow granting additional database roles during user creation for Postgres/MySQL.
  • Added --destination-project and --destination-network flags to gcloud sql instances clone for cross-project clone operations. Both flags must be specified together to perform a cross-project clone.

Cloud Services

  • Add --group flag to gcloud services enable in beta.

Compute Engine

  • Added gcloud compute reservations slots list command in beta.
  • Added gcloud compute reservations slots describe command in beta.
  • Added gcloud compute reservations slots list command in v1.
  • Added gcloud compute reservations slots describe command in v1.
  • Deprecated --user-licenses in gcloud compute disks create and gcloud compute images create.
  • Deprecated --update-user-licenses and --clear-user-licenses in gcloud compute disks update and gcloud compute images update.
  • Promote --instance-selection and --instance-selection-machine-types flags of gcloud compute instances bulk create to GA.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in beta.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in v1.

Developer Connect

  • Deprecate non-scm account-connector OAuth providers.

Kpt

Kubernetes Engine

  • Added kubelet config options shutdownGracefulPeriodSeconds and shutdownGracefulPeriodCriticalPodsSeconds to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which allows user customization on node graceful shutdown.

Network Connectivity

  • Fix list and describe for gcloud beta network-connectivity transports.
  • Added gcloud beta network-connectivity transports update command.
  • Clarify --region flag for gcloud beta network-connectivity transports delete.

Network Management

  • Added --source-gke-pod and --destination-gke-pod flags to gcloud network-management connectivity-tests to allow executing Connectivity Tests to or from GKE Pods.
  • Updated comments and enum options for network, network-type, and project arguments of gcloud network-management connectivity-tests.

Pubsub Emulator

  • Add support for filtering to the Pub/Sub emulator.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

554.0.0 (2026-01-27)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.9. The minimum supported Python version is Python 3.10.
  • (Dataproc Metastore) Deprecated --read-write-regions and --read-only-regions flags of gcloud metastore services create. Use single region metastore instead.

BigLake

  • Promoted gcloud biglake iceberg to beta.

Cloud Dataflow

  • Added support for various flags --additional-experiments, --additional-pipeline-options, --additional-user-labels, --disable-public-ips, --temp-location, --staging-location, --num-workers, --max-workers, --worker-machine-type, --launcher-machine-type, --dataflow-kms-key, --enable-streaming-engine, --update, --transform-name-mappings to gcloud dataflow yaml run command.

Cloud Managed Kafka

  • Added --view flag to gcloud managed-kafka consumer-groups list to allow for full and basic views of consumer groups.

Cloud Resource Manager

  • Added Dynamic tags support to gcloud resource-manager tags bindings delete command. This command can be used to detach a tag from a resource.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.0 of the Cloud SQL Proxy.
  • Modified gcloud sql connect command to use Cloud SQL Proxy V2 API.
    • Added support for --auto-iam-authn, --private-ip, --psc, --auto-ip, --run-connection-test and --debug-logs flags.

Compute Engine

  • Added 400g as an additional option for --bandwidth of gcloud compute interconnects attachments dedicated create and gcloud compute interconnects attachments dedicated update.
  • Added --resource-manager-tags flag for alpha to gcloud compute storage-pools create to allow users to add Resource Manager tags to the storage pool resource during creation.
  • Added support to update graceful shutdown configuration in gcloud beta compute instances update-from-file command.

Kubernetes Engine

  • Added support for setting kernel module signature enforcement in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Network Connectivity

  • Fix flags for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

553.0.0 (2026-01-21)

AI

  • Added support for the 'dcgm-fi-dev-gpu-util', 'vllm-gpu-cache-usage-perc', and 'vllm-num-requests-waiting' autoscaling metrics to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

Auth Login

  • Added a warning message for scopes that will be blocked soon for the default client ID generated by gcloud auth application-default login. Scopes include:
    • https://www.googleapis.com/auth/drive
    • https://www.googleapis.com/auth/spreadsheets
    • https://www.googleapis.com/auth/drive.readonly
    • https://www.googleapis.com/auth/analytics.readonly
    • https://www.googleapis.com/auth/spreadsheets.readonly
    • https://www.googleapis.com/auth/calendar
    • https://www.googleapis.com/auth/adwords
    • https://www.googleapis.com/auth/calendar.readonly
    • https://www.googleapis.com/auth/analytics.edit
    • https://www.googleapis.com/auth/drive.metadata.readonly
    • https://www.googleapis.com/auth/content
    • https://www.googleapis.com/auth/analytics
    • https://www.googleapis.com/auth/contacts.readonly
    • https://www.googleapis.com/auth/drive.metadata
    • https://www.googleapis.com/auth/contacts
    • https://www.googleapis.com/auth/youtube
    • https://www.googleapis.com/auth/calendar.events.readonly
    • https://www.googleapis.com/auth/drive.scripts
    • https://www.googleapis.com/auth/docs
    • https://www.googleapis.com/auth/drive.photos.readonly
  • For more information, see https://docs.cloud.google.com/docs/authentication/troubleshoot-adc#access_blocked_when_using_scopes.

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.
  • [Backup DR] Added --update-labels, --remove-labels, and --clear-labels flags to gcloud backup-dr backups update to support label management.
  • Made --backup-rule optional in gcloud backup-dr backup-plans create.

Cloud Dataproc

  • Added --auto-zone-exclude-zones flag to gcloud dataproc clusters create to allow excluding specific zones when using auto zone placement.
  • Added --auto-zone-exclude-zones flag to gcloud dataproc workflow-templates set-managed-cluster to allow managed clusters to be to allow excluding specific zones when using auto zone placement.

Cloud Datastream

  • Added Spanner as a supported source in gcloud datastream connection-profiles and gcloud datastream streams command groups.
  • Added flags for Spanner source in gcloud datastream connection-profiles command group.
  • Added flags for Spanner source in gcloud datastream streams command group.

Cloud NetApp

  • Added gcloud netapp volumes establish-peering command to establish peering for cache volumes.

Cloud Resource Manager

  • Promoted --allowed-values-regex flag of gcloud resource-manager tags keys create/update to GA. This will allow the Tag Values shortName confining to the regex getting created during the time of Binding creation.

Cloud Run

  • Modified gcloud run compose up to support caching in source builds.

Cloud Storage

  • Updated gcloud storage batch-operations jobs list to return a new column "DRY_RUN" to indicate the mode of the jobs.

Compute Engine

  • Added --accelerator-topology-mode flag to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.
  • Added RESERVATION_BOUND and FLEX_START options to --provisioning-model flag in gcloud compute instances update-from-file command.
  • Promoted --allow-cidr-routes-overlap flag of gcloud compute networks subnets update to GA.
  • Added --allow-cidr-routes-overlap flag to gcloud compute networks subnets create to allow creating subnetworks with IP ranges that can overlap with custom routes within the VPC.
  • Promoted --capacity-tier flag to beta.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.
  • Updated gcloud developer-connect create to support --github-enterprise-config-organization flag.

Kubernetes Engine

  • Added --subnet to gcloud container node-pools create command.

Oracle Database

  • Removed unsupported fields from Autonomous Database Update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

552.0.0 (2026-01-13)

BigQuery

  • Added --managed_table_type in bq mk --transfer_config to support destination table type in Data Transfer Service.
  • Fixed the bug where bq command would stop responding indefinitely when the Cloud Resource Manager API was not enabled in the project.

Cloud Composer

  • Updated warning message to reflect Composer 3 as the default version.

Cloud Firestore

  • Promoted enable-firestore-data-access, enable-mongodb-compatible-data-access and enable-realtime-updates to beta and GA.

Cloud Infrastructure Manager

  • Added gcloud infra-manager automigrationconfig describe, gcloud infra-manager automigrationconfig enable-auto-migration, and gcloud infra-manager automigrationconfig disable-auto-migration commands to manage Infrastructure Manager AutoMigrationConfig.

Cloud Run

  • Added --region flag to gcloud beta run worker-pools logs command group.
  • Added --instances flag to gcloud beta run worker-pools deploy/update to replace --scaling flag.
  • Deprecated --scaling flag from gcloud beta run worker-pools deploy/update.
  • Added gcloud run compose up command to alpha and beta.
  • Added --[no-]iap to gcloud beta run multi-region-services.

Cloud Storage

  • Promoted --activity-data-retention-period-days flag in gcloud storage insights dataset-configs to GA.
  • Added --dry-run flag to gcloud storage batch operations jobs create to support creating dry run jobs.

Cloud Workstations

  • Promoted --instance-metadata flag of gcloud workstations configs create and gcloud workstations configs update to GA.

Compute Engine

  • Add --accelerator-topology-mode support to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.

Design Center

  • Added --create-sa flag to gcloud design-center spaces applications deploy command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application deployment. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.
  • Added --create-sa flag to gcloud design-center spaces applications preview command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application preview. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.

Kubernetes Engine

  • Added new kubectl version 1.35.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.11)
    • kubectl.1.33 (1.33.7)
    • kubectl.1.34 (1.34.3)
    • kubectl.1.35 (1.35.0)

Network Services

  • Added gcloud compute networks peerings cancel-request-delete command to alpha and beta. This command is used to cancel a pending request to delete a consensus peering between two networks.

Vmware Engine

  • Added datastores command to gcloud vmware to create, delete, update, describe and list datastores.
  • Added mount-datastore and unmount-datastore command to gcloud vmware private-clouds clusters to mount and unmount datastore on the given cluster.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

551.0.0 (2026-01-06)

Breaking Changes

  • (Google Cloud CLI) Removed the deprecated Cloud Tools for PowerShell component from "gcloud CLI".
    • Starting this release, Cloud Tools for PowerShell is no longer available in Google Cloud CLI. The component is removed from distribution. Cloud Tools for PowerShell has not been installed by default since April 2025 and this change will likely not affect you.
    • We recommend migrating any workflows dependent on these tools to the "gcloud CLI" or the Client Libraries to ensure future compatibility and support.
    • If you require Cloud Tools for PowerShell, you can install it manually from an archived Google Cloud CLI install version 550.0.0 or older.

AI

  • Added --min-gpu-driver-version flag to gcloud beta ai endpoints deploy-model for specifying the minimum GPU driver version.

App Engine

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans dataprofile create/update command groups.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.3
    • Fixed transaction lock timeout error.
    • Fixed bug where import job did not properly reserve imported ids.

Cloud Functions

  • Added flags --network, --subnet, --network-tags, and --direct-vpc-egress to gcloud functions deploy in alpha and beta tracks for supporting Direct VPC.

Cloud Memorystore

  • Add --labels flag to gcloud redis clusters create.
  • Add --update-labels flag to gcloud redis clusters update.
  • Add --remove-labels flag to gcloud redis clusters update.
  • Add --clear-labels flag to gcloud redis clusters update.

Cloud Run

  • Added gcloud beta run worker-pools logs command group, including read and tail commands, to support viewing logs for worker pools.
  • Fixed an issue where gcloud run services logs and gcloud run jobs logs command groups, including read and tail commands, would crash if a request log had a missing attribute value.

Cloud Spanner

  • Add autoscaler flags to gcloud spanner instance-partitons create and gcloud spanner instance-partitions update commands in beta and GA.
  • Add total CPU based autoscaling flags to gcloud spanner instances create and gcloud spanner instances update commands in beta and GA.
  • Promote disable downscaling flag options for gcloud spanner instances create and gcloud spanner instances update commands for GA.

Cloud Storage

  • gcloud storage cp:
    • Skipping copying files which goes outside of destination directory.

Cloud Workstations

  • Added --disk-type, --disk-size, --disk-reclaim-policy, and --disk-source-snapshot to gcloud workstations configs create and gcloud workstations configs update.
  • Added support for Hyperdisk with --disk-type=hyperdisk-balanced-ha.

Compute Engine

  • Added --resource-manager-tags flag for alpha to gcloud compute snapshots create to allow users to add Resource Manager tags to the snapshot resource during creation.
  • Added --resource-manager-tags flag for alpha to gcloud compute disks create to allow users to add Resource Manager tags to the disk resource during creation.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to beta.

Gemini

  • Promoted gcloud gemini cloud-assist investigations commands to beta.

Kubernetes Engine

  • Added --node-drain-grace-period-seconds, --node-drain-pdb-timeout-seconds, and --respect-pdb-during-node-pool-deletion to gcloud container node-pools create and gcloud container node-pools update commands.

Workbench

  • Added NVIDIA_H200_141GB and NVIDIA_B200 option to --accelerator-type flag of gcloud workbench instances create and gcloud workbench instances update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

550.0.0 (2025-12-16)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.10 with pip v25.3.

App Engine

Artifact Registry

  • Made the show-package-vulnerability flag public for gcloud artifacts versions describe.

BigQuery

  • Added an error message on how to set a quota project ID when expected by the API.
  • Updated bq info command to show OpenSSL version.
  • Added new --scheduling_policy_max_slots flag that can be used to set a slot usage cap on BigQuery jobs for either all projects under a reservation or a specific one.
  • Added new --scheduling_policy_concurrency flag that can be used to cap the number of concurrently running BigQuery jobs for either all projects under a reservation or a specific one.
  • Added new --use_gcloud_config to allow disabling the reading of the active gcloud CLI configuration (enabled by default).
  • Added more incompatible flag checks for Dataset and Table in bq update.
  • Improved error messages for unidentifiable resource names.
  • Added setting --mtls flag value from gcloud context_aware.use_client_certificate config property.

Cloud Composer

  • Added --airflow-version to gcloud composer environments update to upgrade Cloud Composer environment to a newer Composer version.

Cloud Dataplex

  • Added one-time trigger support to dataplex datascans create commands.

Cloud Filestore

  • Added gcloud filestore instances resume-replica command for filestore instances. The resume-replica verb resumes a standby replica instance.

Cloud Key Management Service

  • Added gcloud kms single-tenant-hsm create (beta, GA) command to create a single-tenant Hardware Security Module (HSM) instance, used for CryptoKeys with HSM_SINGLE_TENANT protection level. Requires --location and --total-approver-count.
  • Added gcloud kms single-tenant-hsm describe (beta, GA) command to show details of a single-tenant HSM instance. Requires the instance ID as a positional argument and --location flag.
  • Added gcloud kms single-tenant-hsm list (beta, GA) command to list single-tenant HSM instances.
  • Added gcloud kms single-tenant-hsm proposal create (beta, GA) command to create a proposal for operations on a single-tenant HSM instance. Requires --location and --operation-type. Supported operation types are: register_2fa_keys, disable_sthi, enable_sthi, delete_sthi, add_quorum_member, remove_quorum_member, and refresh_sthi. The --single-tenant-hsm-instance-proposal-id flag is optional.
  • Added gcloud kms single-tenant-hsm proposal execute (beta, GA) command to execute an approved proposal on a single-tenant HSM instance. Requires proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal list (beta, GA) command to list proposals for a single-tenant HSM instance. Requires --location and --single-tenant-hsm-instance.
  • Added gcloud kms single-tenant-hsm proposal describe (beta, GA) command to show details of a single-tenant HSM instance proposal. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal delete (beta, GA) command to delete a proposal on a single-tenant HSM instance. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal approve (beta, GA) command to approve a proposal on a single-tenant HSM instance. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag. Approval payloads are provided via either --quorum-reply or a combination of --required-challenge-replies and --quorum-challenge-replies.
    • --quorum-reply: Takes a list of tuples, where each tuple contains the file paths for a signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
    • --required-challenge-replies: Takes a list of tuples, where each tuple contains the file paths for a required signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
    • --quorum-challenge-replies: Takes a list of tuples, where each tuple contains the file paths for a quorum signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
  • Added gcloud kms operations describe (beta, GA) command to show details of a KMS operation.
  • Updated gcloud kms keys versions describe to allow --attestation-file flag for key versions with protection level HSM_SINGLE_TENANT.
  • Updated gcloud kms keys versions get-certificate-chain to allow retrieving certificate chains for key versions with protection level HSM_SINGLE_TENANT.
  • Updated gcloud kms import-jobs create (beta, GA) to include --single-tenant-hsm-instance flag, allowing users to associate the import job with a specific single-tenant HSM instance.

Cloud Run

  • Promoted gcloud run worker-pools IAM policy management commands (add-iam-policy-binding, get-iam-policy, remove-iam-policy-binding, and set-iam-policy) to beta.

Cloud Spanner

  • Added --directed-read flag to gcloud spanner cli that enables directed reads to provide the flexibility to route read-only transactions and single reads to a specific replica type or region (replica_location:replica_type). The replica_type is optional and can be either READ_ONLY or READ_WRITE.
  • Added --proto-descriptor-file flag to gcloud spanner cli to provide path of a file that contains a protobuf-serialized google.protobuf.FileDescriptorSet message to use in this invocation.

Cloud Storage

  • Promoted --activity-data-retention-period-days flag in gcloud storage insights dataset-configs to GA.

Cloud Workstations

  • Added --instance-metadata flag to gcloud beta workstations configs create and gcloud beta workstations configs update commands.

Compute Engine

  • Added --ip-collection flag to gcloud compute addresses create command.
  • Added support for Workforce Identity Federation in GA gcloud.

  • Added --resource-manager-tags flag for alpha to gcloud compute images create to allow users to add Resource Manager tags to the image resource during creation.

  • Updated gcloud compute global-vm-extension-policies help text for --rollout-conflict-behavior and --rollout-predefined-plan arguments.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.

Eventarc

  • Added --max-retry-attempts to gcloud eventarc triggers create and gcloud eventarc triggers update to support specifying a RetryPolicy.

Kubernetes Engine

  • Promoted gcloud container fleet rollouts describe|list to beta.
  • Promoted gcloud container fleet rolloutsequences create|describe|list|update|delete to beta.

Network Connectivity

  • Added gcloud network-connectivity transport delete, gcloud network-connectivity transport list, and gcloud network-connectivity transport describe commands.
  • Added gcloud network-connectivity transport remote-profiles list and gcloud network-connectivity transport remote-profiles describe commands.
  • Added gcloud network-connectivity transport create command.
  • Fixed gcloud network-connectivity transport remote-profiles list command.

Workbench

  • Fixed boolean flag --install-gpu-driver in gcloud workbench instances update command always parsing as true.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

549.0.1 (2025-12-10)

Google Cloud CLI

  • Fixed an AttributeError during macOS install causing gcloud to crash.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

549.0.0 (2025-12-09)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with pip v25.3 which fixed CVE-2025-8869.
  • Rebuilt Windows bundled Python for the gcloud CLI with setuptools v80.9.0 which fixed CVE-2025-47273.
  • Updated Python installation experience on macOS to automatically install required dependencies when using gcloud CLI managed Python environment without prompting.

AI

  • Added --deployment-tier flag to gcloud ai index-endpoints deploy-index to support storage optimized indexes.
  • Added --gpu-partition-size flag to gcloud ai endpoints deploy-model for multi-instance GPU partitioning.

API Registry

  • Added gcloud api-registry mcp servers list command to alpha and beta which lists the MCP servers that are available for consumption in the target project.
  • Added gcloud api-registry mcp enable [SERVICE_NAME] command to alpha and beta which enables a given MCP server for use in the target project.
  • Added gcloud api-registry mcp disable [SERVICE_NAME] command to alpha and beta which disables a given MCP server in the target project.
  • Added gcloud api-registry mcp tools list command to alpha and beta which lists the MCP tools available from the MCP servers in the target project.

AlloyDB

  • Added support for z3 machine-types in gcloud alloydb instances create and gcloud alloydb instances update.

App Hub

  • Promoted gcloud apphub boundary commands to the GA release track and unhide them.

Certificate Authority Service

  • Added --encryption-key flag to gcloud privateca pools create and gcloud privateca pools update. The flag accepts the full resource name of a Cloud KMS key to use for encrypting certificate data at rest. The Cloud KMS key must be located in the same region as the CA pool.

Cloud Alerting

  • Promoted gcloud monitoring policies and gcloud monitoring policies conditions command groups to beta and GA.

Cloud Backup DR

  • Updated gcloud backup-dr backup-plan-associations trigger-backup to return the long-running operation.

Cloud Bigtable

  • Added support for 'app-profile' in CBT CLI count command.

Cloud Composer

  • Added extra-large option to gcloud composer environments create/update for newly introduced XL Composer environment size.

Cloud Datastream

  • Added --rule-sets argument to gcloud datastream streams create and gcloud datastream streams update to support configuring customization rules for streams, particularly BigQuery Partitioning and Clustering.

Cloud Filestore

  • Added gcloud beta filestore instances resume-replica command for filestore instances. The resume-replica verb resumes a standby replica instance from paused state.

Cloud Functions

  • Made gcloud functions deploy gracefully skip non-existent paths in source directories containing dangling symbolic links, preventing FileNotFoundError crashes.

Cloud Managed Kafka

  • Managed Kafka Connectors now default to retrying failures. This can be disabled with --task-retry-disabled.
  • Promoted full flag to beta and GA.
  • Added deprecation warning for gcloud managed-kafka connect-clusters --additional-subnetwork flag.
  • The gcloud managed-kafka connect-clusters list command no longer displays the NETWORK column which formerly showed the additional subnetworks (now deprecated).

Cloud NetApp

  • Introduced --cache-pre-populate flag to gcloud netapp volumes create and gcloud netapp volumes update to pre-populate cache volumes.
  • Added squash-mode and anon-uid options to --export-policy flag of gcloud netapp volumes create|update commands to configure root squash behavior for NFS export policies.
  • Added --kms-config flag to gcloud netapp backup-vaults create to support cmek encrypted backups.

Cloud Resource Manager

  • Added gcloud resource-manager capabilities commands. This command can be used to enable or disable capabilities on a CRM Folder.

Cloud Run

  • Promoted mount-path parameter for --add-volumes flag to gcloud beta run [services/jobs/worker-pools] command groups.

Cloud SQL

  • Added --entra-id-tenant-id flag and --entra-id-application-id to gcloud sql instances create and patch in alpha and beta.
  • Added --clear-entra-id-config to gcloud sql instances patch alpha and beta.

Cloud Services

  • Promoted gcloud services mcp enable command to beta to enable the Model Context Protocol (MCP) endpoint for the specified service(s) on the given project, folder, or organization.
  • Promoted gcloud services mcp disable command to beta to disable the Model Context Protocol (MCP) endpoint for the specified service(s) on the given project, folder, or organization.
  • Promoted gcloud services mcp list command to beta to enumerate the MCP endpoints offered, showing them as either enabled or available for the given project, folder, or organization.

Cloud Workstations

  • Promoted --startup-script-uri flag of gcloud workstations configs create and gcloud workstations configs update to GA.
  • Fixed bugs and typos in startup_script_uri support for gcloud beta workstations configs create and gcloud beta workstations configs update.
  • Updated gcloud workstations configs create to now accept --disk-type=hyperdisk-balanced-ha for use with Hyperdisks.

Compute Engine

  • Promoted gcloud compute url-map support for regional backend buckets to beta.
  • Updated gcloud compute routers update to display a warning message when --add-advertisement-ranges, --remove-advertisement-ranges, or --set-advertisement-ranges are specified, cautioning that custom routes on BGP sessions override custom routes on the router.
  • Promoted --candidate-cloud-router-ip-address and --candidate-customer-router-ip-address flags for gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, and gcloud compute interconnects attachments provider create to GA to allow users to add custom ranges to the interconnect attachment.
  • Promoted --candidate-cloud-router-ipv6-address and --candidate-customer-router-ipv6-address flags for gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, gcloud compute interconnects attachments provider create gcloud compute interconnects attachments dedicated update, gcloud compute interconnects attachments partner update, and gcloud compute interconnects attachments provider update to GA to allow users to add custom ranges to the interconnect attachment.

Developer Connect

  • Added gemini-code-assist value to github-config-app.
  • Added support for regional Secret Manager secrets.

Kubernetes Engine

  • Updated default kubectl to 1.33.5.
  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.15)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.10)
    • kubectl.1.33 (1.33.6)
    • kubectl.1.34 (1.34.2)
  • Added a new command gcloud beta container clusters complete-control-plane-upgrade for user to complete two-step control plane minor upgrade.
  • Added a new flag --control-plane-soak-duration to gcloud beta container clusters upgrade to trigger two-step control plane minor upgrade.
  • Added --use-case, --target-input-length, --target-output-length, --target-itl-milliseconds to gcloud container ai profiles list command.
  • Added gcloud container ai profiles use-case list command.
  • Added use-case flag to the benchmarks list.
  • Added target-itl-milliseconds and use-case flag to manifest command.
  • Added gcloud container ai profiles serving-stacks list command.
  • Added gcloud container ai profiles serving-stack-versions list command.
  • Added arguments --serving-stack and --serving-stack-version to profile commands gcloud container ai profiles list, gcloud container ai benchmarks list and gcloud container ai profiles manifests create.
  • Added output of Serving Stack and Serving Stack Version to profile output of commands gcloud container ai profiles list gcloud container ai benchmarks list.

Looker

  • Added clear-periodic-export-config and periodic export group flags to gcloud looker instances update command to schedule data export.

Workbench

  • Promoted --enable-managed-euc flag to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

548.0.0 (2025-11-18)

AlloyDB

  • Added flag --maintenance-version to gcloud alloydb clusters update command in the GA track to support self-service maintenance.

App Engine

App Hub

  • Added gcloud apphub extended-metadata-schemas command group with describe and list commands to retrieve extended metadata schemas.

Cloud Backup DR

  • Added gcloud backup-dr backups fetch-for-resource-type command to GA track.
  • Added gcloud backup-dr data-source-references list command to GA track.
  • Added --labels to trigger backup command.
  • Added an optional --max-custom-on-demand-retention-days input to gcloud backup-dr backup-plans create and gcloud backup-dr backup-plans update.
  • Added an optional --custom-retention-days input to gcloud backup-dr backup-plans-associations trigger-backup.
  • Added backup-retention-inheritance flag to gcloud backup-dr backup-vaults create to specify backup retention inheritance mode during backup vault creation.
  • Added --kms-key flag to gcloud backup-dr backup-vaults create for customer-managed encryption key support for backup vault.
  • Added --clear-encryption-key flag to gcloud backup-dr backups restore disk to restore a CMEK-encrypted disk as a GMEK-encrypted disk.

Cloud Dataplex

  • Promoted gcloud dataplex datascans create data-documentation command to GA.
  • Promoted gcloud dataplex datascans update data-documentation command to GA.

Cloud Deploy

  • Added --docker-version flag to gcloud deploy releases create.
  • Added --helm-version flag to gcloud deploy releases create.
  • Added --kpt-version flag to gcloud deploy releases create.
  • Added --kubectl-version flag to gcloud deploy releases create.
  • Added --kustomize-version flag to gcloud deploy releases create.

Cloud Run

  • Added gcloud run compose up command to alpha and beta.* Added support for --readiness-probe flag in beta for gcloud run services command groups.
  • Added --no-build flag to gcloud run deploy --source command in beta. This allow for faster deployment whne using a self-contained source by skipping the cloud build step.
  • Updated --container flag parsing to allow for non-container flags to be specified after a --container flag.

Cloud Storage

  • Promoted gcloud storage intelligence-configs commands to GA.
  • Promoted gcloud storage insights dataset-configs commands to GA.

Cloud Workstations

  • Fixed bugs and typos in startup_script_uri support for gcloud beta workstations configs create and gcloud beta workstations configs update.

Compliance Manager

  • Promoted gcloud compliance-manager to GA.

Compute Engine

  • Promoted gcloud compute global-vm-extension-policies to beta.

Compute Firewall Policies

  • Promoted --target-type flag to beta in gcloud compute network-firewall-policies create and gcloud compute network-firewall-policies update.
  • Promoted --target-forwarding-rules flag to beta in gcloud compute network-firewall-policies create and gcloud compute network-firewall-policies update.

Compute OS Config

  • Add --skip-unpatchable-vms flag to gcloud compute os-config patch-jobs execute.

Developer Connect

  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.

Kubernetes Engine

  • Add support for kernel module signature enforcement in node pools using --enable-kernel-module-signature-enforcement flag, which applies to gcloud container cluster create|create-auto|update and gcloud container node-pools create|update commands.

Migrate to Virtual Machines

  • Added --guest-os-features flag to gcloud migration vms image-imports create and gcloud compute migrations image-imports create commands.

Model Armor

  • Added the following flags to gcloud model-armor floorsettings update command to support Vertex and MCP integrations:
    • --add-integrated-services
    • --remove-integrated-services
    • --clear-integrated-services
    • --vertex-ai-enforcement-type
    • --enable-vertex-ai-cloud-logging
    • --google-mcp-server-enforcement-type
    • --enable-google-mcp-server-cloud-logging
    • --enable-multi-language-detection

Security Command Center

  • Added agent-engine-threat-detection service to the SUPPORTED_SERVICES list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

547.0.0 (2025-11-11)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage sign-url to prefer virtual hosted-style URL over path-style URL. This behavior can be overridden by using --path-style-url flag.

Google Cloud CLI

  • Fixed issue where Google Compute Engine metadata server requests would fail when refreshing authentication credentials if a proxy was configured and the no_proxy environment variable wasn't set.
  • Updated Windows bundled Python for the gcloud CLI to 3.13.8.

Cloud Alerting

  • Promoted gcloud monitoring alerts describe to beta.

Cloud Backup DR

  • Added gcloud backup-dr backups fetch-for-resource-type command to GA track.
  • Added gcloud backup-dr data-source-references list command to GA track.

Cloud Dataflow

  • Added support for Java 25 for --flex-template-base-image option in gcloud dataglow flex_template build.

Cloud Interconnect

  • Promoted compute interconnects attachments l2-forwarding command2 to beta and GA.
  • Added --resource-manager-tags flag to gcloud compute interconnects create to add Resource Manager Tags to resources at creation.
  • Added --resource-manager-tags flag to gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, gcloud compute interconnects attachments provider create, and gcloud compute interconnects attachments l2-forwarding commands to add Resource Manager Tags to resources at creation.

Cloud NetApp

  • Added gcloud netapp host-groups command group to GA, including create, delete, describe, list, and update commands to manage NetApp Host Groups.
  • Added --type flag to gcloud netapp storage-pools create to specify the storage pool type (e.g., UNIFIED) upon creation.
  • Added --block-devices flag to gcloud netapp volumes create and gcloud netapp volumes update to manage block device configurations for volumes.

Cloud On Demand Scanning

  • Add support for scanning Minimus (MinimOS) containers.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.19.0 of the Cloud SQL Proxy.
  • Added --storage-type flag to gcloud sql instances patch.

Cloud Services

  • Promoted gcloud beta services enable command to beta to enable services for a given project, folder, or organization.

    Note: The organization policy constraint constraints/serviceuser.services may not work correctly if you enable a service at the folder or organization level using Service Usage with Hierarchical Service Activation. To recreate the same behavior in a compatible way, it is recommended to replace constraints/serviceuser.services with the Restrict Resource Service Usage organization policy.

    Note: Previously, enabling some services also triggered service account creation. This logic is now separate. If you encounter a service account not found error, please report this to service-usage-feedback@google.com. You can use gcloud services enable or gcloud beta services identity create to create the necessary service account.

    Note: The command will now return an error if the user attempts to enable a service that is already enabled.

  • Promoted gcloud beta services disable command to beta to disable services for a given project, folder, or organization.

    Note: When disabling a service with Hierarchical Service Activation, existing consumer-controlled resources can block the process. Please delete these resources and try again. If resources cannot be deleted, report the issue to the respective service team. Alternatively, use the Restrict Resource Service Usage organization policy constraint to restrict service access.

    Note: The command will now return an error if the user attempts to disable a service that is not enabled.

  • Promoted gcloud beta services list command to beta to list Google Cloud services and APIs that are enabled or available for a given project, folder, or organization.

    Note: Some services previously hidden may now appear in the enabled list with Hierarchical Service Activation. This does not necessarily mean they were newly enabled. They can be disabled using gcloud beta services disable if desired.* Promoted gcloud services groups list-members command to beta to list the direct members of a specified service dependency group.

  • Promoted gcloud services groups list-members command to beta to list the direct members of a specified service dependency group.

  • Promoted gcloud services groups list-expanded-members command to beta to list all transitive members, including nested dependencies, within a service dependency group.

  • Promoted gcloud services policies get command to beta to retrieve the consumer policy for the given project, folder, or organization.

  • Promoted gcloud services policies get-effective command to beta to retrieve the effective consumer policy for the given project, folder, or organization, including policies inherited from ancestors.

  • Promoted gcloud services policies test-enabled command to beta to test if a service value is enabled for the given project, folder, or organization, including policies inherited from ancestors.

  • Promoted gcloud services policies update command to beta to update the consumer policy for the given project, folder, or organization using a provided file.

    Note: Please refer to https://docs.cloud.google.com/service-usage/docs/hierarchical-service-activation/overview for more details on hierarchical service activation.

Cloud Spanner Emulator

  • Add gcloud emulators spanner notices command to print third party notices.

Cloud Storage

  • Added Retain-Until and Retention-Mode options to --put-metadata flag in gcloud storage batch-operations jobs create to set object retention.
  • Fixed gcloud storage sign-url: The --region flag is no longer required for operations on existing buckets, but is still needed when generating a URL to create a bucket.

Cloud Workstations

  • Added support for startup script uri in beta workstations config create and beta workstations config update command.

Compute Engine

  • Added --ipv6-access-type flag to gcloud beta compute public-advertised-prefixes create.
  • Added --ipv6-access-type flag to gcloud compute public-advertised-prefixes create.
  • Added grpc-with-tls command group to gcloud compute health-checks to allow users to create a new health check type.
  • Added --internal-ipv6-prefix flag to gcloud beta compute networks subnets create and gcloud beta compute networks subnets update.
  • Added --internal-ipv6-prefix flag to gcloud compute networks subnets create and gcloud compute networks subnets update.
  • Support --mode=internal-ipv6-subnetwork-creation in gcloud beta compute public-delegated-prefixes create and gcloud beta compute public-delegated-prefixes delegated-sub-prefixes create commands.
  • Support --mode=internal-ipv6-subnetwork-creation in gcloud compute public-delegated-prefixes create and gcloud compute public-delegated-prefixes delegated-sub-prefixes create commands.

Kubernetes Engine

  • Added --enable-pod-snapshots and --disable-pod-snapshots flag to gcloud beta container clusters create|update commands to enable or disable GKE Pod Snapshot feature.

Looker

  • Added --egress-enabled, --marketplace-enabled, and --egress-fqdns flags to gcloud looker instances update to manage Controlled Egress settings.

Model Armor

  • Added the following flags to gcloud beta model-armor floorsettings update command to support MCP integrations:
    • --google-mcp-server-enforcement-type
    • --enable-google-mcp-server-cloud-logging

Service Extensions

  • Promoted gcloud service-extensions lb-edge-extensions command group to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

546.0.0 (2025-11-04)

Google Cloud CLI

  • Updated MacOS Python Virtualenv for the gcloud CLI to 3.13.7.
  • Updated Linux bundled Python for the gcloud CLI to 3.13.7.

AI

  • Added --min-scaleup-period, --idle-scaledown-period, and --initial-replica-count flags to gcloud beta ai endpoints create to support scale-to-zero functionality for Vertex Online Inference.

Cloud Bigtable

  • Promoted gcloud bigtable schema-bundles create|describe|list|update|delete commands to GA.
  • Promoted gcloud bigtable schema-bundles get-iam-policy to GA.
  • Promoted gcloud bigtable schema-bundles set-iam-policy to GA.
  • Promoted gcloud bigtable schema-bundles add-iam-policy-binding to GA.
  • Promoted gcloud bigtable schema-bundles remove-iam-policy-binding to GA.

Cloud Filestore

  • Added address-mode option to --network flag of gcloud filestore instances create command.

Cloud Firestore

  • Promoted gcloud firestore databases clone command to beta and GA.

Cloud Functions

  • Added support for pyproject.toml when deploying Python functions.

Cloud Pub/Sub

  • Added --tags flag to gcloud pubsub topics create for creating Cloud Pub/Sub Topics with Cloud Resource Manager Tags attached at create-time.
  • Added --tags flag to gcloud pubsub subscriptions create for creating Cloud Pub/Sub Subscriptions with Cloud Resource Manager Tags attached at create-time.
  • Added --tags flag to gcloud pubsub snapshots create for creating Cloud Pub/Sub Snapshots with Cloud Resource Manager Tags attached at create-time.

Cloud Run

  • Promoted gcloud run compose up command to beta.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.18.3 of the Cloud SQL Proxy.
  • Modified gcloud beta sql connect command to use Cloud SQL Proxy V2 API.
  • Added support for --auto-iam-authn, --private-ip, --psc, --auto-ip,--run-connection-test and --debug-logs flags.
  • Added --data-api-access flag to gcloud sql instances create and patch in alpha and beta.

Compute Engine

  • Added --identity flag to gcloud beta compute backend-services create.
  • Promoted gcloud compute zone-vm-extension-policies to beta.
  • Added --identity and --identity-certificate flags to gcloud compute instances create and gcloud compute instance-templates create in alpha.

Compute Firewall Policies

  • Added SOURCE column to default output of gcloud beta compute network-firewall-policies list command.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud beta iam policy-bindings create.

Model Armor

  • Added the following flags to gcloud beta model-armor floorsettings update command to support Vertex AI integrations:
    • --add-integrated-services
    • --remove-integrated-services
    • --clear-integrated-services
    • --vertex-ai-enforcement-type
    • --enable-vertex-ai-cloud-logging
    • --enable-multi-language-detection

Network Security

  • Added --mirroring-deployment-group-project flag for explicit project specification in gcloud network-security mirroring-endpoint-groups create command when providing --mirroring-deployment-group. In addition, the command will now correctly fall back to --project and the core/project property from the global configuration before inferring from the endpoint group's project.
  • Added --intercept-deployment-group-project flag for explicit project specification in gcloud network-security intercept-endpoint-groups create command when providing --intercept-deployment-group. In addition, the command will now correctly fall back to --project and the core/project property from the global configuration before inferring from the endpoint group's project.

Service Extensions

  • Promoted request_body_send_mode and response_body_send_mode to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

545.0.0 (2025-10-28)

Google Cloud CLI

  • Added warning message to indicate Python 3.9 support will be deprecated on January 27th, 2026.

App Engine

BigQuery

  • Improved exception chaining in BigQuery client.
  • Added logging for the actual unexpected credentials type when using Google Auth.
  • Added display for authorized stored procedures with user-specified roles in ACLs for bq show.
  • Added support for --timestamp_target_precision flag for bq load, bq mk (--table) and bq mkdef commands. Use this flag to specify timestamp subsecond precisions that will be supported by the destination table. The feature is in preview.
  • Fixed reference type error in bq set-iam-policy --reservation.
  • Fixed a bug where several HTTP headers are not set properly for API requests in bq rm.

Cloud Bigtable

  • Added --view flag to gcloud bigtable materialized-views get and gcloud bigtable materialized-views list to specify which details of a materialized view to retrieve. list command only supports schema view.

Cloud Composer

  • Added --disable-private-environment to gcloud composer environments create to explicitly allow the creation of public environments.

Cloud Dataplex

  • Added --data-classification flag to gcloud dataplex aspect_types create.

Cloud IAM

  • For gcloud iam workforce-pools providers scim-tenants create command, --claim-mapping flag is now required.
  • Eliminate need for --project_id to match service account project in service account key operations.

Cloud Run

  • Added logic to use high-CPU, high-bandwidth machines for source-deploy builds of GPU-enabled Cloud Run services.
  • When deploying source code with gcloud run deploy, the configuration will now be validated before starting to build the code.

Compute Engine

  • Promoted regional backend-buckets in gcloud compute to beta.
  • Added --local-ssd flag to gcloud compute advice calendar-mode to allow specifying local SSD properties when requesting advice for future reservations.
  • Added FIPS_202205 profile and min TLS version 1.3 to --profile and --min-tls-version flags for compute SSL policies in Google Cloud CLI.

Config Connector

Eventarc

  • Removed the deprecated network_attachment option from the examples in the help text for gcloud eventarc pipelines create.

Kubernetes Engine

  • Added --add-maintenance-exclusion-until-end-of-support in gcloud container clusters update command to allow maintenance exclusion end time to track cluster version's end of support.
  • Added --accelerator-network-profile flag to gcloud beta container node-pools create for Public Preview. This flag allows specifying an accelerator network profile when creating node pools.

Network Services

  • Added support for endpoint urls in --consumer-accept-list and --consumer-reject-list in gcloud beta compute service-attachments update command.

Workbench

  • Added --data-disk-resource-policies flags to gcloud workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

544.0.0 (2025-10-21)

AlloyDB

  • Added support for c4 machine-types in gcloud alloydb instances create and gcloud alloydb instances update.
  • Added support for POSTGRES_18 as a version in gcloud alloydb clusters create for alpha & beta track.
  • Added support for POSTGRES_18 as a version in gcloud alloydb clusters migrate-cloud-sql for alpha & beta track.

Artifact Registry

  • Added gcloud artifacts versions export to export artifacts by versions.
  • Added gcloud artifacts tags export to export artifacts by tags.

Cloud Interconnect

  • Added --resource-manager-tags flag to gcloud compute interconnects create to add Resource Manager Tags to resources at creation.
  • Added --resource-manager-tags flag to gcloud beta compute interconnects attachments dedicated create, gcloud beta compute interconnects attachments partner create, and gcloud beta compute interconnects attachments provider create commands to add Resource Manager Tags to resources at creation.

Cloud Run

  • Added a prompt to gcloud run jobs deploy, gcloud run jobs create and gcloud run jobs update to retry deploying a GPU job with --no-gpu-zonal-redundancy flag. This confirmation prompt only shows up when the original deployment enables GPU but does not specify GPU zonal redundancy, and has access to GPU with zonal redundancy disabled.

Cloud SQL

  • Added Customer-managed Active directory CLI flags --active-directory-mode, --active-directory-dns-servers, --active-directory-organizational-unit, --active-directory-secret-manager-key, --clear-active-directory-dns-servers and --clear-active-directory for gcloud sql instances create, gcloud sql instances patch and gcloud sql backups restore to GA.
  • Promoted read pool auto scale flags --auto-scale-enabled, --auto-scale-min-node-count, --auto-scale-max-node-count, --auto-scale-target-metrics, --auto-scale-disable-scale-in, --auto-scale-in-cooldown-seconds, --auto-scale-out-cooldown-seconds to GA track.

Cloud Scheduler

  • Added gcloud scheduler cmek-config and gcloud scheduler operations command groups to GA.

Cloud TPU

  • Remove gcloud compute tpus execution_groups commands for 2VM.
  • Remove gcloud compute tpus commands for Node Architecture.

Compute Engine

  • Added --on-repair-allow-changing-zone flag to gcloud compute instance-groups managed create and gcloud compute instance-groups managed update in beta.
  • Promoted Future Reservations commands to v1.
  • Promoted --full-view flag gcloud compute reservations sub-blocks describe that allow users to see the availability of slices of TPU Hypercomputer reservations within sub-blocks, to beta and v1.
  • Promoted --igmp-query flag in --network-interface component of gcloud compute instances create command to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces update to GA.
  • Promoted enums FIPS_202205 profile and min TLS version 1.3 to GA for SSL Policies.

Database Migration

  • Added --dump-path and --dump-flags flag to gcloud database-migration migration-jobs create command to allow users to supply dump flags for the migration job.
  • Added --dump-path and --dump-flags flag to gcloud database-migration migration-jobs update command to allow users to supply dump flags for the migration job.

Identity and Access Management

  • Added --scim-usage flag to gcloud iam workforce-pools providers create-oidc|update-oidc|create-saml|update-saml commands to support creating and updating providers which use SCIM-managed groups for authorization checks.

Kubernetes Engine

  • Added support for writable cgroups in node pools using --containerd-config-from-file flag.
  • Added --enable-secret-sync, --enable-secret-sync-rotation and secret-sync-rotation-interval in gcloud container cluster create|update commands for public preview.
  • Added --autopilot-workload-policies flag to gcloud container clusters create to allow NET_ADMIN capabilities similar to --workload-policies in create-auto and update.
  • Updated default value of --num-nodes flag in gcloud container node-pools create command when --placement-policy is specified for multi-host TPU machine types. The number of nodes will be calculated by (product of topology)/(# of chips per VM).

Network Security

  • Added --enable-jumbo-frames flag to gcloud network-security firewall-endpoints create to create a firewall endpoint capable of inspecting traffic with jumbo frames.

Oracle Database

  • Added gcloud oracle-database group in GA with the following commands:
    • gcloud oracle-database autonomous-database-backups list command
    • gcloud oracle-database autonomous-databases command group
    • gcloud oracle-database autonomous-db-versions list command
    • gcloud oracle-database cloud-exadata-infrastructures command group
    • gcloud oracle-database cloud-exadata-infrastructures db-servers list
    • gcloud oracle-database cloud-vm-clusters command group
    • gcloud oracle-database cloud-vm-clusters db-system-shapes list command
    • gcloud oracle-database entitlements list command
    • gcloud oracle-database gi-versions list command
    • gcloud oracle-database db-versions list command
    • gcloud oracle-database db-systems command group
    • gcloud oracle-database databases command group
    • gcloud oracle-database pluggable-databases command group
    • gcloud oracle-database database-character-sets list command
    • gcloud oracle-database db-system-initial-storage-sizes list command
    • gcloud oracle-database exadb-vm-cluster command group
    • gcloud oracle-database exascale-storage-vault command group
    • gcloud oracle-database minor-version list command

Security Command Center

  • Updated location argument description with instruction on how to bypass V1 API access errors.

Vmware Engine

  • Added announcements command to gcloud vmware to list maintenance announcements related to upgrades.
  • Added upgrades command to gcloud vmware private-clouds to list and describe schduled upgrades.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

543.0.0 (2025-10-14)

Google Cloud CLI

  • Updated gcloud CLI to support Python v3.14.

Cloud Auth

  • Updated gcloud auth application-default login to include specified scopes in the Application Default Credentials (ADC) file when using --impersonate-service-account flag or auth/impersonate_service_account property. The scopes will be listed in the scopes field of the generated ADC JSON.

Cloud Build

  • Updated gcloud builds submit to allow the use of the field remote_config.

Cloud IAM

  • Added --hard-delete flag to gcloud iam workforce-pools providers scim-tenants delete which allows for the immediate and permanent deletion of a SCIM tenant.

Cloud Interconnect

  • Promoted gcloud compute interconnects cross-site-networks to GA.
  • Promoted gcloud compute interconnects wire-groups to GA.

Cloud Managed Lustre

  • Added IP-based Access Control flags --default-squash-mode, --default-squash-uid, --default-squash-gid, and --access-rules to gcloud lustre instances create and gcloud lustre instances update.

Cloud Memorystore

  • Modified gcloud memcache instances describe to include the tags field in the output.

Cloud Resource Manager

  • Updated gcloud resource-manager tags values create to support Hierarchical Tag Values for GA release.
  • Updated gcloud resource-manager tags values list to support Hierarchical Tag Values for GA release.

Cloud Run

  • Promoted --gpu and --[no-]gpu-zonal-redundancy flags to gcloud run jobs command group.

Cloud TPU

  • Mark gcloud compute tpus execution_groups commands for 2VM as removed.
  • Mark gcloud compute tpus commands for 2VM as removed.

Compute Engine

  • Promoted composite-health-checks in gcloud compute to beta.
  • Promoted health-aggregation-policies in gcloud compute to beta.
  • Removed gcloud compute instances move. See https://cloud.google.com/compute/docs/instances/moving-instance-across-zones for an alternative method.
  • Promoted gcloud compute reservations sub-blocks report-subblock-as-faulty command to beta and v1.
  • Added --no-locality-lb-policy flag in gcloud compute backend-services update.
  • Promoted Cloud Armor gcloud compute org-security-policies commands (including association and rules subcommands) to GA.

Compute Firewall Policies

  • Promoted --policy-type flag to GA in gcloud compute network-firewall-policies create.

Container

  • Added --autoscaled-rollout-policy flag to gcloud container node-pools create to specify Autoscaled Rollout policy options for Blue Green upgrades on the node pool.
  • Added --autoscaled-rollout-policy flag to gcloud container node-pools update to specify Autoscaled Rollout policy options for Blue Green upgrades on the node pool.

Developer Connect

  • Updated gcloud developer-connect insights-configs create and update to support Artifact Configs for gcr.io image URIs.

Kubernetes Engine

  • Added flag option --enable-k8s-tokens-via-dns to gcloud container clusters create,gcloud container clusters create-auto and gcloud container clusters update commands. This flag enables authentication to the cluster's control plane by using KSA tokens, via dns endpoint.
  • Added flag option --enable-k8s-certs-via-dns to gcloud container clusters create,gcloud container clusters create-auto and gcloud container clusters update commands. This flag enables authentication to the cluster's control plane by using client certificates, via DNS endpoint.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

542.0.0 (2025-10-07)

Anthos Multi-Cloud

  • Added --tags flag to gcloud container attached clusters register to attach Tags to the cluster.

Cloud DNS

  • Fix an issue where gcloud dns managed-zones create did not correctly support the --locations flag with DNSSEC configurations. The command now properly handles uppercase enum values for --dnssec-state (ON, OFF, TRANSFER) and KSK/ZSK algorithms.
  • Added support for ALIAS record set type for GA. ALIAS record sets can be created/modified using --type flag in gcloud dns record-sets command group.

Cloud Run

  • Promoted --[no-]deploy-health-check flag to GA for gcloud run deploy and gcloud run services update which disables the deploy-time health check.

Cloud SQL

  • Added PostgreSQL 18 to supported database versions.
  • Promoted --mode flag for gcloud sql instances reset-ssl-config to GA.
  • Promoted --server-ca-mode and --server-ca-pool flags for gcloud sql instances patch to GA.

Cloud Storage

  • Modified gcloud storage diagnose --test-type=DIRECT_CONNECTIVITY to include check for VPC network MTU settings.

Cloud TPU

  • Mark gcloud compute tpus commands for 2VM as deprecated and will be removed in an upcoming release.

Compute Engine

  • Promoted --resource-manager-tags flag in gcloud compute routers create to v1.
  • Promoted health-sources in gcloud compute to beta.
  • Added --full-view flag for alpha to gcloud compute reservations sub-blocks describe to allow users to see the availability of slices of TPU Hypercomputer reservations within sub-blocks.

Compute Firewall Policies

  • Fixed issue where gcloud compute firewall-policies associations delete command returns 'Invalid value' error for valid association name.

Kubernetes Engine

  • Added --unset-membership-type flag to gcloud container cluster update command to update cluster membership type to unspecified.
  • Promoted --membership-type flag in gcloud container cluster create|update commands to GA.

Oracle Database

  • Added gcloud oracle-database group in GA with the following commands:
    • gcloud oracle-database autonomous-database-backups list command
    • gcloud oracle-database autonomous-databases commands group
    • gcloud oracle-database autonomous-db-versions list command
    • gcloud oracle-database cloud-exadata-infrastructures commands group
    • gcloud oracle-database cloud-exadata-infrastructures db-servers list
    • gcloud oracle-database cloud-vm-clusters commands group
    • gcloud oracle-database cloud-vm-clusters db-system-shapes list command
    • gcloud oracle-database entitlements list command
    • gcloud oracle-database gi-versions list command
    • gcloud oracle-database db-versions list command
    • gcloud oracle-database db-systems commands group
    • gcloud oracle-database databases commands group
    • gcloud oracle-database pluggable-databases commands group
    • gcloud oracle-database database-character-sets list commands
    • gcloud oracle-database db-system-initial-storage-sizes list commands

Transfer

  • Promoted --replication flag in transfer jobs create to GA.
  • Promoted --job-type flag in transfer jobs list to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

541.0.0 (2025-09-30)

AI

  • Added --required-replica-count flag to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

BigQuery

  • Added support for reading IAM policies for slots reservations bq get-iam-policy --reservation.
  • Added support for setting IAM policies for slots reservations bq set-iam-policy --reservation.
  • Removed client-side validation for --target_dataset in bq update --transfer_config.
  • Added support for creation of reservation assignments for specific types of background jobs using new job type values BACKGROUND_CHANGE_DATA_CAPTURE, BACKGROUND_COLUMN_METADATA_INDEX, and BACKGROUND_SEARCH_INDEX_REFRESH.
  • Added support for limiting the rate of slot usage for a query job using --max_slots flag (preview).

Cloud Bigtable

  • gcloud bigtable logical-views update command can now be used with either --query flag or --deletion-protection flag, or both.

Cloud Build

  • Use mtls storage endpoint if CLOUDSDK_CONTEXT_AWARE_USE_CLIENT_CERTIFICATE is set to true.

Cloud DNS

  • Fix an issue where gcloud dns managed-zones create did not correctly support the --locations flag with DNSSEC configurations. The command now properly handles uppercase enum values for --dnssec-state (ON, OFF, TRANSFER) and KSK/ZSK algorithms.

Cloud Firestore Emulator

  • Released Cloud Firestore emulator v1.20.2
    • Minor bug fixes.

Cloud Identity-Aware Proxy

  • Updated deprecation warning for gcloud iap oauth-brands and gcloud iap oauth-clients to include a turndown date.

Cloud Managed Kafka

  • Promoted managed kafka connect surface (connect-cluster, connectors) to GA.

Cloud Run

  • Removed --mesh flag from gcloud run alpha worker-pools deploy and gcloud run alpha worker-pools update.

Cloud SQL

  • Added gcloud sql instances pre-check-major-version-upgrade, which performs prechecks for a major version upgrade of a Cloud SQL for PostgreSQL instance.

Cloud Spanner

  • The spanner-cli component is generally available(GA).
  • spanner-cli may be installed with gcloud components install spanner-cli.
  • You can use the Spanner command-line interface to open an interactive session or automate SQL executions from the shell or an input file.

Cloud TPU

  • Mark gcloud compute tpus exeuction-groups commands as deprecated.

Compute Engine

  • Promoted --phase1-encryption, --phase1-integrity, --phase1-prf, --phase1-dh, --phase2-encryption, --phase2-integrity, --phase2-pfs flags in gcloud compute vpn-tunnels create to v1.
  • The gcloud compute instances network-interfaces add command is now generally available (GA).
  • The gcloud compute instances network-interfaces delete command is now generally available (GA).
  • VLAN field support is now available in the GA track for gcloud compute instances create command.
  • VLAN field support is now available in the GA track for gcloud compute instance-templates create command.
  • Promoted --scheduling-type flag in gcloud compute reservations update to GA.
  • Added --view flag to gcloud compute networks subnets describe and gcloud compute networks subnets list to allow users to retrieve the subnetwork utilization.

Kubernetes Engine

  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.15)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.13)
    • kubectl.1.32 (1.32.9)
    • kubectl.1.33 (1.33.5)
    • kubectl.1.34 (1.34.1)
  • Updated gcloud alpha|beta container clusters create|update to support configuring auto-provisioning settings without enabling NAP.

Network Security

  • Promoted gcloud network-security authz-policies to GA.

Privileged Access Manager

  • Added gcloud beta pam grants withdraw command to withdraw a Privileged Access Manager grant.
  • Added support for specifying grant scope via file or resource name in gcloud beta pam grants create.
  • Added gcloud beta pam settings command group which helps manage Privileged Access Manager (PAM) settings.

Service Extensions

  • Promoted gcloud service-extensions authz-extensions to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

540.0.0 (2025-09-23)

Breaking Changes

  • (Cloud Deploy) gcloud deploy apply now has a more strict YAML parser. The old parser would sometimes silently ignore unknown fields in a YAML file. The new parser will reject them with an error message.

  • (Compute Engine) Add --bandwidth-allocation as a required flag for gcloud compute interconnects wire-groups create.

AlloyDB

  • Promoted all Managed Connection Pooling related flags on gcloud alloydb instances create, gcloud alloydb instances create-secondary, and gcloud alloydb instances update to the beta and GA track. The flags that are promoted specifically are:
    • --enable-connection-pooling
    • --connection-pooling-pool-mode
    • --connection-pooling-min-pool-size
    • --connection-pooling-max-pool-size
    • --connection-pooling-max-client-connections
    • --connection-pooling-server-idle-timeout
    • --connection-pooling-query-wait-timeout
    • --connection-pooling-stats-users
    • --connection-pooling-ignore-startup-parameters
    • --connection-pooling-server-lifetime
    • --connection-pooling-client-connection-idle-timeout
    • --connection-pooling-max-prepared-statements

App Engine

Artifact Registry

  • Fixed version annotations field, removed the additionalProperties.

Cloud Build

  • Updated gcloud builds submit to allow remote source in the build config if --no-source flag is specified.

Cloud Location Finder

  • Promoted gcloud cloudlocationfinder command group to GA.

Cloud NetApp

  • Add support for 'cache-parameters' in gcloud netapp volumes create and gcloud netapp volumes update commands.
  • Add support to 'restore-volume' in gcloud netapp volumes restore-backup-files command for GA.

Cloud Run

  • Promoted --max flag to GA for gcloud run deploy and gcloud run services update which sets a maximum bound for instance scaling at the service level.
    • Promoted .env support for --env-vars-file flag for gcloud run deploy from beta to GA.
  • Promoted mount-options key for --add-volume flag with type=cloud-storage to GA for gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs create, and gcloud run jobs update to configure flags for GCSFuse in your cloud storage volumes.

Cloud SQL

  • Added the clear-disk-encryption flag to gcloud sql backups restore operation. If restoring a backup to a project or region that is unique to the one where the source instance is located, then the backup's assigned KMS keys are no longer accessible. This setting lets you clear any existing CMEK configuration.
  • Added gcloud sql instances execute-sql to run a SQL query on a Cloud SQL instance in alpha and beta.

Cloud Storage

  • Fixed gcloud storage ls to correctly list soft-deleted objects when the URL has a trailing slash.
  • Promoted gcloud storage diagnose command to GA.

Cloud Workstations

  • Added support for reservation affinity in beta workstations config create and beta workstations config update command.

Compute Engine

  • The option to deploy a container during VM creation using the container startup agent is deprecated. Use alternative services to run containers on your VMs. Learn more at https://cloud.google.com/compute/docs/containers/migrate-containers.
  • Added --ip-collection flag to gcloud beta compute addresses create command.
  • Added --skip-guest-os-shutdown flag to gcloud compute instances in GA.
  • Promoted Percentage-based Request Mirroring in UrlMaps compute API to v1.

Eventarc

  • Added --organization-subscription and --project-subscriptions in gcloud eventarc google-api-sources.

Identity and Access Management

  • Added a new --sts-location flag to gcloud iam workload pools create-cred-config. This flag enables users to set a locational Security Token Service endpoint, e.g., setting sts-location to us-central1 will point to sts.us-central1.rep.googleapis.com, and thereby regionalize their requests to the Security Token Service API.

Network Security

  • Added command group network-security security-profiles url-filtering and promoted it to beta.
  • Added commands describe, export, import, and list to command group network-security security-profiles and promoted them to beta.
  • Added flag --url-filtering-profile to command network-security security-profile-groups create in the beta track.
  • Moved flag --threat-prevention-profile to a mutex with flag --clear-threat-prevention-profile for command network-security security-profile-groups update in the beta track.
  • Added mutex with flags --url-filtering-profile and --clear-url-filtering-profile to command network-security security-profile-groups update in the beta track.

Pubsub Emulator

  • Fix bug where dead letter queue and retry policy settings are not respected when ordering is enabled on a subscription.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

539.0.0 (2025-09-16)

AI

  • Updated gcloud ai commands to ensure correct endpoint resolution in non-default Google Cloud universes.
  • Added --gpu-partition-size flag to gcloud beta ai endpoints deploy-model for multi-instance GPU partitioning.

Apigee

  • When an Apigee organization name and its Google Cloud project ID are the same, gcloud apigee commands will now automatically use the correct regional endpoint.

App Engine

Cloud Backup DR

  • Promoted gcloud backup-dr service-config command group which includes gcloud backup-dr service-config init to GA.

Cloud Filestore

  • Added psc-endpoint-project option to --network flag of gcloud filestore instances create command.

Cloud Interconnect

  • Promoted --subzone flag of gcloud compute interconnects create to GA.

Cloud Key Management Service

  • Add support for key-encapsulation key purpose and ml-kem-768, ml-kem-1024, and kem-xwing algorithms.
  • Add support for der and xwing-raw-bytes format.
  • Fix bug in get-public-key: when non-pem format is specified, the returned public key should be in raw bytes (not in base-64).
  • Add support for decapsulate.

Cloud Resource Manager

  • Updated gcloud resource-manager tags values create to support Hierarchical Tag Values for beta release.
  • Updated gcloud resource-manager tags values list to support Hierarchical Tag Values for beta release.

Cloud SQL

  • Promoted patch --[clear-]psc-auto-connections flags to GA for PSC service automation.
  • Added --source-instance-deletion-time flag to gcloud sql instances clone, and gcloud sql instances get-latest-recovery-time to support clone from deleted instances.
  • Updated 'cloud-sql-proxy' packaged component to use 2.18.2 of the Cloud SQL Proxy.

Cloud TPU

  • Promoted the --boot-disk flag with the kms-key option to GA for gcloud compute tpus tpu-vm create and gcloud compute tpus queued-resources create.

Compute Engine

  • Promoted --provisioning-model=flex-start to GA for gcloud compute instances create and gcloud compute instance-templates create commands.
  • Promoted --request-valid-for-duration to GA for gcloud compute instances create command.
  • Added SNP_SVSM_CAPABLE to the list of guestOsFeatures.
  • Removed extension specific <extension>-version and <extension>-config flags and added generic '--config' and --version flags for gcloud compute zone-vm-extension-policies create|update commands.

Kubernetes Engine

  • Removed The Kubelet readonly port (10255) is now deprecated warning on gcloud CLI cluster creation unless either the enable-insecure-kubelet-readonly-port or autoprovisioning-enable-insecure-kubelet-readonly-port flags are set.
  • Deprecate flag option --tier in gcloud container clusters create, gcloud container clusters create-auto and gcloud container clustes update commands. Deprecated as GKE Enterprise features are now available without an Enterprise tier. See https://cloud.google.com/kubernetes-engine/docs/release-notes#September_02_2025 for the announcement of this change.
  • Added swapConfig option with enabled, encryptionConfig, bootDiskProfile, ephemeralLocalSsdProfile, and dedicatedLocalSsdProfile fields to gcloud container clusters create, gcloud container node-pools create, andgcloud container node-pools update commands to configure swap space on nodes.

Network Security

  • Updated import and export schemas for gcloud beta network-security security-profile-groups.
  • Updated import and export schemas for gcloud beta network-security security-profiles.

Pubsub Emulator

  • Fix bug that caused non-utf8 data to be incorrectly decoded before being sent to a subscription's push endpoint.

Recommender

  • Update gcloud recommender list insights recursive search feature to beta release target.
  • Update gcloud recommender list recommendations recursive search feature to beta release target.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

538.0.0 (2025-09-09)

AI

  • Updated gcloud ai commands to ensure correct endpoint resolution in non-default Google Cloud universes.

App Auth

  • Fixed an issue where gcloud auth login would potentially fail with external accounts with X.509 federation due to missing client certificates during token introspection. The gcloud CLI will now correctly include client certificates when provided by the credential.

BigQuery

  • Added support for Python user-defined functions in bq show --routine.
  • Added support for users to create dataset with bq mk --source.
  • Fixed the bug where users authenticating with Google Auth using a user-managed service account were unable to query external tables on Google Drive.
  • Added support for managing migration workflows with --migration_workflow in bq mk, bq show, bq rm, bq ls.
  • Removed reservation_max_slots from --alpha flag, and customers can now use the reservation max slots feature without specifying --alpha=reservation_max_slots.

Cloud Run

  • Promoted gcloud run deploy multi-region support to GA.
  • Promoted gcloud run multi-region-services to GA.

Cloud Storage

  • gcloud storage rsync:
    • Fixed issue where --delete-unmatched-destination-objects was deleting destination files even when skipped with (--no-clobber or --skip-unsupported or --skip-if-dest-has-newer-mtime) flags. Now such objects will be retained. The updated behaviour is also gsutil behaviour. This issue can be tracked at https://issuetracker.google.com/406939800.
    • The fix is done through a config property storage/use_gsutil_rsync_delete_unmatched_destination_objects_behavior, which now defaults to True. Set it to False to restore the previous behavior if needed.

Compute Engine

  • Promoted --show-nat-ips flag for gcloud compute service-attachments describe to GA.

Dataproc Metastore

  • Fixed issue where gcloud metastore services query-metadata would attempt to read the incorrect results path.

Kubernetes Engine

  • Updated --max-nodes-per-pool flag upper bound to be 2048.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

537.0.0 (2025-09-03)

AI

  • Added --min-scaleup-period, --idle-scaledown-period, and --initial-replica-count flags to gcloud beta ai endpoints create for scale-to-zero feature. Only configurable when --min-replica-count is set to 0.

AlloyDB

  • Added support for POSTGRES_17 as a version in alloydb clusters create for GA track.
  • Added support for POSTGRES_17 as a version in alloydb clusters migrate-cloud-sql for GA track.
  • Added support for POSTGRES_17 as a target version using alloydb clusters upgrade for GA track.

Cloud Backup DR

  • Promoted gcloud backup-dr backup-plan-revisions list and gcloud backup-dr backup-plan-revisions describe to GA.

  • Added gcloud backup-dr backup-plan-associations fetch-for-resource-type command group to GA track.

Cloud Dataproc

  • Added --identity-config-file, --add-user-mappings, and --remove-user-mappings flags to gcloud dataproc clusters update to allow updating the user to service account mapping.

Cloud Firestore

  • Added --unique flag to gcloud firestore indexes composite create command for supporting unique index creation.

Cloud Functions

  • Modified gcloud beta functions list to list upgrade state.

Cloud Infrastructure Manager

  • Added gcloud infra-manager resource-changes list and gcloud infra-manager resource-changes describe commands to list and describe resource changes within an Infrastructure Manager deployment preview.
  • Added gcloud infra-manager resource-drifts list and gcloud infra-manager resource-drifts describe commands to list and describe resource drifts within an Infrastructure Manager deployment revision.

Cloud Interconnect

  • Promoted gcloud compute interconnects application-awareness get-config to GA.
  • Promoted gcloud compute interconnects application-awareness update to GA.
  • Promoted gcloud compute interconnects application-awareness delete to GA.
  • Promoted gcloud compute interconnects application-awareness configure-bandwidth-percentage-policy to GA.
  • Promoted gcloud compute interconnects application-awareness configure-shaper-average-percentage to GA.
  • Promoted gcloud compute interconnects application-awareness configure-strict-priority-policy to GA.

Cloud Managed Kafka

  • Changed --connect_cluster flag to --connect-cluster for connector commands in alpha.

Cloud Run

  • Added --[no-]gpu-zonal-redundancy, --gpu and --gpu-type flags to gcloud beta run worker-pools command group.

Cloud SQL

  • Added --[no-]final-backup flag and --final-backup-retention-days to gcloud sql instances create, gcloud sql instances patch and gcloud sql backups restore to support setting final backup config in Cloud SQL instance setting.
  • Added --enforce-new-sql-network-architecture flag to gcloud sql instances create, gcloud sql instances patch to explicitly create or update instances in the new network architecture.
  • Promoted --[no-]enable-connection-pooling and --[clear-]connection-pool-flags flags to GA for Managed Connection Pooling GA launch.

Compute Engine

  • Added --resolve-subnet-mask flag for alpha and beta to gcloud compute networks subnets create to allow users to enable resolve subnet mask feature on the subnetwork resource during creation.
  • Added --sap-extension-version and --sap-extension-config flags to gcloud compute zone-vm-extension-policies create|update commands.

Kubernetes Engine

  • Promoted the Secret Manager CSI driver flags ( --enable-secret-manager-rotation and --secret-manager-rotation-interval) to enable rotation feature in secret manager add on to GA.
  • Updated default kubectl from 1.32.4 to 1.33.4.
  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.12)
    • kubectl.1.32 (1.32.8)
    • kubectl.1.33 (1.33.4)

Secure Source Manager

  • Added --psc-allowed-projects argument to gcloud source-manager instances create command.

Vmware Engine

  • Added gcloud vmware private-clouds delete-now which permanently deletes a Google Cloud VMware Engine private cloud currently in soft-deleted state.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

536.0.1 (2025-08-27)

Kubernetes Engine

  • Fixed gcloud container ai profiles commands: benchmarks list, manifests create, and model-server-versions list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

536.0.0 (2025-08-26)

App Engine

  • Updated Cloud CLI Python component to new runtimes for php 8.5 and python 3.14.

Artifact Registry

  • Updated gcloud artifacts files list to display file hashes as hex strings.

Cloud Backup DR

  • Promoted gcloud backup-dr backup-plans update to GA.
  • Promoted gcloud backup-dr backups restore disk to GA.
  • Promoted gcloud backup-dr backup-plan-associations update to GA.

Cloud Bigtable

  • cbt sql has a new (simpler) output table format.

Cloud Managed Kafka

  • Changed the "subject" command group to "subjects".
  • Changed --schema-registry flag to --registry for subjects command group.

Cloud NetApp

  • Added --throughput-mibps flag to gcloud netapp volumes create and gcloud netapp volume update commands.
  • Added --qos-type flag to gcloud netapp storagepools create and gcloud netapp storagepools update commands.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.18.1 of the Cloud SQL Proxy.

Compute Engine

  • Added --resource-manager-tags flag to gcloud compute backend-services create to allow users to add resource tags to the backend bucket during creation.
  • Added --resource-manager-tags flag to gcloud compute backend-buckets create to allow users to add resource tags to the backend bucket during creation.

GKE Hub

  • Promoted disable and describe on gcloud container fleet|hub config-management command group to GA.

Kubernetes Engine

  • Added --membership-type flag to gcloud beta container clusters create|update commands to pass fleet membership type.

  • Promoted gcloud container ai profiles to GA.

Network Services

  • Added --update-strategy flag in gcloud compute networks peerings create and gcloud compute networks peerings update commands.
  • Added a new command gcloud compute networks peerings request-delete.

Secure Source Manager

  • Promoted gcloud source-manager to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

535.0.0 (2025-08-19)

AI

  • Fixed flipped error messages for --min-replica-count and --max-replica-count when used with --shared-resources.

Artifact Registry

  • Added flag --parallelism to gcloud artifacts files download to allow multipart parallel file download.
  • Added flag --parallelism to gcloud artifacts generic download to allow multipart parallel file download.
  • Added flag --parallelism to gcloud artifacts attachments download to allow multipart parallel file download.

Backup For GKE

  • Added --selected-namespace-labels flag to gcloud beta container backup-restore backup-plans create to support namespace label scoped backup plans.
  • Added --selected-namespace-labels flag to gcloud beta container backup-restore backup-plans update to support namespace label scoped backup plans.

Cloud Bigtable

  • cbt CLI now supports sql.
  • cbt CLI now supports samplerowkeys.
  • cbt CLI now supports checkandmutate.
  • cbt CLI now supports readmodifywrite.

Cloud Dataflow

  • Fixed an issue where the environment variable FLEX_TEMPLATE_PYTHON_EXTRA_PACKAGES does not install multiple Python dependencies in Flex Templates.

Cloud Firestore

  • Promoted Cloud Firestore user-creds gcloud CLI changes to GA.
  • Promoted Cloud Firestore connection-string gcloud CLI changes to GA.

Cloud Functions

  • Launched gcloud beta functions upgrade <function> command. This command allows users to upgrade a 1st Gen Cloud Function from Cloud Functions API (cloudfunctions.googleapis.com) to a native Cloud Run function managed by Cloud Run API(run.googleapis.com).

Cloud NetApp

  • Added --qos-type flag to gcloud beta netapp storagepools create and gcloud beta netapp storagepools update commands.
  • Modified --share-name flag of gcloud netapp volumes create command to be optional.
  • Added --cache-parameters flag to gcloud alpha|beta netapp volumes create|update commands.
  • Add support for replication-schedule, hybrid-replication-type, and large-volume-constituent-count fields in --hybrid-replication-parameters flag of gcloud netapp volumes create and gcloud netapp volumes update commands.

Cloud Run

  • Deprecated the flag --allow-unencrypted-build. The customer-managed encryption keys (CMEK) compliance is now available for the build process.
  • Added logic to use high-CPU machines for builds of Cloud Run services opting in to use GPUs when using source-deploy. This feature is in Public Preview.

Cloud SQL

  • Added clear-network flag to gcloud sql backups restore to clear the network when restoring a backup to a different project or region where the original network configuration isn't available.

Compute Engine

  • Support --request-valid-for-duration in alpha for gcloud compute instances create command.
  • Deprecated --router flag of gcloud compute vpn-tunnels create with Classic VPN. Use static routing instead.
  • Deprecated --router flag of gcloud compute vpn-tunnels update with Classic VPN. Use static routing instead.
  • Added --ops-agent-version and --ops-agent-config flags to gcloud compute zone-vm-extension-policies create|update commands.

Database Migration

  • Added --type flag to gcloud database-migration objects lookup command to describe the type of the object. The default type is DATABASE.
  • Added --schema flag to gcloud database-migration objects lookup command to describe the schema of the object.
  • Added --table flag to gcloud database-migration objects lookup command to describe the table of the object.

GKE Hub

  • Added describe to gcloud beta container fleet|hub config-management command group.

Kubernetes Engine

  • Added --enable-default-compute-class flag to gcloud container clusters create|update commands to enable the default compute class.

Parametermanager

  • Added KMS key resource spec to support updating and clearing KMS key resource.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

534.0.0 (2025-08-12)

Breaking Changes

  • (Cloud Machine Learning Engine) Removed gcloud ml-engine command group. Use gcloud ai-platform instead.
  • (Compute Engine) Modified --activation-status flag of gcloud compute preview-features update command to change the allowed value from disabled to unspecified.

Appctl

  • Remove the deprecated appctl component.

Cloud Dataflow

  • Added support for distroless variants for --flex-template-base-image option in gcloud dataglow flex_template build.

Cloud Datastream

  • Added ProjectId field to SourceHierarchyDatasets message in --bigquery-destination-config flag in gcloud datastream streams create command to support BigQuery destination in a different project.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.1
    • Minor bug fix.

Cloud Managed Kafka

  • Released allow-broker-downscale-on-cluster-upscale flag to GA.

Cloud NetApp

  • Added throughput-mibps flag to gcloud beta netapp volumes create and gcloud beta netapp volumes update commands.

Compute Engine

  • Added --target-size-policy-mode flag to gcloud beta compute instance-groups managed create.
  • Added --skip-guest-os-shutdown flag to gcloud compute instances in beta.
  • Added --view flag for beta to gcloud compute networks subnets describe and gcloud compute networks subnets list to allow users to retrieve the subnetwork utilization.

GKE Hub

  • Promoted gcloud container fleet packages to GA.
  • Added --uninstall as well as --memberships and --all-memberships flags to gcloud beta container fleet config-management disable to uninstall or unmanage Config Sync on membership clusters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

533.0.0 (2025-08-05)

AI

  • Updated gcloud ai model-garden models deploy command to allow deploy a model from custom weights.
  • Added asia-south2 option to --region flag of gcloud ai custom-jobs.

BigQuery

  • Fixed a bug where incorrect query parameters are set when --replace_data flag is specified.

Cloud Backup DR

  • Added --access-restriction flag to gcloud backup-dr backup-vaults update to update backup-vault's access restriction.
  • Added --force-update-access-restriction flag to gcloud backup-dr backup-vaults update to force update backup-vault's access restriction even if there are non-compliant data sources.
  • Added --expire-time flag to gcloud backup-dr backups update to update backup's expire time. When updating a backup, at least one of these must be specified: --expire-time or --enforced-retention-end-time.

Cloud Infrastructure Manager

  • Added --tf-version-constraint flag to gcloud infra-manager previews create to specify the Terraform version.

Cloud Managed Kafka

  • Released --mtls-ca-pools and --ssl-principal-mapping-rules flags to GA.

Cloud Run

  • Promoted --scaling flag to GA for gcloud run deploy and gcloud run services update.

Compute Engine

  • Add support for 'FUTURE' disruption schedule option in gcloud CLI for report-host-as-faulty command.
  • Support --provisioning-model for gcloud compute instance-templates create-with-container command.

Kubernetes Engine

  • Added kubelet config options evictionSoft, evictionSoftGracePeriod, evictionMinimumReclaim, and evictionMaxPodGracePeriodSeconds to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which defines the eviction behaviors.
  • Added flag option --HighScaleCheckpointing to add support for enabling the HighScaleCheckpointing CSI Driver.

Network Security

  • Promoted gcloud network-security org-address-groups --purpose field to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

532.0.0 (2025-07-29)

AI

  • Updated gcloud ai model-garden models deploy command to allow deploy a model from custom weights.

BigQuery

  • Fixed a bug where the command would crash for a query in dry run if the resulting job doesn't include statistics about number of bytes processed.

Cloud Backup DR

  • Added backup-retention-inheritance flag to gcloud backup-dr backup-vaults create to specify backup retention inheritance mode during backup vault creation.
  • Added gcloud backup-dr data-source-references command group to GA track.

Cloud IAM

  • Added gcloud iam workforce-pools providers scim-tenants create which creates a new SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens create which creates a new SCIM token associated with a specific workforce identity pool provider tenant.
  • Added gcloud iam workforce-pools providers scim-tenants delete which deletes an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens delete which deletes a SCIM token associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants describe which describes an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens describe which describes a SCIM token associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants list which lists all SCIM tenants associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens list which lists all SCIM tokens associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants undelete which restores a previously-deleted workforce identity pool provider SCIM tenant to an active state.
  • Added gcloud iam workforce-pools providers scim-tenants tokens undelete which restores a previously-deleted workforce identity pool provider SCIM token to an active state.
  • Added gcloud iam workforce-pools providers scim-tenants update which updates an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens update which updates an existing SCIM token associated with a specific workforce identity pool provider.

Cloud SQL

  • Promoted --instance-type and --node-count flags of gcloud sql instances create and gcloud sql instances patch to GA.
  • Updated 'cloud-sql-proxy' packaged component to use 2.18.0 of the Cloud SQL Proxy.
    • Made --skip-failed-instance-config flag available.
  • Added --psc-network-attachment-uri and --clear-psc-network-attachment-uri flags to gcloud sql instances patch to support Private Service Connect OutBound Connectivity for Cloud SQL.

Compute Engine

  • Fixed misleading outputs when reserving and releasing external IPv6 addresses using gcloud compute addresses create and gcloud compute addresses delete.

Container

  • Updated gcloud container clusters list command to display STACK_TYPE by default.

Eventarc

  • Removing one Message Bus and Google Api Source per-project limitation.
  • Promoted gcloud eventarc message-buses, gcloud eventarc enrollments, gcloud eventarc google-api-sources and gcloud eventarc pipelines to GA.

Identity and Access Management

  • Added flags to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers create-saml commands to support creating providers with extended oauth attributes configuration (e.g. --extended-attributes-issuer-uri, --extended-attributes-client-id, --extended-attributes-client-secret-value, --extended-attributes-type, --extended-attributes-filter).
  • Added flags to gcloud iam workforce-pools providers update-oidc and gcloud iam workforce-pools providers update-saml commands to support updating providers with extended oauth attributes configuration (e.g. --extended-attributes-issuer-uri, --extended-attributes-client-id, --extended-attributes-client-secret-value, --extended-attributes-type, --extended-attributes-filter, --clear-extended-attributes-config).

Kubernetes Engine

  • Removed kubectl version 1.27.
  • Added additional kubectl versions:
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.11)
    • kubectl.1.32 (1.32.7)
    • kubectl.1.33 (1.33.3).

Secret Manager

  • Added flag --tags for secrets to attach tags to the secrets while creating.

Security Command Center

  • Added functionality to export Security Command Center findings to bigquery.

Service Extensions

  • Updated import and export schemas for gcloud beta service-extensions authz-extensions.

Workbench

  • Added --enable-managed-euc flag to gcloud beta workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

531.0.0 (2025-07-22)

Google Cloud CLI

  • Updated windows bundled Python for the gcloud CLI to 3.12.10.

AlloyDB

  • Add two new Managed Connection Pooling related flags for users to configure on gcloud alloydb instances create and gcloud alloydb instances update. The new flags are:
    • --connection-pooling-server-lifetime
    • --connection-pooling-client-connection-idle-timeout

BigQuery

  • Added new flag --null_markers for external tables to define the strings that represent NULL values in CSV files.
  • Added support for --source_column_match flag for bq mk --table --external_table_definition and bq mkdef commands.
  • Added support for --reservation_group and --reservation_group_name flags for reservation group feature.

Cloud Dataflow

  • Fixed an issue where the environment variable FLEX_TEMPLATE_PYTHON_EXTRA_PACKAGES does not install Python dependencies in Flex Templates.
  • Added --template-file-gcs-location flag to gcloud dataflow yaml run to support user-defined YAML templates.
  • Added --network and --subnetwork flags to gcloud dataflow yaml run to support specifying network options for Dataflow workers.

Cloud Datastream

  • Added --postgresql-server-certificate-hostname flag to gcloud datastream connection-profiles create command to validate the hostname in the server certificate for SSL connections to PostgreSQL sources.
  • Added --oracle-ca-certificate flag to gcloud datastream connection-profiles create command to create connection with SSL server only verification for Oracle sources.
  • Added --oracle-server-certificate-distinguished-name flag to gcloud datastream connection-profiles create command to validate the server certificate for SSL connections to Oracle sources.
  • Added --postgresql-server-certificate-hostname, --oracle-ca-certificate and --oracle-server-certificate-distinguished-name flags to gcloud datastream connection-profiles update command to support updating the SSL config for PostgreSQL and Oracle sources.

Cloud Interconnect

  • Promoted gcloud compute interconnects application-awareness get-config to beta.
  • Promoted gcloud compute interconnects application-awareness update to beta.
  • Promoted gcloud compute interconnects application-awareness delete to beta.
  • Promoted gcloud compute interconnects application-awareness configure-bandwidth-percentage-policy to beta.
  • Promoted gcloud compute interconnects application-awareness configure-shaper-average-percentage to beta.
  • Promoted gcloud compute interconnects application-awareness configure-strict-priority-policy to beta.

Cloud Run

  • Added --startup-probe flag to gcloud run jobs command group to allow configuring startup probe for a Cloud Run Job.

Cloud Storage

  • Promoted --ip-filter-file flag of gcloud storage buckets create and gcloud storage buckets update to GA.
  • Promoted --clear-ip-filter flag of gcloud storage buckets update to GA.

Compute Engine

  • Added gcloud compute org-security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion in alpha and beta.
  • Added and promoted flags related to tls-settings to GA:
    • --tls-settings of gcloud compute backend-service create.
    • --tls-settings of gcloud compute backend-service update.
    • --no-tls-settings of gcloud compute backend-service update.
  • Added gcloud compute reservations sub-blocks performMaintenance command in beta and v1.
  • Added new new plane 60-month to commitment alpha.
  • Added --resolve-subnet-mask flag for alpha and beta to gcloud compute networks subnets create to allow users to enable resolve subnet mask feature on the subnetwork resource during creation.
  • Added --full-view flag for v1 to gcloud compute reservations blocks describe to allow users to see the full reservation block view.

Config Connector

Container

  • Added --boot-disk-provisioned-iops flag to gcloud container clusters create command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container clusters create command to specify the provisioned throughput on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-iops flag to gcloud container node-pools create command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container node-pools create command to specify the provisioned throughput on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-iops flag to gcloud container node-pools update command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container node-pools update command to specify the provisioned throughput on Hyperdisk Balanced boot disks.

Dataproc Diagnose

  • Added --tarball-gcs-dir flag to gcloud dataproc clusters diagnose to specify the output Cloud Storage directory for the diagnostic tarball.

Migrate to Virtual Machines

  • Remove --suppress-package-installation-failure flag.

Secure Source Manager

  • Shortened gcloud beta source-manager repos create/delete command output to show a status message. The previous output format can be displayed with --format=default.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

530.0.0 (2025-07-15)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.8. The minimum supported Python version is Python 3.9.

App Engine

Cloud Composer

  • Added gcloud composer environments restart-web-server to restart web server for a Cloud Composer environment.

Cloud Dataflow

  • Deprecated JAVA8 from gcloud dataflow flex-template build flex-template-base-image option. Set to JAVA8 now redirects to JAVA11 and will be removed in a future release.
  • Added gcloud dataflow jobs archive command to archive a job.

Cloud Firestore

  • Promoted --tags flag of gcloud firestore databases create and gcloud firestore databases restore command to beta and GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.0
    • Add support for namespace queries.
    • Add support for key queries.
    • Fix bug where entity version behavior differed from production.

Cloud Identity-Aware Proxy

  • Deprecated gcloud iap oauth-brands and gcloud iap oauth-clients commands.

Cloud Managed Kafka

  • Added --delete-mode and --delete-config flags to gcloud managed-kafka schema-registries subject update, which gives users the capability to delete a subject mode and config.

Cloud NetApp

  • Add new gcloud CLI command restore-backup-files for NetApp Volumes.

Cloud Resource Manager

  • Updated --purpose-data flag from gcloud resource-manager tags keys create command with a new value organization.

Cloud Run

  • Added --[no-]gpu-zonal-redundancy flag to gcloud beta run jobs command group to support setting zonal redundancy for Cloud Run Jobs using GPU.

Compute Engine

  • Added gcloud compute org-security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion in alpha and beta.
  • Added and promoted flags related to tls-settings to GA:
    • --tls-settings of gcloud compute backend-service create.
    • --tls-settings of gcloud compute backend-service update.
    • --no-tls-settings of gcloud compute backend-service update.
  • Added gcloud compute reservations sub-blocks performMaintenance command in beta and v1.

Container

  • Add --enable-auto-ipam and --disable-auto-ipam flag to gcloud container clusters create/update to enable/disable automatic IP address management for the cluster.
  • Add --sole-tenant-min-node-cpus flag to gcloud container node-pools create to specify the minimum number of vCPUs that can be used by a sole-tenant node pool.

Database Migration

  • Added gcloud database-migrations conversion-workspaces mapping-rules list.
  • Added support for --database flag in Postgres connection profiles.

Distributed Cloud Edge

  • Added --enable-google-group-authentication flag to gcloud edge-cloud container clusters create command to allow for specifying whether Google Groups authentication is enabled for the cluster.

Kubernetes Engine

  • Added flag option --addons=LustreCsiDriver to add support for enabling/disabling the Lustre CSI Driver on GKE Standard clusters.
  • Added flag option --enable-lustre-csi-driver to add support for enabling the Lustre CSI Driver on GKE Autopilot clusters.
  • Added flag option --enable-legacy-lustre-port to allow the Lustre CSI Driver to initialize LNet (the virtual network layer for the Lustre kernel module) using port 6988.
  • Added kubelet config options maxParallelImagePulls to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which defines the maximum number of image pulls in parallel.
  • Added linux config options transparentHugepageEnabled and transparentHugepageDefrag to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which controls transparent hugepage behavior on the node.
  • Added - -enable-confidential-nodes flag to gcloud container clusters create-auto to allow creation of confidential nodes on GKE Autopilot clusters.

Looker

  • Added --class-type flag to gcloud looker instances create and gcloud looker instances update.
  • Added domains as an option to the --psc-service-attachment flag of gcloud looker instances update to support multiple domains to a single PSC connection.

Network Connectivity

  • Canonicalize --allocation-strategy and --first-available-ranges-lookup-size flags to gcloud network-connectivity internal-ranges create to make use of dashes instead of underscores. This puts them in-line with the documentation.

Network Security

  • Updated import and export schemas for gcloud beta network-security authz-policies.

Network Services

  • Promote --isolation-config-granularity and --isolation-config-mode to GA.

Recaptcha

  • Added integration-type=policy-based-challenge to gcloud recaptcha keys create, and associated options default-score-threshold and action-score-thresholds to gcloud recaptcha keys create and gcloud recaptcha keys update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

529.0.0 (2025-07-01)

Breaking Changes

  • (Cloud Datastore Emulator) Removed support for running the Datastore emulator
  • (Cloud Datastore Emulator) (gcloud beta emulators datastore start) in environment with Java versions
  • (Cloud Datastore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Datastore Emulator) Datastore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Datastore Emulator) versions to continue using the Datastore emulator with
  • (Cloud Datastore Emulator) Java 11 support.
  • (Cloud Firestore Emulator) Removed support for running the Firestore emulator
  • (Cloud Firestore Emulator) (gcloud beta emulators firestore start) in environment with Java versions
  • (Cloud Firestore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Firestore Emulator) Firestore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Firestore Emulator) versions to continue using the previous Firestore emulator with
  • (Cloud Firestore Emulator) Java 11 support.
  • (Compute Engine) Demoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to alpha.
  • (Eventarc) Removed option for --destinations to set network_attachment when http_endpoint_uri is not set.
  • (Network Services) Removed --service-directory-namespace, --service-directory-region, and --service-directory-service flags in gcloud network-services service-bindings create.

AI

  • Added support for the request-counts-per-minute autoscaling metric to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

AlloyDB

  • Fix being able to enable managed connection pooling for the first time when calling gcloud alloydb instances update without having to specify all managed connection pooling related flags.

Anthos Multi-Cloud

  • Added --system-component-tolerations flag to gcloud container attached clusters register to customize Kubernetes tolerations for system components.
  • Added --system-component-labels flag to gcloud container attached clusters register to customize Kubernetes labels for system components.

App Engine

BigQuery

  • Added new flag --external_catalog_table_options in bq mk -t and bq update -t to create and update tables with external catalog options.

Cloud Backup DR

  • Fixed backup-vault create command to return the created resource.
  • Modified backups list command to use basic view by default.

Cloud Managed Kafka

  • Fixed an error where the mode or compatibility being unset would causes the command to fail.
  • Made the output of the commands more readable.
  • Add informative text to the "subject describe" command to inform if the mode/compatibility was inherited from the schema registry.

Cloud Memorystore

  • Promote gcloud redis clusters create CMEK related commands to GA track.
  • Promote gcloud memorystore instances create CMEK related commands to GA track.

Cloud Run

  • Promoted --no-default-url flag to GA for gcloud run services command groups.
  • Promoted .env support for --env-vars-file flag for gcloud run deploy from alpha to beta.
  • Added .env support for --env-vars-file flag for gcloud run jobs deploy.

Cloud Services

  • Promoted gcloud services groups list-expanded-members to beta.

Cloud Storage

  • Updated gsutil component to 5.35.

Compute Engine

  • Promoted --append-licenses, --remove-licenses and --replace-license flags of gcloud compute disks update to beta and GA.
  • Added --enable_emergent_maintenance flag to gcloud compute reservations update.
  • Fixed issue where gcloud compute vpn-gateways list --regions {region} call aggregated list instead of regional list.
  • Fixed issue where gcloud compute vpn-tunnels list --regions {region} call aggregated list instead of regional list.
  • Promoted --resource-manager-tags flag for gcloud compute networks create to GA.
  • Promoted --resource-manager-tags flag for gcloud compute networks subnets create to GA.
  • Promoted --resource-manager-tags flag for gcloudc compute routers create to beta.
  • Fixed an issue where exceptions in gcloud compute instances bulk create with --format flag were not logged.

Eventarc

  • Removed requirement for --destinations to set network_attachment when http_endpoint_uri is set.

Kubernetes Engine

  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.10)
    • kubectl.1.32 (1.32.6)
    • kubectl.1.33 (1.33.2)
  • Added --additional-ip-ranges and --remove-additional-ip-ranges flags to gcloud container clusters update to allow multiple subnets in a cluster.

Looker

  • Added core-trial-standard, core-trial-enterprise, and core-trial-embed options to --edition flag of gcloud looker instances create.

Network Services

  • Added --update-strategy flag in gcloud compute networks peerings create and gcloud compute networks peerings update commands.
  • Added a new command gcloud compute networks peerings request-delete.
  • Support "export" and "import" surfaces for Service Binding resource.
  • Support "update" surface for Service Binding resource.

Policy Simulator

  • Promoted gcloud policy-intelligence simulate to GA.

Security Command Center

  • Added --organization and --location argument flags to gcloud scc posture-deployments list to list scc's posture deployments for organization level.
  • Added vm-manager, ec2-vulnerability-assessment, gce-vulnerability-assessment, azure-vulnerability-assessment, and notebook-security-scanner services to the SUPPORTED_SERVICES list.
  • Added --organization and --location argument flags to gcloud scc posture-templates list to list Cloud Security Command Center posture templates for an organization.

Service Extensions

  • Promoted the following Service Extensions Plugins command groups to GA:
    • gcloud service-extensions wasm-plugins
    • gcloud service-extensions wasm-plugin-versions

Workbench

  • Added gcloud beta workbench instances command group for pre-GA features.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

528.0.0 (2025-06-24)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added support for z3 machine-types.
  • Added support for upgrading AlloyDB clusters to PostgreSQL 17 using gcloud alloydb clusters upgrade in the alpha and beta tracks.

Cloud Managed Kafka

  • Changed --project flag to be optional in the following commands:
    • gcloud managed-kafka schema-registries describe.
    • gcloud managed-kafka schema-registries update.
    • gcloud managed-kafka schema-registries subject describe.
    • gcloud managed-kafka schema-registries subject update.
  • Changed --schema_registry to --schema-registry for subject commands.

Cloud NetApp

  • Add new gcloud CLI command establish-peering for Cache Volumes.
  • Restricted external replication related parameters to the alpha and beta release tracks as feature is in private preview.

Cloud Run

  • Promoted --max flag for gcloud run deploy and gcloud run {services,multi-region-services} update from alpha to beta.
  • Promoted gcloud run worker-pools and gcloud run worker-pools revisions from alpha to beta.

Cloud Spanner

  • spanner-cli binary published as a new Cloud SDK component.
  • spanner-cli may be installed with gcloud components install spanner-cli.
  • spanner-cli starts an interactive shell for spanner.

Compute Engine

  • Promoted --append-licenses, --remove-licenses and --replace-license flags of gcloud compute disks update to beta and GA.
  • Added --enable_emergent_maintenance flag to gcloud compute reservations update.

Metastore

  • Promoted --tags flag of gcloud metastore service and federation create.

Migrate to Virtual Machines

  • Add --adaptation-modifiers flag to support os adaptation modifiers.
  • Add --rootfs-uuid flag to support multiple operating systems found in adaptation.

Network Security

  • Added --purpose flag to gcloud alpha/beta network-security org-address-groups create/update commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

527.0.0 (2025-06-17)

Breaking Changes

  • (GKE Hub) Removed Policy Controller API enablement in gcloud beta|alpha container fleet|hub config-management commands. To use Policy Controller, please refer to gcloud container fleet policycontroller.

AlloyDB

  • Added flag --allocated-ip-range-override to create a Private Services Access instance with a preferred IP range to the following commands in the GA track:
    • gcloud alloydb instances create
    • gcloud alloydb instances create-secondary

Cloud DNS

  • Added GA support for creating forwarding zones with IPv6 and an FQDN forwarding target.

Cloud Data Fusion

  • Promoted --tags flag of gcloud data-fusion instances create.

Cloud Dataplex

  • Added bigquery-publishing-dataset-project field to gcloud dataplex datascans create data-discovery and gcloud dataplex datascans update data-discovery commands.

Cloud Workflows

  • Added environment variable flags to gcloud workflows deploy to support setting, updating, removing, and clearing user-defined environment variables.

Compute Engine

  • Promoted --resource-manager-tags flag for gcloud compute firewall-rules create to GA.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to beta.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances create to beta.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces update to beta.
  • Promoted --resource-manager-tags flag for gcloud compute routes create to GA.

GKE Hub

  • Added a --custom-role flag to gcloud container fleet scopes add-app-operator-binding in beta.
  • Updated gcloud container fleet scopes remove-app-operator-binding and gcloud container fleet scopes list-app-operator-bindings to handle custom roles in beta.

Gemini

  • Added a new flag --enable-data-sharing when creating or updating a DataSharingWithGoogleSetting.

Kubernetes Engine

  • Added --patch-update flag to gcloud container clusters create/update to allow enabling accelerated upgrades.

Security Command Center

  • Added --organization and --location argument flags to gcloud scc postures list to list all the scc postures at organization level.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

526.0.1 (2025-06-10)

Breaking Changes

  • (Cloud Storage) Fixed broken gcloud storage ... commands where grpc import was not found.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

526.0.0 (2025-06-10)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage batch-operations jobs list to include transformation type in the TRANSFORMATION column.

BigQuery

  • Fixed a bug that would sometimes cause a crash when running with Python versions older than 3.9.2.
  • Fixed a bug that would cause a crash when running bq query with --dry_run=true and --rpc=true.

Certificate Authority Service

  • Removed the requirement to enter a project ID when using CAS in gcloud CLI. It is now possible to use project number instead of project ID when using gcloud privateca.

Cloud DNS

  • Add support for DNS64 policies in GA.

Cloud Filestore

  • Added --ldap flag to gcloud v1 filestore instances create.

Cloud Key Management Service

  • Added support for the prehash post-quantum asymmetric signing algorithm HASH-SLH-DSA-SHA2-128s-SHA256.

Cloud Resource Manager

  • Added --allowed-values-regex flag to gcloud resource-manager tags keys update command to allow the user to update the regex of the allowed values under a TagKey.

  • Added --allowed-values-regex flag to gcloud resource-manager tags keys create command to allow the Tag Values shortName confining to the regex getting created during the time of Binding creation.

Cloud Run

  • Promoted --condition flag for gcloud run services {add,remove}-iam-policy-binding from beta to GA.

Cloud Storage

  • Fixed issue where gcloud storage cp|mv|rsync failed the command for (Parallel Composite Upload)[https://cloud.google.com/storage/docs/parallel-composite-uploads] if the storage.buckets.get permissions were missing.

Compute Engine

  • Promoted --phase1-encryption, --phase1-integrity, --phase1-prf, --phase1-dh, --phase2-encryption, --phase2-integrity, --phase2-pfs flags in gcloud compute vpn-tunnels create to beta.

Container

  • Added --alpha-cluster-feature-gates flag to gcloud container clusters create command to specify the feature gates for alpha clusters.

Database Migration

  • Added SQLServer as source engine to gcloud database-migration conversion-workspaces create.
  • Added AlloyDB as destination provider to gcloud database-migration conversion-workspaces create.
  • Added --ssl-flags flag to gcloud database-migration connection-profiles create sqlserver.

Developer Connect

  • Added gcloud developer-connect insights-configs command group. This group allows users to manage Developer Connect Insights Configs and includes commands to create, delete, describe, list, and update these resources.

Network Connectivity

  • Added gcloud beta network-connectivity spokes gateways commands for managing NCC gateway spokes.
  • Added gcloud beta network-connectivity spokes gateways advertised-routes commands for managing routes that attract traffic to NCC gateway spokes.

Network Security

  • Added gcloud network-security secure-access-connect commands which allow customers to establish connections to SSE providers.
  • Updated import and export schemas for gcloud beta network-security authz-policies.

Pubsub Emulator

  • Add support for topic and subscription Single Message Transforms (SMTs).

Security Command Center

  • Added --organization and --location argument flags to gcloud scc posture-deployments list to list scc's posture deployments for organization level.
  • Added vm-manager, ec2-vulnerability-assessment, gce-vulnerability-assessment, azure-vulnerability-assessment, and notebook-security-scanner services to the SUPPORTED_SERVICES list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

525.0.0 (2025-06-03)

Breaking Changes

  • (Cloud Managed Kafka) Included SASL port in bootstrap address on cluster describe and list commands.

AlloyDB

  • Added gcloud alloydb clusters migrate-cloud-sql command to support migrating data from an existing Cloud SQL instance backup to an AlloyDB cluster in GA track.

Cloud Bigtable Emulator

  • Rebuilt cbt emulator with golang.org/x/net version 0.39.0 which fixes CVE-2025-22870.

Cloud Dataplex

  • Promoted gcloud dataplex metadata_jobs commands to GA.

Cloud Dataproc

  • Added tier flag to gcloud dataproc clusters create allowing user to create premium tier or standard tier clusters.

Cloud Managed Kafka

  • Added the sslPrincipalMappingRules as a flag for create and update cluster.

Compute Engine

  • Promoted --load-balancing-scheme flag for gcloud compute backend-buckets create to GA.
  • Added gcloud compute reservations sub-blocks list command in beta and v1.
  • Added gcloud compute reservations sub-blocks describe command in beta and v1.

Compute Firewall Policies

  • Promoted --policy-type flag to beta in gcloud compute network-firewall-policies create.

Database Migration

  • Updated gcloud database-migration connection-profiles create alloydb to support POSTGRES_17 version option for AlloyDB connection profiles.

GKE Hub

  • Promoted --custom-role flag of gcloud container fleet scopes rbacrolebindings to beta and GA.
  • Promoted gcloud container fleet rbacrolebindingactuation commands to beta and GA.
  • add in support for performance-monitoring unit for cluster create and node-pools create.

Network Connectivity

  • Added IPV6 option to --protocol-version flag of gcloud network-connectivity policy-based-routes.

Service Extensions

  • Added gcloud service-extensions lb-edge-extensions command group in beta for managing LbEdgeExtension resources.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

524.0.0 (2025-05-28)

Breaking Changes

  • (Compute Engine) Modified enum value names for 'rollout-plan' flag in gcloud beta compute preview-features update commands.

AlloyDB

  • Added support for POSTGRES_17 as a version in alloydb clusters create for alpha & beta track.
  • Added support for POSTGRES_17 as a version in alloydb clusters migrate-cloud-sql for alpha & beta track.

Cloud Build

  • Updated output format of gcloud builds get-default-service-account.

Cloud Dataplex

  • Promoted gcloud dataplex datascans create data-discovery command to GA.
  • Promoted gcloud dataplex datascans update data-discovery command to GA.

Cloud IAM

Cloud Managed Kafka

  • Promoted existing alpha Schema Registries commands to beta.
  • Added alpha Schema Registries subject describe command for Managed Kafka Schema Registry subjects. This allows a user to see the details of a subject.

Cloud Observability

  • Initial surface for Observability API.

Cloud Run

  • Added support for multi-region source deployment in gcloud beta run deploy.

Cloud Spanner

  • Added --kms-keys flag to gcloud spanner databases update command to support updating Cloud KMS(Key Management Service) keys for Cloud Spanner Customer Managed Encryption(CMEK).

Cloud Workstations

  • Added --no-persistent-storage flag to gcloud workstations config create and gcloud beta workstations config create.

Colab

  • Removed --post-startup-script flag from gcloud notebooks instances create command.

Compute Engine

  • Support --provisoining-model for gcloud compute instance-templates create-with-container command.
  • Added --candidate-cloud-router-ip-address and --candidate-customer-router-ip-address flags for gcloud beta compute interconnects attachments dedicated create, gcloud beta compute interconnects attachments partner create, and gcloud beta compute interconnects attachments provider create to allow users to add custom ranges to the interconnect attachment.
  • Added --candidate-cloud-router-ipv6-address and --candidate-customer-router-ipv6-address flags for gcloud beta compute interconnects attachments dedicated create, gcloud beta compute interconnects attachments partner create, gcloud beta compute interconnects attachments provider create gcloud beta compute interconnects attachments dedicated update, gcloud beta compute interconnects attachments partner update, and gcloud beta compute interconnects attachments provider update to allow users to add custom ranges to the interconnect attachment.
  • Promoted --workload-policy and --remove-workload-policy flags for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update to GA.
  • Support deleting regional PDs with --delete-disks in gcloud compute instance delete.
  • Promoted --zonal-affinity-spillover and --zonal-affinity-spillover-ratio of gcloud compute backend-services create|update commands to beta.
  • Promoted --gpu-topology and --workload-policy to GA.

Gemini

  • Added a new flag --disable-web-grounding when creating or updating a GeminiGcpEnablementSetting.

Network Services

  • Promoted gcloud network-services operations to beta and GA.

Security Command Center

  • Added --organization, --location argument flags to gcloud scc iac-validation-reports list to list scc's iac validation reports for organization level.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

523.0.1 (2025-05-22)

Cloud Datastore Emulator

  • Rolled back prior change which removed support for running the Datastore emulator (gcloud beta emulators datastore start) in environment with Java versions prior to 21. Previously suggested mitigations to address the breaking change were not successful for all users.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

523.0.0 (2025-05-20)

Breaking Changes

  • (Cloud Datastore Emulator) Removed support for running the Datastore emulator
  • (Cloud Datastore Emulator) (gcloud beta emulators datastore start) in environment with Java versions
  • (Cloud Datastore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Datastore Emulator) Datastore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Datastore Emulator) versions to continue using the Datastore emulator with
  • (Cloud Datastore Emulator) Java 11 support.
  • (Cloud Firestore Emulator) Removed support for running the Firestore emulator
  • (Cloud Firestore Emulator) (gcloud beta emulators firestore start) in environment with Java versions
  • (Cloud Firestore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Firestore Emulator) Firestore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Firestore Emulator) versions to continue using the previous Firestore emulator with
  • (Cloud Firestore Emulator) Java 11 support.

AI

  • Added gcloud ai model-garden command group, which supports deploying models in Model Garden.
    • Added gcloud ai model-garden models deploy command to deploy a model from Model Garden.
    • Added gcloud ai model-garden models list command to find models that support deployment.
    • Added gcloud ai model-garden models list-deployment-config command to find supported deployment configurations for each model.
  • Added --list-model-garden-endpoints-only flag to gcloud ai endpoints list command.

AlloyDB

  • Added support for --activation-policy in alloydb instances update for beta & GA track.

Auth Login

  • Fixed gcloud CLI login flow using a client-id file in a no-browser environment. Running gcloud auth application-default login --client-id='...' in a no-browser environment will now execute a working --no-browser flow.

BigQuery

  • Fixed the fallback quota project ID for user accounts when running on Cloud Shell or Google Compute Engine VM.
  • Added new flag --replace_data to bq query and load commands to use write disposition WRITE_TRUNCATE_DATA.
  • Added support for --source_column_match flag for bq load command. When you load CSV files into BigQuery, you can now use this flag to load columns based on header names or column position. This feature is in preview.
  • Added support for Routine ACLs for the IAM commands.
  • Added multiple flags for bq mk and bq mkdef command: --time_zone flag to specify a customized time zone; --date_format, --datetime_format, --time_format and --timestamp_format flags to define how date and time values are formatted in source files.
  • Added support for capacity commitment id in bq mk command.
  • Fixed bug causing invalid json to be produced when running some scripts using bq query --format=json or bq query --format=prettyjson.
  • Improved the performance of retrieving user configs set in Cloud CLI.
  • Added dataset_view to bq show command to allow customers to view dataset's metadata, ACL fields or both.
  • Added update_mode to bq update command to allow customers to update dataset's metadata, ACL fields or both.
  • Added support for --connection_id flag for creating Spanner external datasets.
  • Added new flag --external_catalog_dataset_options in bq mk -d and bq update -d to create and update datasets with external catalog options.

Cloud NetApp

  • Added hot-tier-size andenable-hot-tier-auto-resize flags to gcloud beta netapp storagepools create and gcloud beta netapp storagepools update commands.

Cloud SQL

  • Increased operation wait timeout for gcloud sql instances switchover from 10 minutes to 1 hour.

Cloud Spanner

  • Promoted --instance-partition flag of gcloud spanner operations describe to GA.

Compute Engine

  • Added --enable-display-device flag to gcloud beta compute instance-templates create.
  • Promoted --ncc-gateway flag to beta.

Container

  • If the container.googleapis.com API is not enabled when creating a cluster, the user is asked to enable it and then proceed with creation.

Database Migration

  • Added --global-filter flag to database-migration conversion-workspaces update.

Eventarc

  • Removed requirement for --destinations to set network_attachment when http_endpoint_uri is not set.

Kubernetes Engine

  • Added flag option --anonymous-authentication-config to block (or enable) anonymous access to all paths other than the health check endpoints /readyz, /healthz and /livez.
  • Updated the warning message for node pool upgrade operation.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.13)
    • kubectl.1.31 (1.31.9)
    • kubectl.1.32 (1.32.5)
    • kubectl.1.33 (1.33.1)

Network Connectivity

  • Added --allocation-strategy and --first-available-ranges-lookup-size flags to gcloud network-connectivity internal-ranges create to support refined allocation options for auto-allocated Internal IP Ranges.
  • Fixed misleading doc text for gcloud network-connectivity internal-ranges create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

522.0.0 (2025-05-13)

Anthos

  • anthos-cli component updated to address security tool flags:

    • CVE-2025-22872 / GO-2025-3595

    • CVE-2025-22870 / GO-2025-3503

    • CVE-2025-22870

App Engine

Certificate Authority Service

  • Removed the requirement to specify an organization when creating a Certificate Authority. Users can now create CAs without providing an organization.

Cloud Build

  • Enable REP endpoints for gcloud builds... if a region is passed in.

Cloud Dataplex

  • Promoted gcloud dataplex glossaries commands to GA.
  • Promoted gcloud dataplex encryption-config commands to GA.

Cloud Dataproc

  • Added --user-workload-authentication-type flag to gcloud dataproc batches submit commands in GA. This determines whether the batch uses service account or end user credentials.
  • Added --user-workload-authentication-type flag to gcloud beta dataproc sessions create commands in Preview. This determines whether the session uses service account or end user credentials.

Cloud Deploy

  • Added --override-deploy-policies flag to the following commands which can be used to override deploy policies:
    • gcloud deploy job-runs terminate
    • gcloud deploy releases create|promote
    • gcloud deploy rollouts advance|approve|cancel|ignore-job|reject|retry-job
    • gcloud deploy targets rollback|redeploy

Cloud Managed Kafka

  • Completed minor bug fixes for ACL commands.
  • Promoted ACL commands to GA.
  • Add Alpha Schema Registries commands for Managed Kafka Schema Registry.

Cloud Spanner

  • Promoted --instance-partition flag of gcloud spanner operations cancel to GA.
  • Promoted --instance-partition flag of gcloud spanner operations list to GA.
  • Promoted gcloud spanner instance-partitions update to GA.
  • Promoted gcloud spanner instance-partitions get to GA.
  • Promoted gcloud spanner instance-partitions list to GA.

Cloud Workstations

  • Add support for workstation cluster-level tags fields.

Compute Engine

  • Promoted flags related to external-managed migration to v1:
    • --external-managed-backend-bucket-migration-state of gcloud compute forwarding-rules update.
    • --external-managed-backend-bucket-migration-testing-percentage of gcloud compute forwarding-rules update.
    • --load-balancing-scheme of gcloud compute forwarding-rules update.
    • --external-managed-migration-state of gcloud compute backend-services update.
    • --external-managed-migration-testing-percentage of gcloud compute backend-services update.
    • --load-balancing-scheme of gcloud compute backend-services update.
  • Added --resource-manager-tags flag for alpha and beta to gcloud compute networks create to allow users to add resource tags to the network resource during creation.
  • Added --resource-manager-tags flag for alpha and beta to gcloud compute firewall-rules create to allow users to add resource tags to the firewall resource during creation.
  • Added --resource-manager-tags flag for alpha and beta to gcloud compute networks subnets create to allow users to add Resource Manager tags to the subnetwork resource during creation.
  • Added --resource-manager-tags flag for alpha and beta to gcloud compute routes create to allow users to add resource tags to the route resource during creation.
  • Added CLOUD_ARMOR_INTERNAL_SERVICE type of compute security-policy.
  • Support --provisioning-model=flex-start in beta for gcloud compute instance-templates create command.
  • Added --enable_emergent_maintenance flag to gcloud beta compute reservations update and gcloud beta compute future-reservations update.

Identity and Access Management

  • Make Google Cloud CLI commands to manage X509 provider public and attribute mappings setting for x509 provider optional.

Network Security

  • Promoted the network-security intercept-deployment-groups commands which manage intercept deployment groups to GA.
  • Promoted the network-security intercept-endpoint-groups commands which manage intercept endpoint groups to GA.
  • Promoted the network-security intercept-endpoint-group-associations commands which manage intercept endpoint group associations to GA.
  • Promoted the network-security intercept-deployments commands which manage intercept deployments to GA.
  • Promoted the network-security security-profiles custom-intercept commands which manage custom intercept profiles to GA.
  • Promoted the network-security security-profile-groups create --custom-intercept-profile flag to GA.

Security Command Center

  • Updated location flag with requirements for using regional endpoints.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

521.0.0 (2025-05-06)

Breaking Changes

  • (Compute Engine) Deprecated/removed 128KB choice from --request-body-inspection-size flag
  • (Compute Engine) in gcloud compute security-policies create and in `gcloud compute
  • (Compute Engine) security-policies update`, replaced with other size variants.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.12.9.

AI

  • Fixed an issue in gcloud beta ai model-garden deploy in accelerator quota checking, and returned full quota name in error messages.
  • Added full-resource-name flag to gcloud beta ai model-garden models list.
  • Added table to list deploy and predict capability to gcloud beta ai model-garden models list.
  • Renamed list-supported-hugging-face-models flag to can-deploy-hugging-face-models for gcloud beta ai model-garden models list.

AlloyDB

  • Added flag --psc-auto-connections to create or update instance with Private Service Connect enabled with a list of PSC auto connections to the following commands in the GA track:

    • gcloud alloydb instances create
    • gcloud alloydb instances create-secondary
    • gcloud alloydb instances update

  • Added flag --clear-psc-auto-connections to remove all PSC auto connections from an instance with Private Service Connect enabled to the following commands in the GA track:

    • gcloud alloydb instances update

  • Added the following flags for configuring maintenance deny periods to gcloud alloydb clusters create and gcloud alloydb clusters update in the GA track. The commands include:

    • --deny-maintenance-period-start-date
    • --deny-maintenance-period-end-date
    • --deny-maintenance-period-time
    • --remove-deny-maintenance-period (update only)

BigQuery

  • Added support for --job_timeout_ms flag for bq query command with --rpc.
  • Added error message that --service_account flag is not supported.
  • Added support for --source_column_match flag for bq load command. When you load CSV files into BigQuery, you can now use this flag to load columns based on header names or column position. This feature is in preview.
  • Fixed the local discovery document loading for reservations.
  • Added multiple flags for bq load command: --time_zone flag to specify a customized time zone; --date_format, --datetime_format, --time_format and --timestamp_format flags to define how date and time values are formatted in source files; --null_markers flag to define the strings that represent NULL values in CSV files.
  • Promoted gcloud bq migration-workflows to GA.

Cloud Bigtable

  • Added deletion-protection support for gcloud bigtable logical-views.

Cloud Datastream

  • Support MySQL GTID streams.
  • Added --type=mongodb and associated configuration flags to gcloud datastream connection-profiles create and gcloud datastream streams create which supports the creation of Datastream connection profiles to MongoDB compatible clusters.

Cloud Managed Kafka

  • Completed minor bug fixes for ACL commands.
  • Promoted ACL commands to GA.

Cloud Managed Lustre

  • Added help text example commands to documentation for gcloud lustre.

Cloud NetApp

  • Added alpha support for netapp volume replications.

Cloud SQL

  • Made --custom-subject-alternative-names and --clear-custom-subject-alternative-names flags available for GA.
  • Updated 'cloud-sql-proxy' packaged component to use 2.16.0 of the Cloud SQL Proxy.

Cloud Spanner

  • Promoted gcloud spanner instance-partitions create to GA.
  • Promoted gcloud spanner instance-partitions delete to GA.

Compute Engine

  • Added --source-snapshot-region flag to gcloud beta compute instances create to create instance.
  • Promoted gcloud compute advice calendar-mode command to beta.

Distributed Cloud Edge

  • Added --container-default-runtime-class flag to gcloud edge-cloud container clusters create command to allow for specifying a default container runtime class for the cluster.
  • Added --container-default-runtime-class flag to gcloud edge-cloud container clusters update command to allow for specifying a default container runtime class for the cluster.

Kubernetes Engine

  • Added the kubelet config option singleProcessOomKill to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update commands. This option enables single-process termination on Out of Memory (OOM) events.
  • Added a warning to --labels flag documentation for gcloud container node-pools update indicating node recreation upon update.
  • Updated default kubectl from 1.31.6 to 1.32.4.
  • Adds kubectl for new rapid channel GKE version (1.33.0).
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.12)
    • kubectl.1.31 (1.31.8)
    • kubectl.1.32 (1.32.4)
    • kubectl.1.33 (1.33.0)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

520.0.0 (2025-04-29)

App Engine

Cloud Bigtable

  • Rebuilt cbt cli with golang.org/x/net v0.38.0 which fixed CVE-2025-22870.

Cloud Filestore

  • Modified gcloud filestore regions list and gcloud filestore zones list to limit the number of resources only after filtering the resources for being regions/zones respectively.

Cloud IAM

  • Added the following commands for the Managed Workload Identity feature:

    • gcloud iam workload-identity-pools
    • iam-policy commands
    • --mode, --inline-certificate-issuance-config-file, --inline-trust-config-file flags
    • gcloud iam workload-identity-pools namespaces
    • describe, create, update, delete, undelete, list commands
    • gcloud iam workload-identity-pools managed-identities

Cloud Managed Kafka

  • Added Alpha ACL commands.

Cloud Run

  • Added --regions flag in gcloud beta run deploy, and gcloud beta run multi-region-services.

Compute Engine

  • Added --global-producer-forwarding-rule flag to service attachments.
  • Fixed crash when running gcloud compute reset-windows-password on Windows with Python >= 3.12.
    • Attempting to run this command would result in the following error: "ctypes.ArgumentError: argument 5: TypeError: expected LP_c_ubyte instance instead of c_byte_Array_276".
    • This issue was reported at https://issuetracker.google.com/issues/398776180.
  • Added --snapshot-region flag to gcloud beta compute resource-policies create to create regional snapshots schedule.
  • Added goto-next as an option for --action flag for the following commands:
    • gcloud compute org-security-policies rules create|update.

Database Migration

  • Added --max-concurrent-full-dump-connections, --max-concurrent-cdc-connections, --max-concurrent-destination-connections and --transaction-timeout flags to gcloud database-migration migration-jobs update.

Kpt

Kubernetes Engine

  • Added --confidential-node-type flag to allow creation of confidential nodes of types: sev, sev_snp_tdx.

Network Connectivity

  • Added --immutable flag to gcloud network-connectivity internal-ranges create command.

Security Command Center

  • Added --organization, --project, --folder flags to gcloud scc findings list command to list source's findings for organization, project and folder levels.
  • Added --organization, --project, --folder flags to gcloud scc notifications list to list scc's notification configs for organization, project and folder levels.

Workbench

  • Added --reservation-type,--reservation-key,--reservation-values flags to gcloud workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

519.0.0 (2025-04-22)

Breaking Changes

  • (Container) Remove --enable-tpu --enable-tpu-service-networking --tpu-ipv4-cidr from gcloud container clusters create and gcloud container clusters update.

Cloud Backup DR

  • Added gcloud backup-dr backups update to allow updating the enforced retention time for Backup and DR backups.

Cloud DNS

  • Added alpha and beta support for creating forwarding zones with IPv6 and FQDN forwarding targets.

Cloud Datastream

  • Add gcloud CLI support for PSC Interface Private Connection.

Cloud Filestore

  • Fix LDAP parameters in gcloud beta filestore instances create.

Cloud NetApp

  • Updated gcloud netapp backup-vaults create.
  • Added new options 'replication-schedule', 'hybrid-replication-type' and 'large-volume-constituent-count' to hybrid-replication-parameters in the create volume flow.

Cloud Services

  • Added --service-account flag to gcloud services api-keys create.

Cloud Storage

  • Updated gsutil component to 5.34.

Compute Engine

  • Added gcloud compute reservations blocks list command in v1.
  • Added gcloud compute reservations blocks describe command in v1.
  • Added gcloud compute reservations blocks perform-maintenance command in v1.
  • Added gcloud compute reservations perform-maintenance command in v1.
  • Added --tags flag to the following command:
    • gcloud compute url-maps invalidate-cdn-cache.

Kubernetes Engine

  • Added ability to explicitly disable addons on cluster creation using --addons AddonName=DISABLED or enable using --addons AddonName=ENABLED.

Network Connectivity

  • Update gcloud network-connectivity service-connection-policies update, made --subnets and PSC config subgroup flags optional.

Security Command Center

  • Added --organization, --project, --folder flags to gcloud scc findings list command to list source's findings for organization, project and folder levels.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

518.0.0 (2025-04-15)

Google Cloud CLI

  • Added warning message to indicate Python 3.8 support will be deprecated on July 15, 2025.

App Engine

Artifact Registry

  • Implemented gcloud artifacts go auth for the GOAUTH environment variable introduced in Go 1.24.

Backup For GKE

  • Added the following commands
    • gcloud <alpha|beta> container backup-restore backup-channels create
    • gcloud <alpha|beta> container backup-restore backup-channels delete
    • gcloud <alpha|beta> container backup-restore backup-channels describe
    • gcloud <alpha|beta> container backup-restore backup-channels list
    • gcloud <alpha|beta> container backup-restore backup-channels update to interact with Backup for GKE backup channels.
  • Added the following commands
    • gcloud <alpha|beta> container backup-restore backup-plan-bindings describe
    • gcloud <alpha|beta> container backup-restore backup-plan-bindings list to interact with Backup for GKE backup plan bindings.
  • Added the following commands
    • gcloud <alpha|beta> container backup-restore restore-channels create
    • gcloud <alpha|beta> container backup-restore restore-channels delete
    • gcloud <alpha|beta> container backup-restore restore-channels describe
    • gcloud <alpha|beta> container backup-restore restore-channels list
    • gcloud <alpha|beta> container backup-restore restore-channels update to interact with Backup for GKE restore channels.
  • Added the following commands
    • gcloud <alpha|beta> container backup-restore restore-plan-bindings describe
    • gcloud <alpha|beta> container backup-restore restore-plan-bindings list to interact with Backup for GKE restore plan bindings.

BigQuery

  • Improved authentication performance for service accounts.
  • Added support for --filter flag for bq ls --jobs which supports filtering by job states using the states:<comma separated states> expression.
  • Fixed the failing bq query with flags combination --rpc --reservation=none.

Cloud Backup DR

  • Add deprecation warning for network flag from gcloud backup-dr management-servers create command.

Cloud Bigtable

  • Promoted gcloud bigtable materialized-views create|describe|list|update|delete commands to GA.

Cloud Composer

  • Correct URI values returned with --uri flag by gcloud composer environments list command.
  • Correct URI values returned with --uri flag by gcloud composer operations list command.

Cloud Dataflow

  • Fixed issue reading gcs files when executing YAML pipelines via gcloud dataflow yaml run.
  • Back port --additional-user-labels parameter to Dataflow classic template.

Cloud Filestore

  • Added --ldap flag to gcloud beta filestore instances create.

Cloud Firestore

  • Added a new MONGODB_COMPATIBLE_API to ApiScope field in Firestore index.
  • Added --multikey and --density flags to Firestore index create.
  • Promoted gcloud firestore user-creds to beta.
  • Added gcloud beta databases connection-string which prints the mongo connection string for the given Firestore database.
  • Added --edition flag to gcloud beta databases create to configure database edition during creation.

Cloud Functions

  • Fixed service account impersonation when calling a 2nd Gen function ( functions call with --impersonate-service-account flag).

Cloud Logging

  • Added --monitored-resource-type and --monitored-resource-labels to gcloud logging write.

Cloud Managed Kafka

  • Update subnet help text to reflect one subnet per network.

Cloud Resource Manager

  • Updated gcloud resource-manager tags bindings list to change the backend call from ListTagBinding, ListEffectiveTagBinding RPC to GetTagBindingCollection, GetEffectiveTagBindingCollection RPCs for ALPHA release.

Cloud Run

  • Added a prompt to gcloud run deploy and gcloud run services update commands to retry deploying a GPU service with --no-gpu-zonal-redundancy flag. This confirmation prompt only shows up when the original deployment enables GPU but does not specify GPU zonal redundancy, and the project does not have access to GPU with zonal redundancy enabled but has access to GPU with zonal redundancy disabled.
  • Fixed issue where gcloud run jobs describe would crash if the job has multiple containers.

Cloud Spanner

  • Promoted gcloud spanner databases splits command to GA.

Compute Engine

  • Promoted flags related to the nat64 feature to GA:
    • --nat64-all-v6-subnet-ip-ranges of gcloud compute routers nats (create|update).
    • --nat64-custom-v6-subnet-ip-ranges of gcloud compute routers nats (create|update).
    • --clear-nat64-v6-subnet-ip-ranges of gcloud compute routers nats update.
    • --clear-nat-subnet-ip-ranges of gcloud compute routers nats update.
  • Updated gcloud compute images list to return images from new image projects for Accelerator images: rocky-linux-accelerator-cloud and ubuntu-os-accelerator-images.
  • Added --share-setting flag to gcloud beta compute reservations update.
  • Updated import and export schemas for:
    • gcloud compute backend-services.
  • Promoted support for specific instance names (--instances) in create resize request to beta.

Container

  • Added interactive warning to gcloud container clusters create|update commands when NONE is specified as --logging or --monitoring params.

Database Migration

  • Added --skip-validation flag to gcloud database-migration private-connections create.
  • Added --max-concurrent-full-dump-connections, --max-concurrent-cdc-connections, --skip-full-dump, --oracle-cdc-start-position, --sqlserver-cdc-start-position, --max-concurrent-destination-connections and --transaction-timeout flags to gcloud database-migration migration-jobs create.

Developer Connect

  • Add new account-connector OAuth providers.

Distributed Cloud Edge

  • Added use-google-managed-key and control-plane-kms-key flags to gcloud edge-cloud container clusters update command to support updating KMS key used for control plane disk encryption.
  • Added use-google-managed-key and local-disk-kms-key flags to gcloud edge-cloud container clusters node-pools update command to support updating KMS key used for worker node disk encryption.

Gemini

  • Added gcloud gemini code-tools-settings API.
  • Added gcloud gemini code-tools-settings setting-bindings API.
  • Added gcloud gemini data-sharing-with-google-settings API.
  • Added gcloud gemini data-sharing-with-google-settings setting-bindings API.
  • Added gcloud gemini gemini-gcp-enablement-settings API.
  • Added gcloud gemini gemini-gcp-enablement-settings setting-bindings API.
  • Added gcloud gemini logging-settings API.
  • Added gcloud gemini logging-settings setting-bindings API.
  • Added gcloud gemini release-channel-settings API.
  • Added gcloud gemini release-channel-settings setting-bindings API.

Identity and Access Management

  • Added a new --credential-cert-trust-chain-path flag to gcloud iam workload pools create-cred-config. This flag enables using a trust chain file when configuring X.509 certificate-sourced credentials. This is required if there are intermediate certificates between the root certificate and the leaf certificate.

Kubernetes Engine

  • Added a new command gcloud container clusters get-upgrade-info which returns upgrade information of the given cluster.
  • Added a new command gcloud container node-pools get-upgrade-info which returns upgrade information of the given node pool.
  • Added --enable-secret-manager-rotation and --secret-manager-rotation-interval flag to enable rotation feature in secret manager add on.
  • Added --data-cache-count flag to gcloud container cluster/node-pools create to enable GKE Data Cache.
  • Added --opportunistic-maintenance flag to gcloud container node-pools create for enabling opportunistic maintenance feature.

Network Connectivity

  • Update gcloud network-connectivity internal-ranges create, promoted --exclude-cidr-ranges flag to GA.

Network Security

  • The location flag for the server-tls-policy list command is no longer required, having - (all locations) as a default value.

Security Command Center

  • Added --project, --folder flags to gcloud scc findings list-marks command to list marks of findings for project and folder levels.
  • Added --project, --folder flags to gcloud scc findings update command to update finding for project and folder levels.
  • Added --project, --folder flags to gcloud scc findings update-marks command to update marks of findings for project and folder levels.

Transfer

  • Add option s3-cloudfront-domain to command gcloud transfer jobs.

Workbench

  • Added --confidential-compute-type flag to gcloud workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

517.0.0 (2025-04-01)

AlloyDB

  • Fix the following flags to actually update an AlloyDB instance on subsequent alloydb instances update calls:
    • --connection-pooling-pool-mode
    • --connection-pooling-min-pool-size
    • --connection-pooling-max-pool-size
    • --connection-pooling-max-client-connections
    • --connection-pooling-server-idle-timeout
    • --connection-pooling-query-wait-timeout
    • --connection-pooling-stats-users
    • --connection-pooling-ignore-startup-parameters

Cloud Bigtable

  • Promoted gcloud bigtable logical-views create|describe|list|update|delete commands to GA.

Cloud Dataflow

  • Added support for --additional-pipeline-options flag to gcloud dataflow flex-template run" command to support common runtime pipeline option assignments.
  • Fixed potential TypeError when executing YAML pipelines via gcloud dataflow yaml run

Cloud Datastream

  • Added BlmtConfig to --bigquery-destination-config in gcloud datastream streams create commands to support BigLake Managed Tables (BLMT).

Cloud Deploy

Cloud Firestore

  • Promoted gcloud firestore bulk-delete command to GA.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap settings --resource-type=cloud-run and gcloud iap web ***-iam-policy --resource-type=cloud-run to beta.

Cloud Memorystore

  • Promote gcloud redis clusters backup feature related commands to GA track.

Cloud Resource Manager

  • Added gcloud resource-manager tags bindings update to update the tags attached to the resource with the help of UpdateTagBindingCollection RPCs for ALPHA release.

Cloud Run

  • Added --[no-]iap flag to beta service command groups to allow enabling and disabling IAP.
  • Promoted --container flag to GA for gcloud run jobs command groups.
  • Promoted --[no-]gpu-zonal-redundancy flag to GA for gcloud run deploy and and gcloud run services update commands.
  • Fixed URLs displayed on multi-region-services replace success.

Cloud SQL

  • Added gcloud support for integrating Vertex AI with Cloud SQL for MySQL instances.

Compute Engine

  • Promoted --provisoining-model=RESERVATION_BOUND to v1 for gcloud compute instances create, gcloud compute instances bulk create, and gcloud compute instance-templates create commands.
  • Added --external-ipv6-prefix flag to gcloud beta compute networks subnets create and gcloud beta compute networks subnets update.
  • Added --external-ipv6-prefix flag to gcloud compute networks subnets create and gcloud compute networks subnets update.
  • Added --workload-policy flag to gcloud beta compute instance-groups managed create.

Compute Firewall Policy Rules

  • Promoted --src-network-type flag of gcloud compute firewall-policies rules to beta.
  • Promoted --dest-network-type flag of gcloud compute firewall-policies rules to beta.
  • Promoted --src-network-type flag of gcloud compute network-firewall-policies rules to beta.
  • Promoted --dest-network-type flag of gcloud compute network-firewall-policies rules to beta.
  • Promote gcloud compute firewall-policies export-rules to GA.
  • Promote gcloud compute firewall-policies import-rules to GA.
  • Promote gcloud compute network-firewall-policies export-rules to GA.
  • Promote gcloud compute network-firewall-policies import-rules to GA.

Compute OS Config

  • Promoted gcloud os-config policy-orchestrators to GA.

Developer Connect

  • Add account-connectors group.

Kubernetes Engine

Memorystore

  • Add gcloud memorystore backup feature related commands.

Parametermanager

  • gcloud parametermanager [beta] is now publicly available.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

516.0.0 (2025-03-25)

Breaking Changes

AlloyDB

  • Fix --no-enable-connection-pooling to actually disable the managed connection pooling feature in alloydb instances update.

BigQuery

  • Promoted gcloud bq migration-workflows to beta.

Cloud Datastream

  • Update Datastream schema files.
  • Support secret manager stored passwords.
  • Add support for PSC Interface Private Connection.

Cloud Interconnect

  • Promoted the LINK_TYPE_ETHERNET_400G_LR4 value of the compute interconnects create --link_type flag to GA.

Cloud Resource Manager

  • Updated gcloud resource-manager tags bindings list to change the backend call from ListTagBinding, ListEffectiveTagBinding RPC to GetTagBindingCollection, GetEffectiveTagBindingCollection RPCs for ALPHA release.

Cloud Run

  • Promoted --gpu and --gpu-type flags to GA for gcloud run deploy and gcloud run services update commands.
  • Added --(no)-gpu-zonal-redundancy flag to gcloud beta run deploy and gcloud beta run services update commands to allow setting zonal redundancy for Cloud Run Services using GPU.
  • Added --gpu and --gpu-type flags to gcloud beta run jobs command group to allow creating and updating Cloud Run Jobs using GPU.

Cloud Storage

  • Promoted gcloud storage batch_operations group to GA.

Compute Engine

  • Added and promoted flags related to tls-settings to beta:
    • --tls-settings of gcloud compute backend-service create.
    • --tls-settings of gcloud compute backend-service update.
    • --no-tls-settings of gcloud compute backend-service update.
  • Add report-host-as-faulty command to gcloud compute instances.
  • Promoted --action-on-vm-failed-health-check flag of compute instance-groups managed create and compute instance-groups managed update to beta.
  • Added workload-policy creation using gcloud beta compute resource-policies create workload-policy.
  • Promoted flags related to custom-metrics to v1:
    • --custom-metrics of gcloud compute backend-service create.
    • --custom-metrics-file of gcloud compute backend-service create.
    • --custom-metrics of gcloud compute backend-service update.
    • --custom-metrics-file of gcloud compute backend-service update.
    • --clear-custom-metrics of gcloud compute backend-service update.
    • --custom-metrics of gcloud compute backend-service add-backend.
    • --custom-metrics-file of gcloud compute backend-service add-backend.
    • --custom-metrics of gcloud compute backend-service update-backend.
    • --custom-metrics-file of gcloud compute backend-service update-backend.
    • --clear-custom-metrics of gcloud compute backend-service update-backend.

Database Migration

  • Added --database, --host and --port flags to gcloud database-migration connection-profiles create sqlserver and gcloud database-migration connection-profiles update.
  • Added --ca-certificate flag to gcloud database-migration connection-profiles create sqlserver.
  • Updated gcloud database-migration connection-profiles create sqlserver to support connectivity methods for SQL Server connection profiles.

Eventarc

  • Added --update-labels, --remove-labels, --clear-labels in gcloud eventarc google-channels update.

GKE Hub

  • Added support for overriding Deployment resource requests and limits to gcloud beta container fleet config-management apply through the new deploymentOverrides field in --config flag file.

Kubernetes Engine

  • Added --flex-start flag to gcloud container node-pools create|update commands to indicate the node pool should use Flex Start provisioning model.

Network Connectivity

  • Fixed the issue that the user needs to set both --include-export-ranges and --exclude-export-ranges when they run gcloud network-connectivity spokes linked-vpc-network update and gcloud network-connectivity spokes linked-producer-vpc-network update commands.

SaaS Runtime

  • Added gcloud beta saas-runtime command group.

Security Command Center

  • Added cloud-run-threat-detection service to the SUPPORTED_SERVICES list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

515.0.0 (2025-03-18)

AI

  • Added gcloud beta ai model-garden command group, which supports deploying models in Model Garden.
    • Added gcloud beta ai model-garden models deploy command to deploy a model from Model Garden.
    • Added gcloud beta ai model-garden models list command to find models that support deployment.
    • Added gcloud beta ai model-garden models list-deployment-config command to find supported deployment configurations for each model.
  • Added --list-model-garden-endpoints-only flag to gcloud beta ai endpoints list command.

AlloyDB

  • Added support for --machine-type in gcloud alloydb instances create and gcloud alloydb instances update commands.

Artifact Registry

  • Added gcloud artifacts attachments describe command.

Certificate Manager

  • The default value of the location flag for the list commands is changed from global to - (all locations) for all Certificate Manager resources that support both global and regional locations.

Cloud IAM

  • Fixed example commands for gcloud iam roles undelete.
  • Fixed example commands for gcloud iam roles update.

Cloud Managed Kafka

  • Add Alpha Connectors and Connect-Clusters commands for Managed Kafka Connect.

Cloud NetApp

  • Updated gcloud netapp backup-vaults create.

Cloud Run

  • Promoted --startup-probe and --liveness-probe flags to GA in gcloud run deploy and gcloud run services update.

Cloud SQL

  • Added --[no-]retain-backups-on-delete flag to gcloud sql instances create and gcloud sql instances patch to support retaining backups after instance delete for Cloud SQL.
  • Promoted --server-ca-pool flag of gcloud sql instances create to GA for creation of instances using customer-managed CAS server CA.
  • Added --[no-]enable-connection-pooling flag togcloud sql instances createandgcloud sql instances patch` to support enabling connection pooling for Cloud SQL instance.
  • Added --[clear-]connection-pool-flags flag togcloud sql instances createandgcloud sql instances patch` to support adding or clearing connection pooling pool configuration flags for Cloud SQL instance.
  • Added --storage-provisioned-iops and --storage-provisioned-throughput flags to gcloud sql instances create, gcloud sql instances patch and gcloud sql backups restore to support storage performance provisioning while creating / patching a Cloud SQL instance or while restoring a backup.

Cloud Spanner

  • Added support for WITH_STATS and WITH_PLAN_AND_STATS query modes in gcloud spanner databases execute-sql.

Compute Engine

  • Promoted gcloud compute instances report-host-as-faulty to beta and GA.
  • Added --gpu-topology support to gcloud compute resource-policies create.
  • Added --ip-port-dynamic-routing support to gcloud compute backend-services create/update alpha and beta.
  • Added --ip-collection flag to gcloud beta compute networks subnets create and gcloud beta compute networks subnets update.
  • Added --ip-collection flag to gcloud compute networks subnets create and gcloud compute networks subnets update.
  • Support --mode=external-ipv6-subnetwork-creation in gcloud beta compute public-delegated-prefixes create and gcloud beta compute public-delegated-prefixes delegated-sub-prefixes create commands.
  • Support --mode=external-ipv6-subnetwork-creation in gcloud compute public-delegated-prefixes create and gcloud compute public-delegated-prefixes delegated-sub-prefixes create commands.
  • Added support for gcloud connect_to_serial_port to read auto host keys.
  • Added COUNT option to --local-ssd flag of gcloud compute reservations create to support specifying the number of local-ssd to attach.

Kubernetes Engine

  • Added --auto-monitoring-scope flag to gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update for standard or autopilot clusters.

Network Connectivity

  • Added gcloud network-connectivity hubs accept-spoke-update and gcloud network-connectivity hubs reject-spoke-update commands.
  • Added --exclude-export-ranges flag to gcloud network-connectivity spokes linked-vpc-network update and gcloud network-connectivity spokes linked-producer-vpc-network update commands.
  • Added --producer-instance-location and --allowed-google-producers-resource-hierarchy-level to gcloud network-connectvity service-connection-policies update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

514.0.0 (2025-03-11)

Artifact Registry

  • Added visibility for previously hidden flags --output-iam-policy-dir, --input-iam-policy-dir, --skip-pre-copy, and --use-analyze-iam in gcloud artifacts docker upgrade migrate.
  • Added --remote-go-repo for Go Modules Remote Repositories.

Cloud Filestore

  • Add the peer-instance parameter to support the API promote replica API from the active instance.

Cloud Identity-Aware Proxy

  • Promote cloud-run resource-type support for IAP CLI to beta.

Cloud Managed Kafka

  • Added gcloud managed-kafka operations describe and gcloud managed-kafka operations list commands for viewing operations in releases alpha and beta.
  • Promoted gcloud managed-kafka operations to GA.

Cloud NetApp

  • Added custom-performance-enabled, total-throughput and total-iops flags to gcloud beta netapp storagepools create and gcloud beta netapp storagepools update commands.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use v2.15.1 of the Cloud SQL Proxy.

Cloud Storage

  • Promoted gcloud storage buckets anywhere-caches group to GA.

Compute Engine

  • Promoted gcloud compute disk-settings to beta.
  • Promoted gcloud compute snapshot --region --kms-key to beta.
  • Promote regional snapshot settings related commands to beta.
  • Promoted --reservation-sharing-policy flag of gcloud beta compute reservations create and gcloud beta compute reservations update to GA.
  • Promoted gcloud compute future-reservations DWS flags to beta.

Parametermanager

  • [ALPHA] To create a Parameter Version, file can be uploaded using the new flag payload-data-from-file.

Policy Intelligence

  • Added gcloud beta policy-intelligence group which provides beta level access to the policy intelligence commands.

Security Command Center

  • Added vm-threat-detection-aws service to the SUPPORTED_SERVICES list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

513.0.0 (2025-03-04)

AlloyDB

  • Added option for --cpu-count=1 in gcloud alloydb instances create and gcloud alloydb instances update commands.

Batch

  • Promoted Batch cancel job command from alpha to beta and GA.

BigQuery

  • Added support for --set_label and --clear_label flags for reservation updates.
  • Fixed a bug where Google Auth credentials of a user account would sometimes fail to refresh.
  • Fixed a bug where long-running queries created from a service account would fail after one hour.

Cloud Dataflow

  • Added the ability to create Beam YAML templates via gcloud flex-template build.
  • Added support for --update and --transform-name-mappings flags to gcloud dataflow jobs run command to support update for streaming classic template jobs.

Cloud Datastream

  • Update Datastream schema files.
  • Support Salesforce source connection profile.
  • Support Salesforce source stream.

Cloud Workflows

  • Added --tags flag to gcloud workflows deploy.

Colab

  • Added support for Post startup script (PSS) and environment variables.

Compute Engine

  • Promote --host-error-timeout-seconds to GA. This option allows you to specify the timeout duration in seconds for host error detection in the following commands:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
    • gcloud compute instances bulk create
    • gcloud compute instances set-scheduling
    • gcloud compute instances update-from-file
  • Add defaultCustomErrorResponsePolicy to gcloud compute url-maps edit.
  • Promoted gcloud compute routers add-route-policy to GA.
  • Promoted gcloud compute routers add-route-policy-term to GA.
  • Promoted gcloud compute routers download-route-policy to GA.
  • Promoted gcloud compute routers get-route-policy to GA.
  • Promoted gcloud compute routers list-bgp-routes to GA.
  • Promoted gcloud compute routers list-route-policies to GA.
  • Promoted gcloud compute routers remove-route-policy to GA.
  • Promoted gcloud compute routers remove-route-policy-term to GA.
  • Promoted gcloud compute routers update-route-policy-term to GA.
  • Promoted gcloud compute routers upload-route-policy to GA.
  • Promoted --import-policies and --export-policies flags of gcloud compute routers add-bgp-peer and gcloud compute routers update-bgp-peer to GA.
  • Restricted limit to 1000 results for the following command:
    • gcloud compute url-maps invalidate-cdn-cache.
  • Support --provisioning-model=flex-start in beta for gcloud compute instances create and gcloud compute instance-templates create commands.

Dataproc Metastore

  • Added --encryption-kms-keys flag to gcloud metastore services create beta release track to support multiregional Dataproc Metastore with Customer-managed encryption keys.

Eventarc

  • Allowed using project numbers in command arguments.

Kubernetes Engine

  • Added --[no-]enable-autopilot-compatibility-auditing flag to gcloud container clusters update for enabling and disabling Autopilot Compatibility Auditing feature. Only applicable to clusters with version >= 1.32.
  • Updated default kubectl from 1.30.9 to 1.31.6.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.13)
    • kubectl.1.30 (1.30.10)
    • kubectl.1.31 (1.31.6)
    • kubectl.1.32 (1.32.2)

Migrate to Virtual Machines

  • Add --boot-conversion flag to support BIOS_TO_EFI conversion.

Network Connectivity

  • Updated gcloud network-connectivity internal-ranges create to allow specifying the exclude Cidr Ranges option.

Network Security

  • Added --antivirus flag to gcloud network-security security-profiles threat-prevention add-override|update-override|delete-override commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

512.0.0 (2025-02-25)

Breaking Changes

  • (Cloud Dataflow) Removed gcloud dataflow sql command group. See Beam YAML and Beam notebooks for alternatives.
  • (Harbourbridge) Removed deprecated harbourbridge component. Use spanner-migration-tool instead.

App Engine

Artifact Registry

  • Allowed using project numbers instead of ids for gcloud artifacts docker upgrade migrate.

Certificate Authority Service

  • Added --custom-aia-urls flag to gcloud privateca roots create and gcloud privateca subordinates create commands.
  • Added --custom-cdp-urls flag to gcloud privateca roots create and gcloud privateca subordinates create commands.

Cloud Bigtable

  • Added support for Data Boost in gcloud bigtable app-profiles.

Cloud Build

  • Added support for specifying source manifest JSON file as argument for source in gcloud builds submit command.
  • Fixed bug in which source is not displayed in builds list if source is a Git repo, 2nd-gen Cloud Build repo, or Developer Connect GitRepositoryLink.
  • Fixed bug in which gcloud builds commands ignore the default region set via builds/region config.

Cloud Identity-Aware Proxy

  • Promote Forwarding-rule resource-type support for IAP CLI to GA.

Cloud Interconnect

  • Promoted interconnects related commands to beta.
  • Promoted additional interconnects related commands to beta.

Cloud Key Management Service

  • Added a new field public_key_format to specify the format the public key is going to be exported.
  • Added support for two post-quantum asymmetric signing algorithms ML-DSA-65 and SLH-DSA-SHA2-128s.

Cloud On Demand Scanning

  • Monthly release of local-extract with updated package dependencies (2025-02).

Cloud Run

  • Removed roles/run.builder IAM Role check for default Cloud Build Service Account when users are doing gcloud run deploy --source.

Cloud SQL

  • Added tde file type option to gcloud sql import and gcloud sql export commands to allow importing and exporting Transparent Data Encryption (TDE) certificates in Cloud SQL for SQL Server.
  • Added --keep-encrypted flag to gcloud sql import bak command to allow an imported database to remain encrypted in Cloud SQL for SQL Server.
  • Added --include-replicas-for-major-version-upgrade flag to gcloud sql instances patch command. This flag can be used with database-version flag to specify that replicas need to be upgraded with the primary.

Network Security

  • Promoted gcloud network-security security-profile custom-mirroring to GA track.
  • Promoted gcloud network-security security-profile-groups create --custom-mirroring-profile flag to GA track.
  • Added --antivirus flag to gcloud beta network-security security-profiles threat-prevention add-override|update-override|delete-override commands.

Workbench

  • Added gcloud beta workbench schedules create.
  • Added gcloud beta workbench schedules pause.
  • Added gcloud beta workbench schedules resume.
  • Added gcloud beta workbench schedules describe.
  • Added gcloud beta workbench schedules update.
  • Added gcloud beta workbench schedules delete.
  • Added gcloud beta workbench schedules list.
  • Added gcloud beta workbench executions command group.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

511.0.0 (2025-02-19)

Breaking Changes

  • (Google Cloud CLI) Removed explicit use of true/false values in --user-output-enabled flag.
  • (Container) Fixed missing KeyError when parsing the ~/.kube/config file. File is now
  • (Container) recreated from scratch when such a corrupted entry
  • (Container) is found in it. This is a breaking change as recreating the config may cause
  • (Container) entries for already authenticated contexts to be lost.

Google Cloud CLI

  • Fixed issue where gcloud auth login was broken when mTLS was enabled over the legacy SecureConnect self-signed workflow.

AlloyDB

  • Added --database-flags to the list of optional flags for create-secondary instance command.

Backup For GKE

  • Added command gcloud beta container backup-restore operations list to list Backup for GKE operations.
  • Added command gcloud beta container backup-restore operations describe to describe Backup for GKE operations.

BigQuery

  • Updated --max_staleness and --metadata_cache_mode flag descriptions for bq update to mention their dependency on --external_table_definition flag.
  • Added support for setting --apilog flag to a directory and not just a file.
  • Added validation for when --api flag has no protocol prefix.
  • Updated the default CA certificate.
  • Fixed bug where windows line endings would print tables incorrectly.

Cloud Build

  • Added support for specifying source manifest JSON file as argument for source in gcloud builds submit command.
  • Fixed bug in which source is not displayed in builds list if source is a Git repo, 2nd-gen Cloud Build repo, or Developer Connect GitRepositoryLink.

Cloud Composer

  • Added --airflow-database-retention-days to gcloud composer environments create/update to specify database retention days.

Cloud DNS

  • Added GA support for creating health-checked routing policies in public zones. Use --health-check to indicate that all IP addresses should be health checked.

Cloud Functions

  • Promoted gcloud functions detach to GA.

Cloud IAM

  • Added --extra-attributes-client-id flag to gcloud iam workforce-pools providers create-saml and gcloud iam workforce-pools providers update-saml which allow user to setup client id for extra attributes oauth2 flow.
  • Added --extra-attributes-client-secret-value flag to gcloud iam workforce-pools providers create-saml and gcloud iam workforce-pools providers update-saml which allow user to setup client secret for extra attributes oauth2 flow.
  • Added --extra-attributes-issuer-uri flag to gcloud iam workforce-pools providers create-saml and gcloud iam workforce-pools providers update-saml which allow user to setup issuer uri for extra attributes oauth2 flow.
  • Added --extra-attributes-type flag to gcloud iam workforce-pools providers create-saml and gcloud iam workforce-pools providers update-saml which allow user to setup attributes type for extra attributes oauth2 flow.
  • Added --extra-attributes-filter flag to gcloud iam workforce-pools providers create-saml and gcloud iam workforce-pools providers update-saml which allow user to setup filter for extra attributes oauth2 flow.
  • Added --clear-extra-attributes-config flag to gcloud iam workforce-pools providers update-saml which allow user to clear extra attributes oauth2 config.
  • Added azure-ad-groups-id field to --extra-attributes-type flag to gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc which allow user to setup attributes type for extra attributes oauth2 that fetches azure ad group id property.

Cloud Key Management Service

  • Promoted gcloud kms autokey-config which helps users update and retrieve the Autokey Config.
  • Promoted gcloud kms key-handles which helps users create and retrieve key-handles.

Cloud Memorystore

  • Add gcloud memorystore locations list and gcloud memorystore locations describe to list and describe locations for Memorystore for Valkey.

Cloud Pub/Sub

  • Added flags to gcloud pubsub topics create for creating Cloud Pub/Sub Azure Event Hubs Import Topics.
    • Added --azure-event-hubs-ingestion-resource-group
    • Added --azure-event-hubs-ingestion-namespace
    • Added --azure-event-hubs-ingestion-event-hub
    • Added --azure-event-hubs-ingestion-client-id
    • Added --azure-event-hubs-ingestion-tenant-id
    • Added --azure-event-hubs-ingestion-subscription-id
    • Added --azure-event-hubs-ingestion-service-account
  • Added flags to gcloud pubsub topics update for updating Cloud Pub/Sub Azure Event Hubs Import Topics.
    • Added --azure-event-hubs-ingestion-resource-group
    • Added --azure-event-hubs-ingestion-namespace
    • Added --azure-event-hubs-ingestion-event-hub
    • Added --azure-event-hubs-ingestion-client-id
    • Added --azure-event-hubs-ingestion-tenant-id
    • Added --azure-event-hubs-ingestion-subscription-id
    • Added --azure-event-hubs-ingestion-service-account
  • Added flags to gcloud pubsub topics create for creating Cloud Pub/Sub AWS MSK Import Topics.
    • Added --aws-msk-ingestion-cluster-arn
    • Added --aws-msk-ingestion-topic
    • Added --aws-msk-ingestion-aws-role-arn
    • Added --aws-msk-ingestion-service-account
  • Added flags to gcloud pubsub topics update for updating Cloud Pub/Sub AWS MSK Import Topics.
    • Added --aws-msk-ingestion-cluster-arn
    • Added --aws-msk-ingestion-topic
    • Added --aws-msk-ingestion-aws-role-arn
    • Added --aws-msk-ingestion-service-account
  • Added flags to gcloud pubsub topics create for creating Cloud Pub/Sub Confluent Cloud Import Topics.
    • Added --confluent-cloud-ingestion-bootstrap-server
    • Added --confluent-cloud-ingestion-cluster-id
    • Added --confluent-cloud-ingestion-topic
    • Added --confluent-cloud-ingestion-identity-pool-id
    • Added --confluent-cloud-ingestion-service-account
  • Added flags to gcloud pubsub topics update for updating Cloud Pub/Sub Confluent Cloud Import Topics.
    • Added --confluent-cloud-ingestion-bootstrap-server
    • Added --confluent-cloud-ingestion-cluster-id
    • Added --confluent-cloud-ingestion-topic
    • Added --confluent-cloud-ingestion-identity-pool-id
    • Added --confluent-cloud-ingestion-service-account

Cloud Run

  • Promoted the following source deploy configuration flags from beta to GA to support the GA release of Cloud Run functions: --build-env-vars, --function, --base-image, --automatic-updates, --build-worker-pool, and --build-service-account.
  • Added --regions, --add-regions, and --remove-regions support to gcloud beta run multi-region-services replace.

Cloud SQL

  • Added --tags flag to gcloud sql instances create to support creating instances with tags.
  • Added --custom-subject-alternative-names flag to support customer-specified DNS names in SSL certificates for Cloud SQL instances.
  • Added support for using backup names in gcloud sql backups describe, gcloud sql backups delete and gcloud sql backups list and made --instance flag as optional.
  • Added --[no-]enable-final-backup flag to gcloud sql instances delete to create a final backup and retain it after instance deletion.
  • Added --final-backup-description flag to gcloud sql instances delete to add a description to identify final backup when user opted in to create final backup using --enable-final-backup.
  • Added --final-backup-expiry-time flag to gcloud sql instances delete to specify the exact expiry time of the final backup.
  • Added --final-backup-retention-days flag to gcloud sql instances delete to specify the number of days from now to retain the final backup.
  • Added new command gcloud sql instances patch with flags --backup-description, --ttl-days, --expiry_time to update the final backups.
  • Added support in gcloud sql backups restore to restore to new instance with flags: --assign-ip, --network, --authorized-networks, --enable-google-private-path, --availability-type, --backup, --backup-location, --backup-start-time, --collation, --cpu, --database-version, --enable-bin-log, --enable-point-in-time-recovery, --maintenance-release-channel, --maintenance-window-day, --maintenance-window-hour, --deny-maintenance-period-start-date, --deny-maintenance-period-end-date, --deny-maintenance-period-time, --insights-config-query-insights-enabled, --insights-config-query-string-length, --insights-config-record-application-tags, --insights-config-record-client-address, --insights-config-query-plans-per-minute, --memory, --password-policy-min-length, --region, --zone, --secondary-zone, --require-ssl, --retained-backups-count, --retained-transaction-log-days,--storage-auto-increase, --storage-size, --storage-type, --tier, --t, --edition, --disk-encryption-key, --active-directory-domain, --audit-bucket-path, --audit-retention-interval, --audit-upload-interval, --deletion-protection, --time-zone, --connector-enforcement, --timeout, --enable-private-service-connect, --allowed-psc-projects, --enable-data-cache, --ssl-mode, --enable-google-ml-integration, --enable-dataplex-integration.

Cloud Storage

  • Added gcloud storage buckets relocate to GA.

Cloud Workflows

  • Added the execution-history-level flag to gcloud workflows deploy|execute|run to enable execution history level.

Compute Engine

  • Promoted ADVANCED_PREVIEW option for --network-ddos-protection flag of gcloud compute security-policies update to GA.
  • Updated --interconnect-attachments support for single interconnect-attachment in gcloud compute vpn-gateways create.

Compute Firewall Policy Mirroring Rules

  • Promoted gcloud compute network-firewall-policies mirroring-rules to GA.
  • Updated gcloud compute network get-effective-firewalls to include mirroring rules (in GA).
  • Updated gcloud compute instances network-interfaces get-effective-firewalls to include mirroring rules (in GA).
  • Updated gcloud compute network-firewall-policies get-effective-firewalls to include mirroring rules (in GA).

Developer Connect

  • Added flag --git-proxy-config-enabled to gcloud developer-connect connections create and gcloud developer-connect connections update commands.

GKE Hub

  • Fixed issue where gcloud container fleet policycontroller enable didn't enable the Policy Controller Feature after membership level enablement.
  • Added a flag --location to gcloud (alpha|beta) container fleet memberships list to allow list memberships in a specific location.

Kubernetes Engine

  • Updated default value of --num-nodes flag in gcloud container node-pools create command when --tpu-topology is specified for multi-host TPU machine types. The number of nodes will be calculated by (product of topology)/(# of chips per VM).

Looker

  • Promoted gcloud looker backups to GA.
  • Promoted gcloud looker instances restore to GA.

Model Armor

  • Fixed an issue in floorsettings update command where new floorsettings was not being updated.

Network Security

  • Promoted the network-security mirroring-endpoint-group-associations commands which manage mirroring endpoint group associations to GA.
  • Promoted the network-security mirroring-endpoint-groups commands which manage mirroring endpoint groups to GA.
  • Promoted the network-security mirroring-deployments commands which manage mirroring deployments to GA.
  • Promoted the network-security mirroring-deployment-groups commands which manage mirroring deployment groups to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

510.0.0 (2025-02-11)

Breaking Changes

  • (Cloud Storage) Enforced a maximum duration of 12 hours for --duration flag of gcloud storage sign-url command when using a system-managed key. This limit has been always enforced by the backend.

Google Cloud CLI

  • Updated MacOS Python Virtualenv for the gcloud CLI to 3.12.8.

AlloyDB

  • Added migrate-cloud-sql command to support migrating data from an existing Cloud SQL instance backup to an AlloyDB cluster in beta track.
  • Added gcloud alloydb clusters import command to support importing data to an AlloyDB cluster from Google Cloud Storage.

Anthos

  • anthos-cli component updated to address CVEs flagged by scanning tools:
    • golang updated to 1.23.5
    • golang.org/x/net to 0.34.0 (CVE-2024-45338)
    • golang.org/x/crypto to 0.32.0 (CVE-2024-45337)
    • github.com/golang/glog to 1.2.4 (CVE-2024-45339)

Cloud Dataflow

  • Added --cloud-build-service-account flag to gcloud dataflow flex-template build for specifying the Cloud Build service account to build the image.

Cloud Deploy

  • Added IAM policy commands to gcloud deploy deploy-policies.

Cloud Monitoring

  • Added --criteria-filter flag to gcloud monitoring snoozes create to support snoozing alert policies by resource labels.

Cloud Run

  • Added roles/run.builder IAM policy check for default build service account when users are doing source deploy with gcloud beta run deploy --source.
  • Verified whether build service account provided in gcloud beta run deploy --build-service-account or default build service account is active.

Cloud SQL

  • Add --custom-subject-alternative-names flag to support customer-specified DNS names in SSL certificates for Cloud SQL instances.

Cloud Services

  • Added --service-account flag to gcloud beta services api-keys create.

Cloud Spanner

  • Add target_database_move_configs to gcloud spanner instances move command for beta and GA track.

Cloud Storage

  • Removed S3 support is unstable warning from gcloud storage commands.

Cloud Workstations

  • Added support updating --pd-disk-size and pd-disk-type in the workstations config update command.

Compute Engine

  • Promoted the INTERNAL_IPV6_RANGE output field in gcloud compute networks create and gcloud compute networks list to Beta/GA.
  • Added --tags flag to the following command:
    • gcloud beta compute url-maps invalidate-cdn-cache.

Compute Firewall Policy Mirroring Rules

  • Updated gcloud compute network get-effective-firewalls to include mirroring rules (in beta).
  • Updated gcloud compute instances network-interfaces get-effective-firewalls to include mirroring rules (in beta).
  • Updated gcloud compute network-firewall-policies get-effective-firewalls to include mirroring rules (in beta).

GKE Hub

  • Added gcloud container fleet mesh update --config-api to GA which sets up configuration API for service mesh.
  • Enable gcloud container fleet XXX describe and gcloud container fleet features list to return partial results when a google cloud region is unavailable, instead of returning an error.

Model Armor

  • Promoted model_armor command group to GA.

Workbench

  • Added --container-repository and --container-tag to gcloud workbench instances update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

509.0.0 (2025-02-04)

Google Cloud CLI

  • Updated windows bundled Python for the gcloud CLI to 3.12.8.
  • Updated openssl version in bundled Python to 3.0.15.
  • Updated Linux bundled Python for the gcloud CLI to 3.12.8.

Cloud Functions

  • Launched gcloud beta functions detach <function> command. This command allows users to detach a Cloud Run function from Cloud Functions API (cloudfunctions.googleapis.com) and make it a native Cloud Run function managed by Cloud Run API(run.googleapis.com).

Cloud NetApp

  • Added gcloud netapp volumes quota-rules create.
  • Added gcloud netapp volumes quota-rules describe.
  • Added gcloud netapp volumes quota-rules list.
  • Added gcloud netapp volumes quota-rules update.
  • Added gcloud netapp volumes quota-rules delete.
  • Added gcloud beta netapp volumes quota-rules create.
  • Added gcloud beta netapp volumes quota-rules describe.
  • Added gcloud beta netapp volumes quota-rules list.
  • Added gcloud beta netapp volumes quota-rules update.
  • Added gcloud beta netapp volumes quota-rules delete.

Cloud Run

  • Promoted --scaling flag from alpha to gcloud beta run deploy and gcloud beta run services update.

Cloud SQL

  • Added HDB option to --storage-type flag of gcloud sql instances create and gcloud sql instances patch commands to allow choosing Hyperdisk as a storage type.

Cloud Storage

  • Added --lifecycle-file flag to gcloud storage buckets create.

Cloud Workstations

  • Added support for --ssh-flags in the workstations ssh command.

Compute Engine

  • Enabled error message extraction for more use cases of quota exceeded error.
  • Added --commitment-name flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --commitment-plan flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --previous-commitment-terms flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Promoted Tls Settings to Beta/GA in gcloud compute backend-services import and gcloud compute backend-services export.
  • Added gcloud compute reservations perform-maintenance command in beta.
  • Added gcloud compute reservations blocks perform-maintenance command in beta.
  • Added MAX_VMS field to gcloud compute sole-tenancy node-types list.
  • Deprecated --router flag of gcloud compute vpn-tunnels create with Classic VPN. Use static routing instead.
  • Deprecated --router flag of gcloud compute vpn-tunnels update with Classic VPN. Use static routing instead.
  • Fix "compute instances perform-maintenance" to have a error message related to perform maintenance.

Compute Firewall Policy Mirroring Rules

  • Promoted --target-secure-tags flag of gcloud compute network-firewall-policies mirroring-rules create to beta.
  • Promoted --target-secure-tags flag of gcloud compute network-firewall-policies mirroring-rules update to beta.

Database Migration

  • Updated gcloud database-migrate migration-jobs create to allow users the option of migrating all databases for PSQL to AlloyDB migrations.
  • Updated gcloud database-migrate migration-jobs update to allow users the option of migrating all databases for PSQL to AlloyDB migrations.

Developer Connect

  • Added flags for Bitbucket Data Center and Bitbucket Cloud connection types to gcloud developer-connect connections create|update commands.

Network Services

  • Added etag field to the following resources: HttpRoute, TcpRoute, TlsRoute, GrpcRoute.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

508.0.0 (2025-01-28)

AlloyDB

  • Added flag --keep-extra-roles to keep extra database roles when creating or setting database roles for an existing user.

App Engine

Backup For GKE

  • Added command gcloud beta container backup-restore operations list to list Backup for GKE operations.

Cloud DNS

  • Add support for DNS64 policies.

Cloud Dataflow

  • Added launcher_machine_type parameter to gcloud dataflow flex-template run to support to specify the machine type to use for launching the flex template job.

Cloud Datastream

  • Added --postgresql-ca-certificate flag to gcloud datastream connection-profiles create commands to create connection with SSL server only verification for PostgreSQL source.
  • Added --postgresql-ca-certificate, --postgresql-client-certificate and --postgresql-client-key flags to gcloud datastream connection-profiles create commands to create connection with SSL server and client verification for PostgreSQL source.
  • Added --postgresql-ca-certificate flags to gcloud datastream connection-profiles update commands to update SSL server only verification config for PostgreSQL source.
  • Added --postgresql-ca-certificate, --postgresql-client-certificate and --postgresql-client-key flags and support for PostgreSQL profile to gcloud datastream connection-profiles update commands to update SSL config for server and client verification for PostgreSQL source.
  • Fixed gcloud datastream objects list command with SQL Server source.

Cloud Filestore

  • Added --performance flag to gcloud filestore instances create.
  • Added --performance flag to gcloud filestore instances update.
  • Added --performance flag to gcloud beta filestore instances create.
  • Added --performance flag to gcloud beta filestore instances update.

Cloud Key Management Service

  • Added gcloud beta kms autokey-config which helps users update and retrieve the Autokey Config.
  • Added gcloud beta kms key-handles which helps users create and retrieve key-handles.

Cloud On Demand Scanning

  • Monthly release of local-extract with updated package dependencies (2025-01).

Cloud Resource Manager

  • Updated gcloud resource-manager tags keys create to require the organization ID in purpose-data=organization=<org-id>.

Cloud Spanner

  • Add target_database_move_configs to gcloud spanner instances move command for ALPHA track.

Compute Engine

  • Added tls-ja4-fingerprint as valid rate limit key types in gcloud compute security-policies rules.
  • Promoted IPv6-only stack type support for gcloud compute instances create-with-container and gcloud compute instance-templates create-with-container to GA.

Database Migration

  • Added sub-entity support to gcloud database-migration conversion-workspaces describe-entities command.
  • Added --ssl-type flag to gcloud database-migration connection-profiles create command for PostgreSQL and MySQL.
  • Added --ssl-type flag to gcloud database-migration connection-profiles update command for PostgreSQL and MySQL.

Kubernetes Engine

  • Updated default kubectl from 1.30.8 to 1.30.9.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.13)
    • kubectl.1.30 (1.30.9)
    • kubectl.1.31 (1.31.5)
    • kubectl.1.32 (1.32.1)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

507.0.0 (2025-01-22)

Breaking Changes

  • (Cloud Run) Removed gcloud run integrations command group.

Anthos Multi-Cloud

  • Added --disable-cloud-monitoring flag to gcloud container attached clusters register and gcloud container attached clusters update for disabling cloud monitoring.
  • Added --enable-cloud-monitoring flag to gcloud container attached clusters register and gcloud container attached clusters update for enabling cloud monitoring.

BigQuery

  • Updated certain authentication error messages to mention running gcloud auth login --enable-gdrive-access instead of gcloud auth login when Drive access is required.
  • Added support for loading the Cloud CLI api_endpoint_overrides/bigquery config value into api if the flag was not set.
  • Added support for loading the Cloud CLI core/api_key config value into bigquery_discovery_api_key if the flag was not set.
  • Added retrieval of the user's active Cloud CLI account name when authenticating using Cloud CLI credentials.
  • Fixed the bug where users authenticating with Google Auth using a service account were unable to query external tables on Google Drive.
  • Updated --enable_gdrive flag description to mention its interaction with --use_google_auth.
  • Handled crash when the server returns out of bounds timestamps.
  • Bundled a reservation discovery doc to be loaded locally instead of always making a server request to retrieve one.

Cloud Bigtable

  • Rebuilt cbt cli with golang.org/x/net version 0.33.0 which fixed CVE-2024-45338.

Cloud Bigtable Emulator

  • Rebuilding cbt emulator with golang.org/x/net version 0.33.0 which fixed CVE-2024-45338.

Cloud NetApp

  • Added gcloud netapp storage-pools validate-directory-service.

Cloud Spanner

  • Update edition flag help text for gcloud spanner instances update saying downgrade is supported.

Cloud Workstations

  • Promoted --source-workstation flag of gcloud workstations create to GA.

Compute Engine

  • Promoted Tls Early Data UNRESTRICTED enum value to GA in gcloud compute target-https-proxies import and gcloud compute target-https-proxies export.

Database Migration

  • Added --cloudsql-project-id flag to gcloud database-migration connection-profiles create sqlserver command.

Developer Connect

  • Hid the Bitbucket Data Center and Bitbucket Cloud connection types.

Kubernetes Engine

  • Added kubelet config options allowedUnsafeSysctls to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which allows unsafe sysctls to be set on Pods.
  • Added kubelet config options containerLogMaxSize and containerLogMaxFiles to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which controls maximum size of container logs before rotation and maximum number of log files for a container.
  • Added kubelet config options imageGcLowThresholdPercent and imageGcHighThresholdPercent to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which controls disk usage percentage triggering image garbage collection.
  • Added kubelet config options imageMinimumGcAge and imageMaximumGcAge to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which controls the minimum and maximum age an image can be unused before it is garbage collected.
  • Added --max-run-duration flag to gcloud container node-pools create and gcloud container node-pools update to limit the runtime of nodes in a node pool.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

506.0.0 (2025-01-14)

Artifact Registry

  • Updated gcloud artifacts files describe to display file hashes as hex strings.

Cloud Bigtable

  • Update golang.org/x/net version for CVE-2024-45338.
  • Add update value type support.

Cloud Logging

  • Updated gcloud logging buckets update to accept --folder, --organization and --billing-account flags in addition to --project.

Cloud NetApp

  • Added tiering_policy parameter to --destination-volume-parameters flag in gcloud netapp volumes replications create command.

Cloud Run

  • Removed --base-image and --clear-base-image flags for gcloud beta run services update command.

Cloud Spanner

  • Promote autoscaling flag options for gcloud spanner instances create and gcloud spanner instances update commands for GA.

Cloud Workstations

  • Adding support for disabling local host replacement in the beta workstations configs create and beta workstations configs update commands.
  • Adding support for specifying source_snapshot when creating or updating configs.

Compute Firewall Policy Rules

  • Added --src-secure-tags and --target-secure-tags to gcloud compute firewall-policies rules create/update commands.

Database Migration

  • Added --page-size with a default page size of 100, and other list-related flags to gcloud database-migration conversion-workspaces describe-entities|describe-ddls|describe-issues commands.
  • Added --cloudsql-project-id flag to gcloud database-migration connection-profiles update command.
  • Added --databases-filter flag to gcloud database-migration migration-jobs create command to filter the databases to be migrated.
  • Added --databases-filter flag to gcloud database-migration migration-jobs update command to filter the databases to be migrated.
  • Added --databases-filter flag to gcloud database-migration migration-jobs promote command to filter the databases to be promoted.
  • Added --databases-filter flag to gcloud database-migration migration-jobs restart command to filter the databases to be restarted.
  • Added gcloud database-migration migration-jobs fetch-source-objects command to fetch the objects present in the source for a migration job.
  • Added --restart-failed-objects flag to gcloud database-migration migration-jobs restart command to restart the failed objects in a migration job.
  • Added gcloud database-migration objects list command to list the objects being migrated in a migration job.
  • Added gcloud database-migration objects lookup command to describe a specific object in a migration job.

Network Management

  • Added --bypass-firewall-checks flag to gcloud network-management connectivity-tests to allow executing Connectivity Tests in a mode that skips firewall checking.

Secure Source Manager

  • Added gcloud source-manager repos command group to beta.

Workbench

  • Added --tags flag to gcloud workbench instances update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

505.0.0 (2025-01-07)

AlloyDB

  • Added flag --enable-connection-pooling to enable/disable Managed Connection Pooling.
  • Added flag --connection-pooling-pool-mode to configure pooling mode.
  • Added flag --connection-pooling-min-pool-size to configure min pool size.
  • Added flag --connection-pooling-max-pool-size to configure max pool size.
  • Added flag --connection-pooling-max-client-connections to configure max client connections.
  • Added flag --connection-pooling-server-idle-timeout to configure server connection idle timeouts.
  • Added flag --connection-pooling-query-wait-timeout to configure query wait timeouts.
  • Added flag --connection-pooling-stats-users to configure database users with access to stats.
  • Added flag --connection-pooling-ignore-startup-parameters to configure startup parameters to ignore.

Cloud Build

  • Rewrote flag descriptions for --worker-disk-size in gcloud builds worker-pools.

Cloud Composer

  • Fixed --uri flag behavior for gcloud composer environments list command.
  • Fixed --uri flag behavior for gcloud composer operations list command.

Cloud Filestore

  • Removed MAX_IOPS column from gcloud beta filestore instances list and gcloud filestore instances list.

Cloud Identity-Aware Proxy

  • Modified acceptable argument types for gcloud iap settings to support backend-services.

Cloud Run

  • Added build with lifecycle binary support when project.toml is not provided to gcloud beta run deploy.
  • Promoted --base-image and --clear-base-image flags for gcloud beta run services update command.
  • Added support for customer-managed encryption keys (CMEK) for source-based deployments in the beta track.

Cloud Workstations

  • Adding support for disabling local host replacement in the beta workstations configs create and beta workstations configs update commands.

Compute Engine

  • Added --require-specific-reservation flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --reservation-name flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --deployment-type flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --scheduling-type flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Support --provisioning-model=reservation-bound in beta for gcloud compute instances create, gcloud compute instances bulk create, and gcloud compute instance-templates create commands.
  • Added CA_ENTERPRISE_ANNUAL as an additional option for --cloud-armor-tier of gcloud compute project-info update.
  • Added CAMP_PLUS_ANNUAL as an additional option for --managed-protection-tier of gcloud compute project-info update.
  • Promoted Standby Policy flags for gcloud compute instance-groups managed create to v1.
  • Promoted Standby Policy flags for gcloud compute instance-groups managed update to v1.
  • Promoted gcloud compute instance-groups managed suspend-instances to v1.
  • Promoted gcloud compute instance-groups managed resume-instances to v1.
  • Promoted gcloud compute instance-groups managed stop-instances to v1.
  • Promoted gcloud compute instance-groups managed start-instances to 1.
  • Added --project-number flag to gcloud beta compute org-security-policies associations create.
  • Added 100g as an additional option for --bandwidth of gcloud compute interconnects attachments dedicated create and gcloud compute interconnects attachments dedicated update.

Database Migration

  • Added --role flag to gcloud database-migration connection-profiles create.
  • Fixed an issue where gcloud database-migration connection-profiles update would not update correctly --ca-certificate or --database-service flags for oracle connection profiles.

GKE Hub

  • Fixed a bug in gcloud beta container fleet config-management unmanage when sending empty payload would fail validation. This was introduced in Google Cloud CLI version 498.0.0.
  • Added gcloud container fleet policycontroller enable --no-content flag to install managed Policy Controller without any constraint template libraries.

Gcloud Machines List

  • Changed default output of gcloud edge-cloud container machines list commands to include purpose (what type of cluster the machine is being used for).

Identity and Access Management

  • Added etag flag for gcloud beta iam policies update command. The command will use the etag in the policy file if the etag flag is not specified.

Kubernetes Engine

  • Improved error handling of long running operation polling.

Network Management

  • Added gcloud network-management vpc-flow-logs-configs command group which manages the VPC Flow Logs configurations.
  • Added --round-trip flag to gcloud network-management connectivity-tests to allow executing Connectivity Tests in round-trip mode that calculates return traces from the destination to the source in addition to traces from the source to the destination.

Network Security

  • Added --description flag to network-security intercept-deployments create and update commands.

Workbench

  • Added --enable-third-party-identity flag to gcloud workbench instances create.
  • Added NVIDIA_H100_80GB and NVIDIA_H100_MEGA_80GB option to --accelerator-type flag of gcloud workbench instances create and gcloud workbench instances update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

504.0.1 (2024-12-19)

Google Cloud CLI

  • Rebuilt gcloud with certifi 2024.08.30 which fixed CVE-2024-39689.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

504.0.0 (2024-12-17)

AlloyDB

  • Added export command to support exporting data from an AlloyDB cluster to Google Cloud Storage.

BigQuery

  • Fixed the bug where quota project ID would default to the resource project ID for an active service account from Cloud CLI used for authentication.
  • Added --reservation_id=none to the query command to enforce on-demand job execution.
  • Added --bigquery_discovery_api_key to allow specifying an API key when making a discovery request.

Cloud Bigtable

  • Changed the default retention period from 3d to 7d when automated backup is enabled using --enable-automated-backup flag in gcloud bigtable instances tables create and gcloud bigtable instances tables update.
  • Added --automated-backup-retention-period flag to gcloud bigtable instances tables create and gcloud bigtable instances tables update commands which can be used to configure the retention period for automated backup.

Cloud Storage

  • Updated gsutil component to 5.33.

Compute Engine

  • Added --request-body-inspection-size for gcloud compute security-policies update, and promoted it to beta.
  • Promoted gcloud compute network-profiles list and describe to v1.
  • Promoted --network-profile in gcloud compute networks create to v1.

Kubernetes Engine

  • Added --disable-l4-lb-firewall-reconciliation flag to gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update to disable reconciliation for VPC firewalls targeting ingress traffic for L4 Load Balancer Services.
  • Updated default kubectl from 1.30.6 to 1.30.8.
  • Added new kubectl version 1.32.0
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.12)
    • kubectl.1.30 (1.30.8)
    • kubectl.1.31 (1.31.4)
    • kubectl.1.32 (1.32.0)

Migrate to Virtual Machines

  • Promoted gcloud migration vms machine-image-imports commands to GA.

Network Security

  • New flag to add description for Intercept Endpoint Group in create and update commands.
  • Added gcloud network-security security-profiles custom-intercept commands to create Custom Intercept Security Profiles.
  • Added --custom-intercept-profile flag to gcloud network-security security-profile-groups create to associate a Custom Intercept SP to an SPG.

Network Services

  • Added gcloud network-services route-views list.

  • Added gcloud network-services route-views describe.

Service Extensions

  • Added per extension metadata field to the DEP extensions.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

503.0.0 (2024-12-10)

Breaking Changes

  • (Colab) Remove deprecated gcloud colab beta runtimes assign. Please use gcloud colab beta runtimes create instead.
  • (Eventarc) Deprecated --labels from gcloud eventarc triggers update. Use --update-labels, --remove-labels, --clear-labels in gcloud eventarc triggers update instead.
  • (Eventarc) Deprecated --labels from gcloud beta eventarc message-buses update. Use --update-labels, --remove-labels, --clear-labels in gcloud beta eventarc message-buses update instead.
  • (Eventarc) Deprecated --labels from gcloud beta eventarc google-api-sources update. Use --update-labels, --remove-labels, --clear-labels in gcloud beta eventarc google-api-sources update instead.

AlloyDB

  • Added export command to support exporting data from an AlloyDB cluster to Google Cloud Storage in alpha and beta tracks.
  • Promoted --tags flag to gcloud alloydb clusters restore and gcloud alloydb clusters create-secondary to bind tags in GA track.

Anthos Multi-Cloud

  • Fixed issue where the following command groups return operation not found error when attempting to delete missing resource with --allow-missing and --ignore-errors flags: gcloud container aws clusters delete, gcloud container aws node-pools delete, gcloud container azure clusters delete, gcloud container azure node-pools delete, gcloud container attached clusters delete.
  • Fixed issue where the following command groups return resource not found error when attempting to delete missing resource with only --allow-missing flag: gcloud container aws clusters delete, gcloud container aws node-pools delete, gcloud container azure clusters delete, gcloud container azure node-pools delete, gcloud container attached clusters delete.

Artifact Registry

  • Removed deprecated artifacts v1alpha1 API
  • Added --pkg-dev-location flag for gcloud artifacts docker upgrade migrate.

BigQuery

  • Fixed the behavior of --oauth_access_token to skip loading the active account credentials from Google Cloud CLI when a flag value is specified.
  • Included Cloud CLI information to the info command.
  • Updated behavior of --force for the mk command for datasets and tables to no longer do existence pre-checks.
  • Aligned tag key parsing with documentation so that the value is split using the last colon.
  • Broadened tolerance for tag key names to align with documentation, eg. project/department:sales.
  • Fixed the bug when the command query would fail if --project_id mismatched the project in fully qualified --reservation_id.
  • Added support for IAM condition in Dataset ACL.
  • Updated logging to a file using --apilog to append to the file instead of overwriting to fix a bug of truncated logs.
  • Added --job_creation_mode to the query command.

Cloud Access Context Manager

  • Added --etag parameter to access-context-manager perimeters update command.
  • Added --etag parameter to access-context-manager perimeters dry-run update command.

Cloud Bigtable

  • Added --row-affinity flag to gcloud bigtable app-profiles create and gcloud bigtable app-profiles update.
  • Added node-scaling-factor flag for alpha, beta and GA to gcloud bigtable clusters create to allow users to enable 2x node scaling on new clusters.
  • Added key node-scaling-factor to --cluster-config flag of gcloud bigtable instances create for alpha, beta and GA to enable 2x node scaling on new clusters.

Cloud Composer

  • Added --network-attachment to gcloud composer environments create/update to specify network attachment.
  • Added --network and --subnetwork to gcloud composer environments update to update network and subnetwork.
  • Added --support-web-server-plugins to gcloud composer environments create/update to enable/disable the support for web server plugins.
  • Added --enable-private-builds-only to gcloud composer environments create/update to enable only private connectivity to Google services for Python packages installations.
  • Added --disable-private-builds-only to gcloud composer environments create/update to disable only private connectivity to Google services for Python packages installations.
  • Added --disable-vpc-connectivity to gcloud composer environments update to disable connectivity with a user's VPC network.
  • Added --enable-private-environment to gcloud composer environments update to disable internet connection from any Composer component.
  • Added --disable-private-environment to gcloud composer environments update to enable internet connection from any Composer component.
  • Added --composer-internal-ipv4-cidr-block to gcloud composer environments create to specify the IP range in CIDR notation to use internally by Cloud Composer.
  • Added --dag-processor-storage to gcloud composer environments create/update to specify the storage allocated to Airflow dag processor.
  • Added --dag-processor-count to gcloud composer environments create/update to specify the number of dag processors.
  • Added --dag-processor-cpu to gcloud composer environments create/update to specify the CPU allocated to Airflow dag processor.
  • Added --dag-processor-memory to gcloud composer environments create/update to specify the memory allocated to Airflow dag processor.
  • Added gcloud composer environments list-workloads to display Composer workloads list.
  • Added gcloud composer environments user-workloads-config-maps create to create a user workloads ConfigMap.
  • Added gcloud composer environments user-workloads-config-maps delete to delete a user workloads ConfigMap.
  • Added gcloud composer environments user-workloads-config-maps describe to get details about a user workloads ConfigMap.
  • Added gcloud composer environments user-workloads-config-maps list to list user workloads ConfigMaps.
  • Added gcloud composer environments user-workloads-config-maps update to update a user workloads ConfigMap.
  • Added gcloud composer environments user-workloads-secrets create to create a user workloads Secret.
  • Added gcloud composer environments user-workloads-secrets delete to delete a user workloads Secret.
  • Added gcloud composer environments user-workloads-secrets describe to get details about a user workloads Secret.
  • Added gcloud composer environments user-workloads-secrets list to list user user workloads Secrets.
  • Added gcloud composer environments user-workloads-secrets update to update a user workloads Secret.

Cloud Identity-Aware Proxy

  • Promoted invalid scenario checks for gcloud iap settings --project=value --service=value to beta and GA.

Cloud Memorystore

  • Promoted memorystore command group to GA.

Cloud Resource Manager

  • Updated gcloud resource-manager tags keys create to accept purpose-data=organization.

Cloud Run

  • Added --container and --depends-on flags to gcloud beta run jobs create to allow creating multi-container Jobs.
  • Added --container, --remove-containers, and --depends-on flags to gcloud beta run jobs deploy and gcloud beta run jobs update to allow deploying and updating multi-container Jobs.
  • Added --container flag to gcloud beta run jobs execute to allow executing multi-container Jobs with container overrides.
  • Added a warning about an incomplete customer-managed encryption key (CMEK) compliance when using source deploys (using --key and --source flags together).
  • Added --allow-unencrypted-build flag to bypass the warning prompt for customer-managed encryption key (CMEK) source deployments (using --key and --source flags together).
  • Renamed flags --service-min-instances and --service-max-instances to --min and --max for a simplified experience. The old names are retained as aliases for compatibility.

Cloud SQL

  • Added --server-ca-pool flag to gcloud beta sql instances create for creation of instances using customer-managed CAS server CA.
  • Promoted --server-ca-mode flag of gcloud sql instances create to GA.
  • Promoted gcloud sql ssl server-certs to GA.

Cloud Storage

  • Fix gcloud storage rsync, and gcloud storage cp command to respect check_hashes property.
  • Updated gsutil component to 5.32.

Colab

  • Added gcloud beta colab runtimes stop.
  • Added gcloud colab runtimes stop.

Compute Engine

  • Promoted --bgp-best-path-selection-mode and related flags in gcloud compute networks create and update to v1.
  • Promote graceful shutdown related flags to beta:
    • --graceful-shutdown and --graceful-shutdown-max-duration of:
      • gcloud compute instances create
      • gcloud compute instances update
      • gcloud compute instances set-scheduling
      • gcloud compute instance-templates create
    • --no-graceful-shutdown of:
      • gcloud compute instances delete
      • gcloud compute instances stop.
  • Added Cloud Armor flags to gcloud compute org-security-policies.
  • Added gcloud compute backend-services get-effective-security-policies command in beta.
  • Fix "compute instances export" in beta and v1 leaving the performanceMonitoringUnit field unpopulated.
  • Added 24.10 to allowed list of values for --version of gcloud beta compute instances ops-agents policies [create|update].
  • Added gce_vm_ip_portmap Network Endpoint Group for gcloud compute network-endpoint-groups beta support.
  • Added gcloud compute reservations blocks listcommand in beta.
  • Added gcloud compute reservations blocks describecommand in beta.

Compute Firewall Policy Rules

  • Promoted gcloud compute firewall-policies export-rules to beta.
  • Promoted gcloud compute firewall-policies import-rules to beta.
  • Promoted gcloud compute network-firewall-policies export-rules to beta.
  • Promoted gcloud compute network-firewall-policies import-rules to beta.

Developer Connect

  • Promoted gcloud developer-connect to GA.

Distributed Cloud Edge

  • Added --zone-storage-kms-key flag to gcloud edge-cloud container clusters create command to allow for specifying a KMS key for zone storage encryption.
  • Introduced a Status field for machines as output during list and describe operations.
  • Added --zone-storage-kms-key and --use-google-managed-zone-key flag to gcloud edge-cloud container clusters update command to allow for updating the zone storage encryption key with either a CMEK or Google managed key.

Eventarc

  • Added --labels to gcloud beta eventarc enrollments create and added --update-labels, --remove-labels, --clear-labels to gcloud beta eventarc enrollments update to support labelling Eventarc enrollments.
  • Added --labels to gcloud beta eventarc pipelines create and added --update-labels, --remove-labels, --clear-labels to gcloud beta eventarc pipelines update to support labelling Eventarc pipelines.
  • Added --labels to gcloud eventarc channels create to support adding Eventarc channels' labels.
  • Added --update-labels, --remove-labels, --clear-labels to gcloud eventarc channels update to support updating Eventarc channels' labels.
  • Added --labels to gcloud eventarc channel-connections create to support adding Eventarc channel connections' labels.

GKE Hub

  • Fixed a bug in gcloud beta container fleet config-management unmanage when sending empty payload would fail validation. This was introduced in Google Cloud CLI version 498.0.0.

Kubernetes Engine

  • Added flags to use Control Plane Authority features on cluster creationhttps://cloud.google.com/kubernetes-engine/docs/concepts/about-control-plane-authority
    • --cluster-ca
    • --aggregation-ca
    • --etcd-api-ca
    • --etcd-peer-ca
    • --service-account-signing-keys
    • --service-account-verification-keys
    • --control-plane-disk-encryption-key
    • --gkeops-etcd-backup-encryption-key
  • Promoted --additive-vpc-scope-dns-domain and --disable-additive-vpc-scope flags to GA in cluster creation and update.

Looker

  • Updated --edition flag in gcloud looker instances create to include nonprod looker instances.
  • Add --gemini-enabled, --gemini-preview-tester-enabled, and --gemini-prompt-log-enabled to the update command.

Network Security

  • Added network-security intercept-deployment-groups commands to manage intercept deployment groups.
  • Added network-security intercept-deployments commands to manage intercept deployments.
  • Added network-security intercept-endpoint-groups commands to manage intercept endpoint groups.
  • Added network-security intercept-endpoint-group-associations commands to manage intercept endpoint group associations.

Secure Source Manager

  • Added --enable-workforce-identity-federation to gcloud beta source-manager instances create to support creation of instances with Workforce Identity Federation.

Workbench

  • Fixed a bug with workbench instances update unintentionally removing accelerators.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

502.0.0 (2024-11-19)

AI

  • Added machine-type to gcloud ai index-endpoints mutate-deployed-index.
  • Added --psc-automation-configs flag to gcloud ai index-endpoints deploy-index to support Private Service Connect automation.

AlloyDB

  • Added export command to support exporting data from an AlloyDB cluster to Google Cloud Storage in alpha and beta tracks.

Cloud Backup DR

  • Promoted gcloud backup-dr backup-vaults, gcloud backup-dr backup-plans, gcloud backup-dr backup-plan-associations, gcloud backup-dr backups and gcloud backup-dr data-sources command groups to GA.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap web enable/disable to beta and GA. Added --region flag support to --resource-type=backend-services.

Cloud SQL

  • Added --failover-dr-replica-name and --clear-failover-dr-replica-name flags to gcloud sql instances patch command. These flags can be used to set and unset a disaster recovery replica for a Cloud SQL primary instance.
  • Add --[no-]enable-private-service-connect flag to gcloud beta sql instances patch command to support enabling and disabling Private Service Connect for Cloud SQL instances.

Compute Engine

  • Added --require-specific-reservation flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --reservation-name flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --deployment-type flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Added --scheduling-type flag to gcloud beta compute reservations create and gcloud beta compute reservations update.
  • Support --provisioning-model=reservation-bound in beta for gcloud compute instances create, gcloud compute instances bulk create, and gcloud compute instance-templates create commands.
  • Added gcloud compute disks convert command.

Eventarc

  • Added --labels to gcloud eventarc triggers create and gcloud eventarc triggers update to support labelling Eventarc triggers.
  • Added --labels to gcloud beta eventarc message-buses create and gcloud beta eventarc message-buses update to support labelling Eventarc message buses.
  • Added --labels to gcloud beta eventarc google-api-sources create and gcloud beta eventarc google-api-sources update to support labelling Eventarc Google API sources.

GKE Hub

  • Added support for stopping and resuming syncing configs to gcloud beta container fleet config-management apply through a new Boolean field configSync.stopSyncing in the config file specified in flag --config.

Identity and Access Management

  • Added gcloud iam oauth-clients commands for OAuth application integration to Workforce Identity Federation management.

Network Connectivity

  • Added --group flag for hybrid spokes.

Network Management

  • Added --destination-fqdn flag to gcloud network-management connectivity-tests to allow executing Connectivity tests to DNS endpoint of Google Kubernetes Engine cluster control plane.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

501.0.0 (2024-11-12)

Anthos On-Prem

  • Added --version flag to gcloud container vmware admin-clusters update to support admin cluster version upgrade.

Artifact Registry

  • Added an argument group of two flags allow-vulnerability-scanning and disable-vulnerability-scanning to gcloud artifacts repositories create, to set the vulnerability scanning config for the repository.
  • Added an argument group of two flags allow-vulnerability-scanning and disable-vulnerability-scanning to gcloud artifacts repositories update, to set the vulnerability scanning config for the repository.

Cloud Access Context Manager

  • Updated gcloud access-context-manager cloud-bindings create to create bindings with global session settings. Use --session-length and --session-reauth-method to specify these settings.
  • Updated gcloud access-context-manager cloud-bindings create --binding-file to support creating scoped access settings that include session settings.
  • Updated gcloud access-context-manager cloud-bindings update to update bindings with global session settings. Use --session-length and --session-reauth-method to specify these settings.
  • Updated gcloud access-context-manager cloud-bindings update --binding-file to support updating scoped access settings that include session settings.
  • Updated gcloud access-context-manager cloud-bindings list to display session settings on listed bindings.
  • Updated gcloud access-context-manager cloud-bindings describe to display session settings on returned bindings.

Cloud Managed Kafka

  • Promoted gcloud managed-kafka to GA.

Cloud NetApp

  • Unhiding hybrid replication commands and fields for OnPrem migration GA.

Cloud Run

  • Promoted volume type in-memory to GA in gcloud run deploy, gcloud run jobs deploy, gcloud run jobs update gcloud run jobs create, and gcloud run services update.
  • Added --startup-probe and --liveness-probe flags to gcloud beta run deploy and gcloud beta run services update to allow configuring health check probes for a Cloud Run Service.

Cloud SQL

  • Promoted gcloud sql instances switchover to the GA track for PostgreSQL.

Cloud Spanner

  • Added --default-backup-schedule-type flag to gcloud spanner instances create and gcloud spanner instances update commands to allow specifying the default backup schedule type while creating or updating instances.

Colab

  • Promote gcloud beta colab to GA.

Colab Enterprise

  • Deleted the deprecated gcloud beta colab_enterprise surface.

Compute Engine

  • Changed the default value of --image-family flag to debian-12 for gcloud compute instances create, gcloud compute instances bulk create, and gcloud compute instance-templates create commands.
  • Promoted --instance-selection and other corresponding flags of gcloud compute instance-groups managed <create | update> to GA.

Compute Firewall Policy Rules

  • Promote gcloud compute firewall-policies export-rules to beta.
  • Promote gcloud compute firewall-policies import-rules to beta.
  • Promote gcloud compute network-firewall-policies export-rules to beta.
  • Promote gcloud compute network-firewall-policies import-rules to beta.

Compute OS Config

  • Added --include-locations flag to gcloud compute os-config policy-orchestrators create.
  • Added --include-locations and --clear-locations flags to gcloud compute os-config policy-orchestrators update.

Kubernetes Engine

  • Added --autoprovisioning-cgroup-mode flag to migrate cgroup mode in auto-provisioned node pools.
  • Added flag option --hpa-profile=performance|none to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update commands. This flag allows specifying a Horizontal Pod Autoscaling profile for a cluster.
  • Updated default kubectl from 1.30.5 to 1.30.6
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.10)
    • kubectl.1.30 (1.30.6)
    • kubectl.1.30 (1.31.2)

Network Connectivity

  • Added gcloud network-connectivity hubs query-status command to allow querying the status of a hub's Private Service Connect propagation.
  • Added --include-export-ranges flag to VPC spoke and producer VPC spoke update CLI to enable/disable exporting IPv6 subnets.

Network Security

  • Bug fix to change DEFAULT option for flag --action to DEFAULT_ACTION for Threat Prevention add-override and update-override commands.

Transfer

  • Fix a bug related to --id-prefix flag in transfer agents install command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

500.0.0 (2024-11-05)

Breaking Changes

  • (Notebook Executor) Removed gcloud beta notebook-executor command group. Use gcloud beta colab to manage Colab Enterprise executions and schedules instead.

Google Cloud CLI

  • Updated gcloud CLI to support Python v3.13.

Audit Manager

  • Promoted the following commands to GA:
    • gcloud audit-manager audit-reports generate
    • gcloud audit-manager audit-scopes generate
    • gcloud audit-manager enrollments add
    • gcloud audit-manager operations describe

Cloud Backup DR

  • Marked --network flag of gcloud backup-dr management-servers create as optional.

Cloud Run

  • Added mount-options key when using --add-volume with type=cloud-storage in gcloud beta run deploy, gcloud beta run services update, gcloud beta run jobs deploy, gcloud beta run jobs update, or gcloud beta run jobs create to allow passing configuration flags to gcsfuse.

Colab

  • Added gcloud beta colab executions command group to replace gcloud beta notebook-executor executions.
  • Added gcloud beta colab schedules command group to replace gcloud beta notebook-executor schedules.
  • Add support for colab/region property in gcloud beta colab executions and gcloud beta colab schedules.

Compute Engine

  • Promoted gcloud compute instances list output format with IPv6 addresses to GA.

Compute OS Config

  • Promoted gcloud os-config policy-orchestrators to beta.

Kubernetes Engine

  • Added flag option --tier to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update commands. This flag enables clusters to be upgraded to GKE Enterprise.
  • Update validation for flag --database-encryption-key.

Network Connectivity

  • Updated gcloud network-connectivity internal-ranges update to allow editability of description.

Security Command Center

  • Made filter a required flag for gcloud scc bulk-mute command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

499.0.0 (2024-10-29)

Breaking Changes

  • (Colab) Deprecated gcloud beta colab runtimes assign command. Use gcloud beta colab runtimes create instead.

Access Approval

  • Added --preferred-request-expiration-days flag to gcloud access-approval settings update to set the default expiration time for approval requests.
  • Added --prefer-no-broad-approval-requests flag to gcloud access-approval settings update to communicate the preference to Google personnel to request access with as targeted a resource scope as possible.
  • Added --notification-pubsub-topic flag to gcloud access-approval settings update for publishing notifications to the specified topic when approval requests are made.
  • Added --request-scope-max-width-preference flag to gcloud access-approval settings update to configure the broadest scope of access for access requests without a specific method.
  • Added --require-customer-visible-justification flag to gcloud access-approval settings update to configure if a customer visible justification (i.e. Vector Case) is required for a Googler to create an Access Ticket to send to the customer when attempting to access customer resources.

AlloyDB

  • Promoted --tags flag of gcloud alloydb clusters create and gcloud alloydb backups create to GA.

App Engine

Artifact Registry

  • Added --canary-reads flag for gcloud artifacts docker upgrade migrate.

Cloud Dataproc

  • Added --master-boot-disk-provisioned-iops, --master-boot-disk-provisioned-throughput, --worker-boot-disk-provisioned-iops, --worker-boot-disk-provisioned-throughput to configure IOPS and throughput for hyperdisk-balanced bootdisk for master and primary workers.

Cloud Memorystore

  • Add databases as supported redis_config for Redis instance creation.
  • Added gcloud redis clusters add-cluster-endpoints which appends more cluster endpoints to a redis cluster.
  • Added gcloud redis clusters remove-cluster-endpoints which removes cluster endpoints for a redis cluster.

Cloud Workstations

  • Added --grant-workstation-admin-role-on-create flag to gcloud workstations configs to support workstations port sharing.

Colab

  • Added gcloud beta colab runtimes create.

Compute Engine

  • Promoted flags related to custom-metrics to beta:
    • --custom-metrics of gcloud compute backend-service create.
    • --custom-metrics-file of gcloud compute backend-service create.
    • --custom-metrics of gcloud compute backend-service update.
    • --custom-metrics-file of gcloud compute backend-service update.
    • --clear-custom-metrics of gcloud compute backend-service update.
    • --custom-metrics of gcloud compute backend-service add-backend.
    • --custom-metrics-file of gcloud compute backend-service add-backend.
    • --custom-metrics of gcloud compute backend-service update-backend.
    • --custom-metrics-file of gcloud compute backend-service update-backend.
    • --clear-custom-metrics of gcloud compute backend-service update-backend.
  • Promoted ipv6 flag of gcloud compute network-endpoint-group update <neg-name> --add-endpoint to GA.
  • Promoted network-attachment flag of gcloud compute instance create <instance-name> --network-interface to GA.
  • Promoted network-attachment flag of gcloud compute instance create <instance-name> --network-interface to beta.
  • Promoted network-attachment flag of gcloud compute instance-templates create <name> --network-interface to GA.
  • Promoted network-attachment flag of gcloud compute instance-templates create <name> --network-interface to beta.

Eventarc

  • Added gcloud beta eventarc message-buses command group for Eventarc Advanced.
  • Added gcloud beta eventarc google-api-sources command group for Eventarc Advanced.
  • Added gcloud beta eventarc pipelines command group for Eventarc Advanced.
  • Added gcloud beta eventarc enrollments command group for Eventarc Advanced.

GKE Hub

  • Fixed issue where re-registering a GKE cluster with gcloud container fleet memberships register --enable-workload-identity did not enable Workload Identity.
  • Updated gcloud container fleet identity-service apply to accept configurations containing a Diagnostic Interface section.

Kubernetes Engine

  • Added flag option --ParallelstoreCsiDriver to add support for enabling the Parallelstore CSI Driver.
  • Added --auto-monitoring-scope flag to gcloud beta container clusters create, gcloud beta container clusters create-auto, and gcloud beta container clusters update for standard or autopilot clusters.

Network Connectivity

  • Added --producer-instance-location and --allowed-google-producers-resource-hierarchy-level to gcloud network-connectvity service-connection-policies create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

498.0.0 (2024-10-22)

Breaking Changes

  • (Cloud Workstations) Fixed gcloud beta workstations configs create and
  • (Cloud Workstations) gcloud beta workstations configs create flag --boost-config. Before
  • (Cloud Workstations) when user specified --boost-config=enable-nested-virtualization=false,
  • (Cloud Workstations) enableNestedVirtualization was set to True. Fix enables user to set
  • (Cloud Workstations) enableNestedVirtualization to False by specifying
  • (Cloud Workstations) --boost-config=enable-nested-virtualization=false.
  • (Compute Engine) Deprecated default guest image family for --confidential-compute-type=TDX from ubuntu-2304-amd64 to ubuntu-2204-lts.

AlloyDB

  • Added --tags flag to
    • gcloud alloydb clusters create to support associating Tags while creating Cluster.

Anthos Multi-Cloud

  • Added --kubelet-config-cpu-manager-policy flag to gcloud container aws node-pools create for choosing which CPU manager policy to use in the kubeletConfig.
  • Added --kubelet-config-cpu-cfs-quota flag to gcloud container aws node-pools create for enabling or disabling CPU CFS throttling.
  • Added --kubelet-config-cpu-cfs-quota-period flag to gcloud container aws node-pools create for setting the period for throttling when CPU CFS throttling is enabled.
  • Added --kubelet-config-pod-pids-limit flag to gcloud container aws node-pools create for setting the maximum number of PIDs in any pod.

Cloud DNS

  • Fix response policy update command for zonal response policies.

Cloud Dataproc

  • Added worker-machine-types flag to gcloud dataproc clusters create to support flexible machine types for primary workers.

Cloud Datastore

  • Promoted changed to gcloud datastore indexes create and gcloud datastore indexes cleanup commands which uses the Firestore Admin API to GA.
  • promoted --database-id flag for gcloud datastore indexes cleanup to GA.

Cloud Logging

  • Promoted the following commands to GA:
    • gcloud logging scopes create
    • gcloud logging scopes list
    • gcloud logging scopes delete
    • gcloud logging scopes describe
    • gcloud logging scopes update

Cloud Run

  • Source deploy will respect the source bucket set on an existing Cloud Run service in the run.googleapis.com/source-location or the run.googleapis.com/build-source-location (giving preference to the latter).
  • Updated the output of gcloud run jobs executions tasks describe to include the exit code of the last task attempt if the task has run.
  • Fixed gcloud multi-region-services update crashing when called without --add-region or --remove-region.
  • Fixed gcloud beta multi-region-services update documentation, where ALPHA arguments were erroneously included.

Cloud SQL

  • Add --replication-lag-max-seconds-for-recreate flag to recreate MySQL read-replica after the replication lag on the instance exceeds the defined threshold.

Cloud Spanner

  • Added --kms-keys flag to
    • gcloud spanner databases create
    • gcloud spanner backups create
    • gcloud spanner backups copy
    • gcloud spanner databases restore to support Cloud Spanner Customer Managed Encryption(CMEK) with multiple KMS keys.

Colab

  • Add colab/region property to set default region for gcloud colab commands.

Compute Engine

  • Promoted --custom-end-time flag of gcloud compute commitments create and gcloud compute commitments update to GA.
  • Promoted --load-balancing-scheme flag of gcloud compute backend-buckets create to beta.
  • Promoted --propagated-connection-limit flag of gcloud compute service-attachments create and gcloud compute service-attachments update to GA.
  • Added --action-on-vm-failed-health-check flag of gcloud compute instance-groups managed create and gcloud compute instance-groups managed create to Alpha.
  • Promoted support for gcloud compute instance-groups managed resize-requests describe for regional igm to beta.
  • Promoted support for gcloud compute instance-groups managed resize-requests list for regional igm to beta.

GKE Hub

  • Migrated gcloud container fleet mesh update to use v2 MembershipFeature API for mutation.
  • Migrated gcloud container fleet policycontroller content bundles remove to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content bundles set to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content templates disable to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content templates enable to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content deployment remove to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content deployment set to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content detach to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content enable to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content suspend to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud container fleet policycontroller content update to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud beta container fleet config-management apply to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud beta container fleet config-management unmange to use v2 MembershipFeature API for per membership spec mutation.
  • Migrated gcloud beta container fleet config-management upgrade to use v2 MembershipFeature API for per membership spec mutation.

Kubernetes Engine

  • Fixed issue where gcloud container clusters create with --cluster-dns=clouddns incorrectly shows a confirmation prompt about recreating node pools. Recreating node pools is only necessary when changing from a different DNS provider.
  • Added --enable-multi-networking flags to gcloud container clusters create-auto.

Network Management

  • Added --destination-redis-instance and --destination-redis-cluster flags to gcloud network-management connectivity-tests to allow executing Connectivity tests to Redis instances and Redis clusters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

497.0.0 (2024-10-15)

Breaking Changes

  • (Colab Enterprise) Deprecated gcloud beta colab-enterprise command group. Use gcloud beta colab instead.

Cloud Dataproc

  • Added secondary-worker-standard-capacity-base and secondary-worker-standard-capacity-percent-above-base flags to gcloud dataproc clusters create to support mixing of spot and standard instances for secondary workers.

Cloud Datastore

  • Promoted changed to gcloud datastore indexes create and gcloud datastore indexes cleanup commands which uses the Firestore Admin API to beta.
  • Added --database-id flag to gcloud datastore indexes cleanup.

Cloud On Demand Scanning

  • Added support for scanning for new OS packages (Wolfi, Chainguard, Google Distroless, SUSE Linux Enterprise Server, Rocky Linux, Alma Linux).
  • Added support for scanning new language packages (NPM, Python, Rust, RubyGems, Composer, NuGet).
  • Changed the default behavior of gcloud artifacts docker images scan to scan for vulnerabilities in all supported language packages, and added --skip-package-types flag to skip scanning for specific language package types.
  • Deprecated --additional-package-types flag of gcloud artifacts docker images scan command. Scanning for all package types is now the default.

Cloud SQL

  • Added PostgreSQL 17 to supported database versions.

Cloud Storage

  • Promoted gcloud storage folders to GA.
  • Promoted gcloud storage buckets create --enable-hierarchical-namespace flag to GA.
  • Updated gsutil component to 5.31.

Colab

  • Added gcloud beta colab command group to replace gcloud beta colab-enterprise.

Compute Engine

  • Promoted --ip-address-selection-policy flag of gcloud compute backend-services create and gcloud compute backend-services update to GA.
  • Promoted IPv6-only support for gcloud compute instances create, gcloud compute instances bulk create, gcloud compute instance-templates create, and gcloud compute networks subnets create to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests create for regional igm to beta.
  • Promoted support for gcloud compute instance-groups managed resize-requests cancel for regional igm to beta.
  • Promoted support for gcloud compute instance-groups managed resize-requests delete for regional igm to beta.
  • Added path to cookie for STRONG_COOKIE_AFFINITY and HTTP_COOKIE sessionAffinity type in GA.

Database Migration

  • Added --database-version-name flag to gcloud database-migration connection-profiles create cloudsql.

Network Connectivity

  • Added effective-location argument to routes list CLI to filter hub routes effective at a specific location.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

496.0.0 (2024-10-08)

Breaking Changes

  • (Anthos Multi-Cloud) Removed --workload-vulnerability-scanning flag of gcloud container attached clusters.

Artifact Registry

  • Added support for download rules that control the downloading behaviors of packages in a repository.

BigQuery

  • Added --request_reason flag to support setting the X-Goog-Request-Reason HTTP request header.
  • Added --reservation_id flag to allow specifying reservation on a job.
  • Fixed the validation on --nouse_google_auth when GDU is set as the universe domain.
  • Updated default --api value to match newer guidelines.
  • Fixed a bug where special billing/quota_project values in --quota_project_id flag are not resolved when using legacy auth.
  • Added support for creating and updating row access policies. Support for showing and removing row access policies will be added in a future version.
  • Added validations for schedule options during creating or updating data transfer configurations.
  • Added --event_driven_schedule to support event driven transfers in Data Transfer Service.
  • Added messages to alert users when a default connection is created and/or their IAM policy is updated for the default connection.
  • Updates permissions for directories to be 755.

Cloud Bigtable

  • Added --backup-type flag to gcloud bigtable backups create to support hot backups.
  • Added --hot-to-standard-time flag to gcloud bigtable backups create and gcloud bigtable backups update to support hot backups.

Cloud Deploy

  • Added support for Deploy Policies public preview.

Cloud Firestore

  • Updated gcloud beta firestore bulk-delete to require confirmation.

Cloud Pub/Sub

  • Added flags to gcloud pubsub topics create for creating Cloud Pub/Sub Cloud Storage Import Topics.
    • Added --cloud-storage-ingestion-bucket
    • Added --cloud-storage-ingestion-input-format
    • Added --cloud-storage-ingestion-text-delimiter
    • Added --cloud-storage-ingestion-match-glob
    • Added --cloud-storage-ingestion-minimum-object-create-time
  • Added flags to gcloud pubsub topics update for updating Cloud Pub/Sub Cloud Storage Import Topics.
    • Added --cloud-storage-ingestion-bucket
    • Added --cloud-storage-ingestion-input-format
    • Added --cloud-storage-ingestion-text-delimiter
    • Added --cloud-storage-ingestion-match-glob
    • Added --cloud-storage-ingestion-minimum-object-create-time

Cloud Resource Manager

  • Added DATA_GOVERNANCE choice for --purpose argument in gcloud resource-manager tags keys create command.

Cloud Run

  • Promoted gcloud run multi-region-services to beta.
  • Added --regions to gcloud beta run deploy to support Multi-Region Services.
  • Deprecated gcloud run integrations commands.
  • Added --[no]invoker-iam-check flag to optionally disable invoker IAM checks. This feature is available by invitation only; more info at https://cloud.google.com/run/docs/securing/managing-access#invoker_check.

Cloud SQL

  • Add new enum TLOG to --bak-type, add --export-log-start-time and --export-log-end-time flags to gcloud sql export bak to enable the transaction log export feature for SQL Server.

Cloud Workstations

  • Added support for the maximum usable workstations for a user in gcloud workstations config create and gcloud workstations config update commands.

Compute Engine

  • gcloud compute ssh no longer consumes STDIN while polling for instance key propagation.
  • Made scope required for gcloud compute backend-services list-usable.
  • Promoted Percentage-based Request Mirroring in UrlMaps compute API to beta.
  • Adds support for STRONG_COOKIE_AFFINITY sessionAffinity type in beta.
  • Updated behaviour of gcloud compute instance-groups managed delete: it will throw error if instance.delete operation takes more than 70 minutes instead of 30 minutes previously.
  • Adds support for STRONG_COOKIE_AFFINITY sessionAffinity type in GA.

Database Migration

  • Added --sqlserver-promote-when-ready and --no-sqlserver-promote-when-ready flags to gcloud database-migrate migration-jobs create and gcloud database-migrate migration-jobs update. The flags enable or disable promote of ready databases in Database Migration Service migration jobs for homogeneous SQL Server to Cloud SQL for SQL Server migrations.

Distributed Cloud Edge

  • Added --control-plane-node-storage-schema flag to gcloud edge-cloud container clusters create commands to allow specifying the local storage configuration schema.
  • Added --node-storage-schema flag to gcloud edge-cloud container node-pools create commands to allow specifying the local storage configuration schema.

GKE Hub

  • Added gcloud container fleet scopes add-app-operator-binding to beta which sets up permissions required for an app operator in a fleet scope.
  • Added gcloud container fleet scopes remove-app-operator-binding to beta which unsets permissions of an app operator in a fleet scope.
  • Added gcloud container fleet scopes list-app-operator-bindings to beta which lists app operators and their roles in a fleet scope.

Identity Groups

  • Deprecated POSIX groups from gcloud beta identity groups.

Kubernetes Engine

  • Fixed a bug gcloud container node-pools update command where it was ignoring --accelerator command.
  • Updates default kubectl from 1.29.8 to 1.30.5.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.14)
    • kubectl.1.29 (1.29.9)
    • kubectl.1.30 (1.30.5)
    • kubectl.1.31 (1.31.1)
  • Added a new command gcloud beta container clusters get-upgrade-info which returns upgrade information of the given cluster.
  • Added a new command gcloud beta container node-pools get-upgrade-info which returns upgrade information of the given node pool.
  • Added flag option --enable-ip-access to gcloud container clusters create and gcloud container clusters create commands. This flag enables IP address access to the cluster's control plane.
  • Added flag option --enable-dns-access to gcloud container clusters create and gcloud container clusters create commands. This flag enables DNS access to the cluster's control plane.
  • Added flag option --enable-private-endpoint-enforcement to gcloud container clusters create and gcloud container clusters create commands. This flag enforces authorized networks rules over cluster's private endpoint.
  • Added flag option --dns-endpoint to gcloud container clusters get-credentials command. This flag configures kubectl to point DNS endpoint of the cluster's control plane.

Network Services

  • Promoted the following Service Extensions Plugins command groups to beta:
    • gcloud service-extensions wasm-plugins
    • gcloud service-extensions wasm-plugin-versions

Notebook Executor

  • Added gcloud beta notebook-executor schedules surface and commands.

Security Command Center

  • Modified gcloud scc sources describe to call Security Command Center v2 api instead of v1.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

495.0.0 (2024-10-01)

Breaking Changes

  • (GKE Hub) Modified gcloud container fleet memberships get-credentials to require the permission gkehub.gateway.generateCredentials (automatically included in roles gkehub.gatewayReader, gkehub.gatewayEditor, and gkehub.gatewayAdmin), as well as network access to *connectgateway.googleapis.com.

Google Cloud CLI

  • Updated property core/parse_error_details default to be set to True, gcloud CLI will parse and display errors in a more human readable format, where available.

App Engine

  • Fixed customer bug (https://issuetracker.google.com/issues/364466911) for the local dev_appserver.py running go apps on Windows.
  • Added the new runtime go1.23 support for dev_appserver.py.

Artifact Registry

  • Added gcloud artifacts attachments create to support creating an Attachment for an artifact.
  • Added gcloud artifacts attachments download to support downloading an Attachment.
  • Added gcloud artifacts attachments list to support listing Attachments in a repository.
  • Added gcloud artifacts attachments delete to support deleting an Attachment.
  • Added location flag from artifacts sbom export, artifacts sbom list, artifacts sbom load, artifacts vulnerabilities list, and artifacts vulnerabilities load-vex.
  • Changed default answer for prompts in enable-upgrade-redirection and disable-upgrade-redirection to Y.

Cloud Access Context Manager

  • Added --binding-file flag to gcloud access-context-manager cloud-bindings for setting ScopedAccessSettings in GcpUserAccessBinding.

Cloud Firestore

  • Updated gcloud firestore backups list to return the unavailable locations.

Cloud Identity-Aware Proxy

  • Added --resource-type=cloud-run to gcloud iap setting and gcloud iap web iam in ALPHA.

Cloud Pub/Sub

  • Increased upper bound for --message-retention-duration flag of gcloud pubsub subscriptions create from 7 days to 31 days.
  • Increased upper bound for --message-retention-duration flag of gcloud pubsub subscriptions update from 7 days to 31 days.
  • Fixed --cloud-storage-max-bytes flag of gcloud pubsub subscriptions create to accept values down to 1000 bytes.
  • Fixed --cloud-storage-max-bytes flag of gcloud pubsub subscriptions update to accept values down to 1000 bytes.

Cloud Run

  • Promoted --service-min-instances flag of gcloud run deploy and gcloud run services update to GA.

Cloud SQL

  • Promote gcloud sql ssl server-ca-certs to GA.

Cloud Spanner

  • Promoted gcloud spanner backup-schedules to GA.
  • Added new columns to gcloud spanner backups list command.

Database Migration

  • Added --authorized-network-cidr-ranges, --enable-outbound-public-ip, and --enable-public-ip flags to gcloud database-migration connection-profiles create alloydb.

GKE Hub

  • Migrated gcloud container fleet memberships register from calling v1beta1 gkehub APIs to standard versions (v1, v1beta, v1alpha).
  • Migrated gcloud container fleet memberships unregister from calling v1beta1 gkehub APIs to standard versions (v1, v1beta, v1alpha).

Kubernetes Engine

  • Promoted --enable-confidential-storage flag on cluster/node-pool create to GA to enable creating boot disk with confidential mode.

Network Connectivity

  • Added FOR_MIGRATION usage type support to Internal Range.

Notebook Executor

  • Added gcloud beta notebook-executor executions surface and commands.

Policy Simulator

  • Added gcloud policy-intelligence simulate command group. Commands in this group simulate changes to organization policies.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

494.0.0 (2024-09-24)

Breaking Changes

  • (GKE Hub) gcloud beta container fleet memberships get-credentials now requires the permission gkehub.gateway.generateCredentials (automatically included in roles gkehub.gatewayReader, gkehub.gatewayEditor, and gkehub.gatewayAdmin), as well as network access to *connectgateway.googleapis.com.

Google Cloud CLI

  • Upgraded cryptography package to version 43.0.1.
  • Upgraded pyopenssl package to version 24.2.1.

AlloyDB

  • Added --outbound-public-ip flag to enable outbound public IP on an instance for the following commands in the GA track:
    • gcloud alloydb instances create
    • gcloud alloydb instances create-secondary
    • gcloud alloydb instances update

App Engine

Cloud Bigtable Emulator

  • Rebuilding cbt emulator with go version 1.23.0 which fixed CVE-2023-45288.

Cloud SQL

  • Updated gcloud beta sql ssl server-certs list to also return the CA certificates.
  • Promoted --time-zone flag of gcloud sql instances patch command to GA.

Colab Enterprise

  • Added gcloud beta colab-enterprise runtimes describe.
  • Added gcloud beta colab-enterprise runtimes list.
  • Added gcloud beta colab-enterprise runtimes delete.
  • Added gcloud beta colab-enterprise runtimes upgrade.
  • Added gcloud beta colab-enterprise runtimes start.

Compute Engine

  • Promote --confidential-compute-type=TDX flag of gcloud compute instances create to v1.
  • Added gce_vm_ip_portmap Network Endpoint Group for gcloud compute network-endpoint-groups GA support.
  • Fix crash when setting --session-affinity.
  • Added TDX_CAPABLE to the list of guestOsFeatures.

Database Migration

  • Updated gcloud database-migration connection-profiles create alloydb to support POSTGRES_16 version option for AlloyDB connection profiles.

Developer Connect

  • Promoted gcloud developer-connect to beta.

GKE Hub

  • Added support for fleet-default membership configuration of Config Sync to gcloud beta container fleet config-management command group.
    • Added --fleet-default-member-config flag to gcloud beta container fleet config-management enable to set the fleet-default membership configuration.
    • Added --origin flag to gcloud beta container fleet config-management apply to sync a membership to the fleet-default membership configuration.
    • Added --fleet-default-member-config flag to gcloud beta container fleet config-management disable to clear the fleet-default membership configuration.
    • Added column to gcloud beta container fleet config-management status output to indicate whether each membership configuration is synced to the fleet-default membership configuration.

Gemini

  • Added gcloud gemini code-repository-indexes API.
  • Added gcloud gemini code-repository-indexes repository-groups API.

Network Security

  • For commands network-security security-profile-groups create and update, changed subflags for --threat-prevention-policy from --security-profile-organization and --security-profile-location to the more consistent --threat-prevention-profile-organization and --threat-prevention-profile-location, while keeping the old flags as well for backwards compatibility.
  • Added support for creating Security Profile Groups linked to Custom Mirroring security profiles using network-security security-profile-groups create --custom-mirroring-profile=<...>.

Oracle Database

  • Added gcloud oracle-database group in GA with the following commands:
    • gcloud oracle-database autonomous-database-backups list command
    • gcloud oracle-database autonomous-databases commands group
    • gcloud oracle-database autonomous-db-versions list command
    • gcloud oracle-database cloud-exadata-infrastructures commands group
    • gcloud oracle-database cloud-exadata-infrastructures db-servers list
    • gcloud oracle-database cloud-vm-clusters commands group
    • gcloud oracle-database cloud-vm-clusters db-system-shapes list command
    • gcloud oracle-database entitlements list command
    • gcloud oracle-database gi-versions list command

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

493.0.0 (2024-09-17)

Breaking Changes

  • (Anthos Multi-Cloud) Renamed --security-posture flag as --workload-vulnerability-scanning.
  • (Compute Engine) Removed gcloud compute future-reservations command group from GA.
  • (Security Command Center) Removed gcloud scc slz-overwatch command group.

Google Cloud CLI

  • gcloud auth application-default print-access-token now supports context_aware access.

AlloyDB

  • Added --node-ids flag to gcloud alloydb instances restart command to the GA track. This flag allows users to allow users to specify a comma-separated list of read pool node IDs to perform the restart on. Without specifying this flag, every node in the read pool will be restarted.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.9
    • Fix missing version data on non-transactional and transactional deletes

Cloud Identity-Aware Proxy

  • Promoted --resource-type=forwarding-rule from ALPHA to beta.
  • Fixed issue UDF jars are mishandled for SQL jobs in some cases.
  • SQL jobs will always produce script output to improve spotting errors.

Cloud NetApp

  • Added --allow-auto-tiering flag to gcloud netapp storagepools.
  • Added --tiering-policy flag to gcloud netapp volumes.

Cloud Pub/Sub

  • Modified --message-retention-duration flag of gcloud pubsub subscriptions create to enforce lower bound of 10 minutes and upper bound of 7 days.
  • Modified --message-retention-duration flag of gcloud pubsub subscriptions update to enforce lower bound of 10 minutes and upper bound of 7 days.

Cloud SQL

  • Added support for restoring backups across projects.

Cloud Spanner

  • Added --edition flag to gcloud spanner instances create and gcloud spanner instances update commands to allow specifying the Spanner edition while creating or updating instances.

Colab Enterprise

  • Added gcloud beta colab-enterprise runtimes.
  • Added gcloud beta colab-enterprise runtimes assign.
  • Update gcloud beta colab-enterprise runtime-templates create to set default disk type and size if neither flag is specified, instead of no disk.

Compute Engine

  • Added --reservation-sharing-policy flag to gcloud compute commitments create command to specify the reservation sharing policy for the commitment.
  • Promote --turbo-mode in gcloud compute instances create to GA.

Compute Firewall Policy Rules

  • Promoted --src-network-scope flag of gcloud compute firewall-policies rules to beta.
  • Promoted --src-networks flag of gcloud compute firewall-policies rules to beta.
  • Promoted --dest-network-scope flag of gcloud compute firewall-policies rules to beta.
  • Promoted --src-network-scope flag of gcloud compute network-firewall-policies rules to beta.
  • Promoted --src-networks flag of gcloud compute network-firewall-policies rules to beta.
  • Promoted --dest-network-scope flag of gcloud compute network-firewall-policies rules to beta.

GKE Hub

  • Modified gcloud beta container fleet memberships update to call gkehub API version v1beta instead of v1beta1.
  • Modified gcloud beta container fleet memberships create to call gkehub API version v1beta instead of v1beta1.

Migrate to Virtual Machines

  • Promoted gcloud migration vms image-imports commands to GA.

Network Security

  • Simplified the network-security mirroring-deployment-groups create command by accepting just the networkID for network specification.
  • Changed subflags for --threat-prevention-policy in network-security security-profile-groups create and update from --security-profile-organization and --security-profile-location to the more consistent --threat-prevention-profile-organization and --threat-prevention-profile-location, while keeping the old flags as well for backwards compatibility.

Recaptcha

  • Update reCAPTCHA Express support in CreateKey API.

Security Command Center

  • Modified gcloud scc sources describe to accept parent (organization|folder|project) as positional argument instead of only organization.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

492.0.0 (2024-09-10)

Anthos Multi-Cloud

  • Added --security-posture flag to gcloud container attached clusters to set the mode of the Kubernetes security posture API's off-cluster features.

Artifact Registry

  • Supported --filter and --sort-by on resource list apis.
  • Added update commands for annotations on Files, Packages and Package Versions.

Assured Workloads

  • Added SOVEREIGN_CONTROLS_BY_SIA_MINSAIT and SOVEREIGN_CONTROLS_BY_PSN as options for --partner flag of gcloud assured workloads create for both beta and GA.
  • Added support for the following Compliance Regimes for gcloud assured workloads create: AU_REGIONS_AND_US_SUPPORT, ISR_REGIONS, ISR_REGIONS_AND_SUPPORT, CA_PROTECTED_B, IL5, IL2, JP_REGIONS_AND_SUPPORT, KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS, and REGIONAL_CONTROLS.
  • The gcloud assured workloads create command will now automatically receive new Compliance Regime and Partner options as they are added to the Assured Workloads API.

Cloud Filestore

  • Added --deletion-protection and --deletion-protection-reason flags to gcloud filestore instances create.
  • Added --deletion-protection, --no-deletion-protection and --deletion-protection-reason flags to gcloud filestore instances update.

Cloud Functions

  • Changed gcloud functions deploy to deploy new functions via Cloud Functions (2nd gen) by default. 1st gen functions can still be created by specifying --no-gen2 or by setting the functions/gen2 property to off. This change will be applied in the GA release track to match beta and alpha.

Cloud NetApp

  • Added --zone and --replica-zone flag to gcloud netapp [volumes|storage-pools] create commands.

Cloud Run

  • Promoted gcloud run services logs read and gcloud run jobs logs read to GA.

Cloud SQL

  • Added --server_ca_mode flag to gcloud beta sql instances create for creation of instances using CAS server CA.
  • Added sql ssl server_certs group for CAS server cert management and rotation with the commands create, list, rotate, and rollback.

Colab Enterprise

  • Fixed output in gcloud beta colab-enterprise runtime-templates commands involving LROs to correctly show resource name rather than operation name.

Compute Engine

  • Promoting --turbo-mode in gcloud compute instances create to beta. It lets instances run at supported turbo frequency. Only supported on C4 VM families with possible value "ALL_CORE_MAX".

Database Migration

  • Added --username and --password flags to gcloud database-migration connection-profiles create sqlserver.
  • Added gcloud database-migrate connection-profiles test to validate a Database Migration Service connection profile.

GKE Hub

  • Removed --description flag of gcloud beta container fleet memberships create.

Kubernetes Engine

  • Updates default kubectl from 1.28.12 to 1.29.8.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.13)
    • kubectl.1.29 (1.29.8)
    • kubectl.1.30 (1.30.4)
    • kubectl.1.31 (1.31.0)
  • Added --accelerators flag to gcloud container node-pools update to enable accelerator config update on nodepools.

Network Management

  • Added gcloud beta network-management vpc-flow-logs-configs command group which is manage the VPC Flow Logs configurations.

Network Security

  • New commands for network-security resources - AuthzPolicy.
  • Added security-profiles custom-mirroring commands to manage custom mirroring security profiles and promoted them to beta.

Service Extensions

  • New commands for service-extensions resources - AuthzExtensions.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

491.0.0 (2024-09-04)

Breaking Changes

  • (GKE Hub) gcloud container fleet scopes namespaces get-credentials now requires the permission gkehub.gateway.generateCredentials (automatically included in roles gkehub.gatewayReader, gkehub.gatewayEditor, and gkehub.gatewayAdmin), as well as network access to *connectgateway.googleapis.com.
  • (Kubernetes Engine) Changed gcloud container clusters update to use current cluster DNS config as base for changes rather than default DNS config. In addition, the user will only be prompted about the necessary node pool upgrade when specified cluster DNS provider is different than the current value in the cluster.

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.11.9.

Artifact Registry

  • Fixed issue where gcloud artifacts docker images describe fails when no metadata flag is specified and API enablement check is denied.

Cloud Dataflow

  • Allow JAVA21 in --flex-template-base-image option for gcloud dataflow flex-template build.

Cloud Firestore

  • Promoted --encryption-type and --kms-key-name flag of gcloud firestore databases restore command to beta and GA.

Cloud Identity-Aware Proxy

  • Added --resource-type=forwarding-rule to gcloud iap setting and gcloud iap web in ALPHA.

Cloud NetApp

  • Added --hybrid-replication-parameters flag to gcloud netapp volumes {create}.

Cloud Workstations

  • Deprecated --disable-ssh-to-vm flag in gcloud workstations config create command. Use --enable-ssh-to-vm flag instead.

Compute Engine

  • Fix incorrect padding issues for gcloud add_signed_url_key method.

Kpt

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

490.0.0 (2024-08-27)

App Hub

  • Added gcloud apphub locationscommand group. Commands in this group manage apphub locations.

Assured Workloads

  • Added SOVEREIGN_CONTROLS_BY_CNTXT and SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM as options for --partner for gcloud assured workloads create.
  • Added partner-services-billing-account flag for gcloud assured workloads create.

BigQuery

  • Enabled Google Auth by default.

Cloud Bigtable

  • Added support for more aggregate types to the cbt CLI.

Cloud Run

  • Added --mesh flag to gcloud beta run deploy and gcloud beta run services update. Use gloud beta run deploy --mesh=[MESH] ... to enable Cloud Service Mesh for a Cloud Run Service.
  • Promoted --add-volume, --remove-volume, --clear-volumes, --add-volume-mount, --remove-volume-mount, and --clear volume mounts flags of gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs create, and gcloud run jobs update to GA for NFS and Cloud Storage volumes.

Colab Enterprise

  • Added gcloud beta colab-enterprise runtime-templates add-iam-policy-binding.
  • Added gcloud beta colab-enterprise runtime-templates get-iam-policy.
  • Added gcloud beta colab-enterprise runtime-templates set-iam-policy.
  • Added gcloud beta colab-enterprise runtime-templates remove-iam-policy-binding.

Compute Engine

  • Promoted flags related to external-managed migration to beta:
    • '--external-managed-backend-bucket-migration-state' of gcloud compute forwarding-rules update.
    • '--external-managed-backend-bucket-migration-testing-percentage' of gcloud compute forwarding-rules update.
    • '--load-balancing-scheme' of gcloud compute forwarding-rules update.
    • '--external-managed-migration-state' of gcloud compute backend-services update.
    • '--external-managed-migration-testing-percentage' of gcloud compute backend-services update.
    • '--load-balancing-scheme' of gcloud compute backend-services update.
  • Promoted gcloud compute future-reservations command group to GA.

Database Migration

  • Added --sqlserver-diff-backup and --no-sqlserver-diff-backup flags to gcloud database-migrate migration-jobs create and gcloud database-migrate migration-jobs update. The flags enable or disable differential backups in Database Migration Service migration jobs for homogeneous SQL Server to Cloud SQL for SQL Server migrations.
  • Updated gcloud database-migration connection-profiles create cloudsql to support MySQL_8_4 major version option for Cloud SQL connection profiles.

GKE Hub

  • Modified gcloud beta container fleet memberships register to not populate membership description.
  • Removed --description flag of gcloud beta container fleet memberships update.

Kubernetes Engine

  • Added flag option --[no]-enable-insecure-binding-system-authenticated to allow/block System RBAC bindings group system:authenticated binds to any role.
  • Added flag option --[no]-enable-insecure-binding-system-unauthenticated to allow/block System RBAC bindings group system:unauthenticated and user system:anonymous binds to any role.

Memorystore

  • Added memorystore command group. Commands in this group allow creating and managing Memorystore instances.

Notebooks

  • Added NVIDIA_H100_80GB and NVIDIA_H100_MEGA_80GB option to --accelerator-type flag of gcloud notebooks instances create and gcloud notebooks instances update.

Workbench

  • Added workbench instances restore to restore the workbench instance to an existing backup state.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

489.0.0 (2024-08-20)

Cloud Dataplex

  • Adjusted gcloud dataplex entries search page-size limit to match the public API documentation.

Cloud Filestore

  • Added MAX_READ_IOPS column to gcloud beta filestore instances list and gcloud filestore instances list.

Cloud Firestore

  • Promoted vector-config flag of gcloud firestore indexes composite create command to beta and GA.
  • Added firestore bulk-delete command in alpha and beta to delete data in bulk.

Cloud Firestore Emulator

Cloud Run

  • Added --build-env-vars, --function, --base-image, --automatic-updates, --build-worker-pool, --delegate-builds, --build-service-account to improve --source deployments on beta.

Cloud Storage

  • Fix missing hash validation for CMEK encrypted downloads via rsync.

Colab Enterprise

  • Added gcloud beta colab-enterprise to manage colab enterprise resources.
  • Added gcloud beta colab-enterprise runtime-templates.
  • Added gcloud beta colab-enterprise runtime-templates create.
  • Added gcloud beta colab-enterprise runtime-templates delete.
  • Added gcloud beta colab-enterprise runtime-templates describe.
  • Added gcloud beta colab-enterprise runtime-templates list.

Compute Engine

  • Promoted flags related to the nat64 feature to alpha:
    • nat64-all-v6-subnet-ip-ranges of gcloud compute routers nats (create|update).
    • nat64-custom-v6-subnet-ip-ranges of gcloud compute routers nats (create|update).
    • clear-nat64-v6-subnet-ip-ranges of gcloud compute routers nats update.
    • clear-nat-subnet-ip-ranges of gcloud compute routers nats update.
  • Added update command for instance-schedule policy: gcloud compute resource-policies update instance-schedule.
  • Added --reservation-sharing-policy flag to gcloud beta compute reservations create and gcloud beta compute reservations update.

Kubernetes Engine

  • Added --storage-pools flag on node-pool update.
  • Promoted --storage-pools flag on cluster / node-pool create to GA.

Looker

  • Launched Private Services Connect for Looker (Google Cloud core) with General Availability.

Network Security

  • Added network-security mirroring-endpoint-group-associations commands to manage packet-mirroring endpoint group associations, and promoted them to beta.

Workbench

  • Added --min-cpu-platform flag to gcloud workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

488.0.0 (2024-08-13)

BigQuery

  • Fixed logging when --use_google_auth is used.
  • Added a retry for server-side errors.
  • Sorted ls response for projects.

Certificate Manager

  • Added command gcloud certificate-manager issuance-configs update.

Cloud Filestore

  • Added --clear-performance flag to gcloud beta filestore instances update and gcloud filestore instances update to support unsetting of performance configurations for filestore instances.

Cloud Firestore

  • Added support for VECTOR_CONFIG options in gcloud firestore indexes composite list command.
  • Added support for VECTOR_CONFIG options in gcloud firestore indexes composite describe command.

Cloud Memorystore

  • Added --cross-cluster-replication-role and --primary-cluster flags to gcloud redis clusters create for creating secondary clusters.
  • Added gcloud redis clusters switchover, gcloud redis clusters detach and gcloud redis clusters detach-secondaries commands for Cross Cluster Replication failover CUJs.

Cloud Run

  • Added --gpu and --gpu-type to gcloud beta run deploy and gcloud beta run services update which allow deploying a service with GPU.

Cloud Workstations

  • Added --allowed-ports flag support for gcloud workstations configs create.

Compute Engine

  • Updating --session-affinity to a value other than STRONG_COOKIE_AFFINITY clears the value of strongSessionAffinityCookie.
  • Added support for specifying multiple instances in gcloud compute instances perform-maintenance.
  • Promoted --bgp-best-path-selection-mode and related flags in gcloud compute networks create and update to beta.
  • gcloud compute instances ops-agents policies create/update no longer supports Centos 7, Centos 8 and Debian 10.

Database Migration

  • Updated gcloud database-migration connection-profiles create cloudsql to support MySQL_8_0_37 minor version option for Cloud SQL connection profiles.

GKE Hub

  • Modified gcloud beta container fleet memberships describe to call gkehub API version v1beta instead of v1beta1.
  • Modified gcloud beta container fleet memberships delete to call gkehub API version v1beta instead of v1beta1.
  • Modified gcloud beta container fleet memberships list to call gkehub API version v1beta instead of v1beta1.

Identity and Access Management

  • Added --credential-cert-path, --credential-key-path, and --credential-cert-config-path flags to gcloud iam workload pools create-cred-config. This enables using X509 certificate-sourced credentials with gcloud auth login --cred-file=/path/to/credential/config.json when using Workload Identity Federation.

Network Security

  • Promoted gcloud network-security address-groups --purpose field to GA.
  • Added network-security mirroring-deployment-groups commands to manage packet-mirroring deployment groups, and promoted them to beta.
  • Added network-security mirroring-deployments commands to manage packet-mirroring deployments, and promoted them to beta.
  • Added network-security mirroring-endpoint-groups commands to manage packet-mirroring endpoint groups, and promoted them to beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

487.0.0 (2024-08-06)

Breaking Changes

  • (Cloud Storage) Remove '-' in error message for non-matching GCloud buckets. Currently, when
  • (Cloud Storage) listing buckets, all buckets that don't match are prefixed with '-', which might
  • (Cloud Storage) confuse readers of the bucket URLs.
  • (Compute Engine) Changed behavior of --local-ssd flag so that unknown interfaces trigger an exception rather than defaulting to SCSI.

Google Cloud CLI

  • Updated linux bundled python for the gcloud CLI to 3.11.9.
  • Updated setuptools package to version 70.3.0.
  • Updated openssl package to version 3.0.14.

Cloud DNS

  • Added support to allow specifying Network Proxy load balancers as health checked targets for Routing Policies.

Cloud Dataproc

  • Use the cluster-pool name as the identifier of the staging directory path when using a cluster pool. This change applies to gcloud dataproc clusters create and gcloud dataproc clusters update commands.

Cloud Filestore

  • Added --performance flag to gcloud filestore instances create and gcloud filestore instances update to support performance configuration of filestore instances.

Cloud Firestore

  • Promoted --show-deleted flag of gcloud firestore databases list command to beta and GA.
  • Promoted --kms-key-name flag of gcloud firestore databases create command to beta and GA.

Cloud NetApp

  • Added --large-capacity and --multiple-endpoints flag to gcloud netapp volumes {create}.

Cloud On Demand Scanning

  • Added support for parsing RPM package databases in SQLite format.
  • Fixed issue where local-extract would return an error when running it in a container without the user manually overriding the gid and uid values.

Cloud Run

  • Modified the api enablement default prompt value to be Y for gcloud run deploy command.

Cloud SQL

  • Added gcloud sql instances switchover, which switches over a Cloud SQL instance to one of its replicas.

Cloud Storage

  • Fixed a bug in where IAM policies with conditional bindings were not supported because of version issue in gcloud storage buckets add-iam-policy-binding command.
  • Fixed a bug in objects update command where it was ignoring --clear-content-type flag.

Compute Engine

  • Promoted --source-regions flag of gcloud compute health-checks to GA.
  • Promoted --availability-domain flag of gcloud compute instances create to GA.
  • Added interface support to gcloud compute instances create, gcloud compute instances attach-disk and gcloud compute instance-templates create for persistent disks.

Distributed Cloud Edge

  • Fixed issue in gcloud edge-cloud container clusters create command where it was ignoring --offline-reboot-ttl flag.

GKE Hub

  • Modified --description flag of gcloud beta container fleet memberships create to be optional.

Security Command Center

  • Added UNDEFINED option to --mute flag of gcloud scc findings set-mute to reset finding mute state.
  • Added --mute-state flag to gcloud scc findings bulk-mute to facilitate resetting 'static' mute state.
  • Added --type flag to gcloud scc muteconfigs create to support creation of dynamically evaluated ('dynamic') mute configs.
  • Added --expiry-time flag to gcloud scc muteconfigs create and gcloud scc muteconfigs update to support creation and update of expiry time for temporary mute configs ('dynamic' only).
  • Promoted gcloud scc iac-validation-reports describe command to GA.
  • Promoted gcloud scc iac-validation-reports list command to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

486.0.0 (2024-07-30)

Cloud DNS

  • Added alpha support for creating health-checked routing policies in public zones. Use --health-check to indicate that all IP addresses should be health checked.

Cloud Filestore

  • Added --performance flag to gcloud beta filestore instances create and gcloud beta filestore instances update to support performance configuration of filestore instances.

Cloud Functions

  • Added --binary-authorization and --clear-binary-authorization flags for 2nd gen function.

Cloud Pub/Sub

Cloud SQL

  • Added --switch-transaction-logs-to-cloud-storage flag to gcloud sql instances patch to switch the transaction logs used for PITR from disk to Cloud Storage. Added show-transactional-log-storage-state flag to gcloud sql instances list to display the transaction logs storage location for all the instances under the project.

Cloud Workstations

  • Adding support for the source workstation flag in the beta workstations create command.

Compute Engine

  • Beta support for STRONG_COOKIE_AFFINITY sessionAffinity type.
  • Promoted --server-tls-policy and --clear-server-tls-policy for gcloud compute target-https-proxies create and gcloud compute target-https-proxies update to GA.

Compute Firewall Policy Mirroring Rules

  • Promoted gcloud compute firewall-policies mirroring-rules to beta.
  • Promoted gcloud compute network-firewall-policies mirroring-rules to beta.

GKE Hub

  • Promoted gcloud container fleet memberships support-access to GA.

Kubernetes Engine

  • Updated default kubectl from 1.27.15 to 1.28.12
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.12)
    • kubectl.1.29 (1.29.7)
    • kubectl.1.30 (1.30.3)

Privileged Access Manager

  • Promoted gcloud pam commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

485.0.0 (2024-07-23)

Breaking Changes

  • (Security Command Center) Removed rapid-vulnerability-detection service from "Google Cloud CLI" as it is deprecated.

AlloyDB

  • Added flag --allowed-psc-projects to gcloud alloydb instances create-secondary. This flag specifies a list of allowed consumer projects on a secondary instance in a cluster with Private Service Connect enabled.
  • Added --node-ids flag to gcloud alloydb instances restart command to the beta track. This flag allows users to allow users to specify a comma-separated list of read pool node IDs to perform the restart on. Without specifying, this flag every node in the read pool will be restarted.
  • Added --outbound-public-ip flag to gcloud alloydb instances create, gcloud alloydb instances create-secondary andgcloud alloydb instances update commands in the beta track. This flag allows users to allow users to enable public outbound connections within their primary instance. To disable public outbound IP you can use --no-outbound-public-ip.

Cloud Build

  • Promote Cloud Build gen2 commands under gcloud builds ... to beta status.

Cloud Deploy

  • Added gcloud deploy deploy-policies command group.

Cloud Functions

  • Validated iam permission of default build service account for both 1st gen and 2nd gen function in gcloud functions deploy. Warning will be prompted when roles/cloudbuild.builds.builder is missing.

Cloud Storage

  • Fixed a bug in sign-url command.

Cloud Workstations

  • Adding support for enabling unauthenticated CORS preflight requests in the gcloud beta workstations config commands.

Compute Engine

  • Fix issue with Google Compute Engine list commands that were slow when used with --limit.

Kubernetes Engine

  • Revert the default value of --max-nodes-per-pool from 2000 to 1000 and update the upper bound this value to be 2000.

Network Connectivity

  • Added updating include-import-ranges flag support for hybrid spokes.

Network Services

  • Clarify failover-health-threshold usage to remove the notion of an unsupported product.

Vmware Engine

  • Added --autoscaling-min-cluster-node-count, --autoscaling-max-cluster-node-count, --autoscaling-cool-down-period, --update-autoscaling-policy, --autoscaling-settings-from-file and --remove-autoscaling-policy to gcloud vmware private-clouds clusters update command to support autoscaling feature on update cluster.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

484.0.0 (2024-07-16)

Breaking Changes

  • (GKE Hub) gcloud container fleet memberships get-credentials now requires the permission gkehub.gateway.generateCredentials (automatically included in roles gkehub.gatewayReader, gkehub.gatewayEditor, and gkehub.gatewayAdmin), as well as network access to *connectgateway.googleapis.com.

AlloyDB

  • Added --node-ids flag to gcloud alloydb instances restart command in the alpha and beta tracks. This flag allows users to allow users to specify a comma-separated list of read pool node IDs to perform the restart on. Without specifying this flag, every node in the read pool will be restarted.

App Engine

Artifact Registry

  • Fixed error codes for gcloud artifacts docker upgrade migrate.

Batch

  • Fixed the --filter flag of gcloud batch list command to match gcloud topic filters syntax.

BigQuery

  • Added support for non-ASCII characters in the field mask when updating Connections.
  • Added support for configuration.authentication.profile_id in the field mask when updating Connections.
  • Fixed a bug where bq init would be called even when --use_google_auth is specified.

Cloud Build

  • Add support in gcloud builds worker-pools commands for default region set in config.

Cloud Data Fusion

  • Added three new optional arguments to gcloud beta data-fusion instances create command:
    • --maintenance-window-start
    • --maintenance-window-end
    • --maintenance-window-recurrence
    • These arguments allow users to specify the start time, end time, and recurrence of the maintenance window for their Data Fusion instance.
  • Add four new optional arguments to gcloud beta data-fusion instances update command:
    • --maintenance-window-start
    • --maintenance-window-end
    • --maintenance-window-recurrence
    • --clear-maintenance-window
    • These arguments allow users to update maintenance window for their Data Fusion instance by specifying the start time, end time, and recurrence, or clear the maintenance window using --clear-maintenance-window.

Cloud Run

  • Allows --revision-suffix to be specified with empty string to clear client-set revision naming.

Cloud SQL

  • Added --[no-]enable-dataplex-integration flag to gcloud sql instances create and gcloud sql instances patch to support Dataplex Integration for Cloud SQL.
  • Added support for MySQL 8.4.

Cloud Spanner

  • Promoted --type=DATABASE_CHANGE_QUORUM option in gcloud spanner operations list to GA.
  • Fixed the DATABASE_CHANGE_QUORUM type filter string in gcloud spanner operations list.

Cloud Workstations

  • Adding disable_ssl_validation support for workstations start-tcp-tunnel and workstations ssh.

Compute Engine

  • Added gcloud compute routers add-route-policy-term which adds policy term to a Route Policy in Cloud Router.
  • Promoted gcloud compute routers add-route-policy-term to beta.
  • Added gcloud compute routers update-route-policy-term which updates policy term in a Route Policy in Cloud Router.
  • Promoted gcloud compute routers update-route-policy-term to beta.
  • Added gcloud compute routers remove-route-policy-term which removes policy term from Route Policy in Cloud Router.
  • Promoted gcloud compute routers remove-route-policy-term to beta.
  • Fixed a bug in gcloud beta compute ssh where a third-party identity subject bearing an '@' sign wouldn't be URL-escaped in the way the OS Login API expects, causing spurious rejection.
  • Promoted support of flags to --detection-load-threshold, detection-absolute-qps, detection-relative-to-baseline-qps, and traffic-granularity-configs in gcloud compute security-policies add-layer7-ddos-defense-threshold-config to GA.

Dataproc Metastore

  • Promoted --min-scaling-factor, --max-scaling-factor, and --autoscaling-enabled flag of gcloud metastore services create and gcloud metastore services update to GA.

Distributed Cloud Edge

  • Added --offline-reboot-ttl flag to gcloud edge-cloud container clusters create and gcloud edge-cloud container clusters update commands. This flag specifies the maximum duration a node can reboot offline (without connection to Google) and then rejoin its cluster to resume its designated workloads.

Kubernetes Engine

  • Added flag option --addons=RayOperator to enable/disable the Ray Operator addon for GKE Standard clusters.
  • Added flag --[no]-enable-ray-operator to enable/disable the Ray Operator addon for GKE Autopilot clusters.
  • Added flag --[no]-enable-ray-cluster-logging to enable/disable automatic log collection for Ray clusters when the Ray Operator addon is enabled.
  • Added flag --[no]-enable-ray-cluster-monitoring to enable/disable automatic metrics collection for Ray clusters when the Ray Operator addon is enabled.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

483.0.0 (2024-07-02)

Google Cloud CLI

  • Enabled faster component update mode by default on Linux. This avoids making a backup copy of the installation directory when running certain gcloud components commands, which should significantly improve the time taken by these operations (including installation and updates).
  • Fixed issue where gcloud components update would leave installation in an unusable state when downloading certain components failed.

AlloyDB

  • Added the following flags to gcloud alloydb instances create and gcloud alloydb instances update in alpha and beta:
    • --observability-config-enabled
    • --observability-config-preserve-comments
    • --observability-config-track-wait-events
    • --observability-config-max-query-string-length
    • --observability-config-record-application-tags
    • --observability-config-query-plans-per-minute
    • --observability-config-track-active-queries
  • Promoted AlloyDB Cross Region Replication commands to beta and GA track. Modified commands include: alloydb clusters switchover.
  • Added creating cross region and project backups support to gcloud alloydb backups create command.
  • Added ability to create clusters with database_version POSTGRES_16 in beta track.

Batch

  • Release resource-allowances commands to the alpha track.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager supported-services to GA.

Cloud Filestore

  • Enable Filestore promote-replica command in GA track.

Cloud Functions

  • Added --binary-authorization and --clear-binary-authorization flags for 2nd gen function in alpha and beta track.

Cloud NetApp

  • Updated psa-range comments on gcloud netapp storage-pools and gcloud netapp volumes to indicate that the psa-range key is not used and will be ignored.

Cloud SQL

  • Adding support for clean and if-exists flags to parallel import and single-threaded-export.

Cloud Workstations

  • Added --vm-tags flag to gcloud workstations config create to add tags to the workstation's underlying VM.

Compute Engine

  • Promoted --preference flag of gcloud compute backend-services add-backend and gcloud compute backend-services update-backend to GA.
  • Promoted --service-lb-policy flag of gcloud compute backend-services create and gcloud compute backend-services update to GA.
  • Promote gcloud compute instances ops-agents to GA.
  • Added IDPF to the list of guestOsFeatures.
  • Promoted --max-run-duration flag of gcloud compute instances create to v1.
    • Allows specifying the duration of time after which the instance will terminate.
  • Promoted --termination-time flag of gcloud compute instances create to v1.
    • Allows specifying the timestamp that the instance will terminate.
  • Promoted --discard-local-ssds-at-termination-timestamp flag of gcloud compute instances create to v1.
    • Allows specifying the option to whether discard attached local SSDs when automatically stopping this VM

Network Security

  • Renamed FIREWALL_POLICY column to SOURCE_RESOURCE column in gcloud networksecurity address-groups list-references command.
  • Added --purpose flag to gcloud alpha/beta network-security address-groups create/update commands.

Secret Manager

  • Added flag --location and --regional-kms-key-name for secrets to use the regional secrets.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

482.0.0 (2024-06-25)

App Engine

  • Removed unused python2 dependencies that have CVEs.

Cloud Bigtable

  • Adds force option to cbt setgcpolicy.

Cloud Dataflow

  • Elevate jinja variables to top-level flag in dataflow yaml run.

Cloud Functions

  • Added --clear-build-service-account flag for gcloud functions deploy.

Cloud Key Management Service

  • Added --allowed-access-reasons flag to gcloud kms keys create to create a key with a Key Access Justifications policy configured.
  • Added --allowed-access-reasons flag to gcloud kms keys update to update the Key Access Justifications policy on a key.
  • Added --remove-key-access-justifications-policy flag to gcloud kms keys update to remove the Key Access Justifications policy on a key.

Cloud Services

  • Promoted gcloud services policies add-enable-rules to beta.
  • Promoted gcloud services policies remove-enable-rules to beta.
  • Promoted gcloud services policies get to beta.
  • Promoted gcloud services policies get-effective to beta.
  • Promoted gcloud services policies test-enabled to beta.
  • Promoted gcloud services groups list-ancestor-groups to beta.
  • Promoted gcloud services groups list-descendant-services to beta.
  • Promoted gcloud services groups list-members to beta.

Compute Engine

  • Added --size flag to gcloud compute instance-groups managed update for v1.
  • Promoted --confidential-compute-type flag for the command gcloud compute instance create to GA.
  • Promoted --performance-monitoring-unit flag for the command gcloud compute instance-templates create to GA.
  • Promoted --performance-monitoring-unit flag for the command gcloud compute instances bulk create to GA.
  • Promoted --performance-monitoring-unit flag for the command gcloud compute instances create to GA.

Kubernetes Engine

  • Updated default kubectl from 1.27.14 to 1.27.15.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.15)
    • kubectl.1.28 (1.28.11)
    • kubectl.1.25 (1.29.6)
    • kubectl.1.30 (1.30.2)

Network Connectivity

  • Added include-import-ranges flag to hybrid spoke creation to support importing hub subnets.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

481.0.0 (2024-06-18)

Breaking Changes

  • (Cloud Dataflow) Deprecated gcloud dataflow sql command group. The command group will be removed by 2025-01-31. See Beam YAML and Beam notebooks for alternatives.

AlloyDB

  • Added another option ASSIGN_IPV4 to flag --assign-inbound-public-ip to enable public IP for an instance to gcloud alloydb instances create and gcloud alloydb instances create-secondary.
  • Added flag --authorized-external-networks to set a list of authorized external networks on an instance to gcloud alloydb instances create and gcloud alloydb instances create-secondary.
  • Added switchover command.

Artifact Registry

  • Fixed a bug where gcloud artifacts files download and gcloud artifacts generic download would crash.

BigQuery

  • Added undelete command for datasets.
  • Updated google-auth to version 2.29.0.
  • Improved authentication error messaging.

Cloud Domains

  • Implemented the following commands for gcloud domains registrations google-domains-dns
    • get-forwarding-config
    • export-dns-record-sets

Cloud Filestore

  • Added --source-instance flag to gcloud filestore instances create and gcloud beta filestore instances create command to specify the instance will be created as a Standby replica of the source-instance.
  • Added promote-replica verb for filestore instances. promote-replica promotes a standby replication instance to a regular instance.

Cloud Functions

  • Promoted --build-service-account flag for gcloud functions deploy to GA.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap regional command to beta and GA.

Cloud Pub/Sub

Cloud Spanner

  • Added gcloud beta spanner instance-partitions command group.
  • Added --instance-partition flag to gcloud beta spanner operations list, gcloud beta spanner operations describe, and gcloud beta spanner operations cancel.

Cloud Storage

  • Added commands for creating, listing, describing, and deleting folders in buckets with hierarchical namespace enabled:
    • Added gcloud alpha storage folders create which creates folders.
    • Added gcloud alpha storage folders list which lists folders in buckets.
    • Added gcloud alpha storage folders describe which gets the folder's metadata.
    • Added gcloud alpha storage folders delete which deletes folders.
  • Updated gsutil component to 5.30.

Compute Engine

  • Promoted --confidential-compute-type flag for the command gcloud compute instance create to GA.
  • Added --size flag to gcloud compute instance-groups managed update for v1.

Network Connectivity

  • Updated gcloud network-connectivity internal-ranges update to support setting and clearing labels.
  • Added support for include-export-ranges to support include filters for VPC spokes.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

480.0.0 (2024-06-11)

App Engine

Artifact Registry

  • gcloud artifacts docker upgrade migrate now automatically creates repos for pkg.dev-based migration.
    • Added gcloud artifacts files delete command.

Cloud Datastream

  • Added --type and --sqlserver-* flags to gcloud datastream connection-profiles create|update and gcloud datastream objects lookup commands to support SQL server source.
  • Added --type and --sqlserver-* flags to gcloud datastream streams create|update commands to support SQL server source.
  • Added --sqlserver-rdbms-file flag and support for SQL Server profile to --connection-profile-object-file to gcloud datastream connection-profiles discover commands to support SQL server source.

Cloud Domains

  • Implemented the following commands for gcloud domains registrations
    • renew-domain
    • initiate-push-transfer

Cloud Functions

  • Added support for --execution-id flag when used together with --gen2 flag for gcloud functions logs read.

Cloud Healthcare

  • Added beta flag --enable-history-modifications to the fhir-stores create and fhir-stores update commands.

Cloud IAM

  • Updated iam service-accounts keys list to return additional properties, namely:
    • disable_reason: The reason the Service Account Key as been disabled (if applicable)
    • extended_status: Additional metadata about the Service Account Key

Cloud Memorystore

  • Added --zone-distribution-mode and --zone flags to gcloud redis clusters create for creating single zone clusters.

Cloud Pub/Sub

  • Added --bigquery-service-account-email and --cloud-storage-service-account-email flags to gcloud pubsub subscriptions create to set the service account for writing messages to BigQuery and Cloud Storage, respectively.
  • Added --bigquery-service-account-email and --cloud-storage-service-account-email flags to gcloud pubsub subscriptions create to update the service account for writing messages to BigQuery and Cloud Storage, respectively.

Cloud Spanner

  • Added --proto-descriptors-file to gcloud spanner databases create command to allow creating database with proto and enum type columns.
  • Added --proto-descriptors-file to gcloud spanner databases ddl update command to allow updating database with proto and enum type columns.
  • Added --include-proto-descriptors to gcloud spanner databases ddl describe command to allow proto descriptors for a database with proto and enum type columns.
  • Promoted gcloud spanner databases change-quorum command to GA.

Cloud Storage

  • Adds support of Cross Bucket Replication Feature in alpha track of gcloud transfer command group.

Cloud Workstations

  • Added --allowed-ports flag to gcloud beta workstations configs create and gcloud beta workstations configs update commands.
  • Added enable-nested-virtualization pool-size and boot-disk-size to --boost-configs flag in beta workstations configs create and beta workstations configs update.

Compute Engine

  • Added support for version=24.04 and short-name=ubuntu in --os-types for gcloud beta compute instances ops-agents policies [create|update].
  • Promoted Tls Early Data in TargetHttpsProxy compute API to v1.
  • Added gce_vm_ip_portmap Network Endpoint Group for gcloud compute network-endpoint-groups beta support.
  • Added --access-mode flag to gcloud compute disks create and gcloud compute disks update.
  • Added --tls-early-data flag to gcloud compute v1 target-https-proxies create/update to Tls Early Data field in Target Https Proxy.

Secret Manager

  • Added --version-destroy-ttl flag to gcloud secrets create to let users enable secret version delayed destruction on a secret.
  • Added --version-destroy-ttl flag to gcloud secrets update to let users enable/update secret version delayed destruction on a secret.
  • Added --remove-version-destroy-ttl flag to gcloud secrets update to let users disable secret version delayed destruction on a secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

479.0.0 (2024-06-04)

Breaking Changes

  • (Cloud Dataflow) gcloud dataflow flex-template build for Dataflow Flex Templates in Python with --env FLEX_TEMPLATE_PYTHON_REQUIREMENTS_FILE=/path/to/requirements.txt defined will run pip check after pip install while building the container image. This will break the build process if newly installed packages override pre-installed packages with a version that is known to be incompatible with other pre-installed packages. See https://cloud.google.com/dataflow/docs/guides/templates/configuring-flex-templates for alternative methods to build a container image without pip check.

Artifact Registry

  • Updated gcloud artifacts docker images command to include tags as list instead of string to enable use of --filter=tags=<SearchTerm>.

Cloud Composer

  • Added gcloud composer environments check-upgrade command. It checks that an environment upgrade does not fail because of PyPI module conflicts.
  • Added gcloud composer environments list-upgrades command. It lists all possible target versions that an existing environment can be upgraded to.

Cloud Dataproc

  • Updated gcloud dataproc session-templates export to filter out additional output only fields.

Cloud NetApp

  • Added --administrators flag to gcloud netapp active-directories create and gcloud netapp active-directories update.

Cloud SQL

  • Added --preferred-secondary-zone flag to gcloud sql instances clone command.

Compute Engine

  • Updated import and export schemas for gcloud compute forwarding-rules.
  • Promoted --ip-collection flag of gcloud compute forwarding-rules create to GA.
  • Promoted --ip-collection-region flag of gcloud compute forwarding-rules create to GA.

Compute OS Config

  • Added --allow-missing flag to gcloud compute os-config os-policy-assignments update to allow for creation of a new OS policy assignment resource if it does not exist.

Database Migration

  • Updated gcloud database-migration connection-profiles create cloudsql to support POSTGRES_16 version option for Cloud SQL connection profiles.

Distributed Cloud Edge

  • Added add/remove exclusion window flags for gcloud edge-cloud container clusters update to allow users to add/remove exclusion windows where automatic upgrades will be blocked within.

Service Extensions

  • Added the metadata field to the DEP extensions.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

478.0.0 (2024-05-29)

Google Cloud CLI

  • Improved error message for authentication errors.
  • Improved error message for service account impersonation refresh errors.
  • Fixed issue where some commands with a --uri flag would produce no output.

App Engine

  • Enable fetch_instance_after_connect_error for compute start-iap-tunnel in GA.
  • Allow IAP tunneling for instances with external IP when explicitly enabled via flag.

App Engine Flexible Environment

  • Enable fetch_instance_after_connect_error for compute start-iap-tunnel in GA.
  • Allow IAP tunneling for instances with external IP when explicitly enabled via flag.

Artifact Registry

  • Added gcloud artifacts files describe command.

Backup For GKE

  • Added --volume-data-restore-policy-bindings flag to gcloud container backup-restore restore-plans create and gcloud container backup-restore restore-plans update to enhance volume restore flexibility.
  • Added --volume-data-restore-policy-overrides-file flag to gcloud container backup-restore restores create to enhance volume restore flexibility.
  • Added --permissive-mode flag to gcloud container backup-restore backup-plans create and gcloud container backup-restore backup-plans update to enable bypassing the new backup-time restorability enforcement.
  • Added --filter-file flag to gcloud container backup-restore restores create to support Backup for GKE fine-grained restore.
  • Added --restore-order-file flag to gcloud <alpha|beta> container backup-restore restore-plans create and gcloud <alpha|beta> container backup-restore restore-plans update to support custom ordering while performing restore as part of Backup for GKE.
  • Added the following enum values for the flag --namespaced-resource-restore-mode to gcloud <alpha|beta> container backup-restore restore-plans create and gcloud <alpha|beta> container backup-restore restore-plans update to expand namespaced resource restore mode options:
    • merge-skip-on-conflict
    • merge-replace-volume-on-conflict
    • merge-replace-on-conflict
  • Deprecated --substitution-rules-file flag. Use --transformation-rules-file instead.

BigQuery

  • Added support for map_target_type with external parquet tables.
  • Added support for column_name_character_map to map special characters in column names during load jobs.
  • Added a printout of unreachable locations when datasets and jobs are listed and a region is down.

Cloud Dataplex

  • Promoted gcloud dataplex aspect-types command group to GA.
  • Promoted gcloud dataplex entry-groups command group to GA.
  • Promoted gcloud dataplex entry-types command group to GA.

Cloud Deploy

  • Fixed issue where skaffold files generated from deploy releases create flags did not include all profiles in the release's Delivery Pipeline.

Cloud Firestore

  • Promoted Cloud Firestore Backups and Restore gcloud CLI changes to beta.
    • Promoted gcloud firestore backups list command to beta.
    • Promoted gcloud firestore backups describe command to beta.
    • Promoted gcloud firestore backups delete command to beta.
    • Promoted gcloud firestore backups schedules create command to beta.
    • Promoted gcloud firestore backups schedules update command to beta.
    • Promoted gcloud firestore backups schedules describe command to beta.
    • Promoted gcloud firestore backups schedules delete command to beta.
    • Promoted gcloud firestore backups schedules list command to beta.
    • Promoted gcloud firestore databases restore command to beta.
  • Promoted Cloud Firestore Backups and Restore gcloud CLI changes to GA.
    • Promoted gcloud firestore backups list command to GA.
    • Promoted gcloud firestore backups describe command to GA.
    • Promoted gcloud firestore backups delete command to GA.
    • Promoted gcloud firestore backups schedules create command to GA.
    • Promoted gcloud firestore backups schedules update command to GA.
    • Promoted gcloud firestore backups schedules describe command to GA.
    • Promoted gcloud firestore backups schedules delete command to GA.
    • Promoted gcloud firestore backups schedules list command to GA.
    • Promoted gcloud firestore databases restore command to GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.7
    • Fixes unexpected responses from nested queries in Datastore Mode.
    • Add Auth Context support for Firestore triggers (2nd gen) in Firestore Emulator

Cloud Functions

  • Added validation to --runtime-update-policy argument.

Cloud SQL

  • Added PostgreSQL 16 to database versions.
  • Fixed issue where gcloud sql instances export and gcloud sql instances import would display only the operation selfLink field instead of the whole operation when run asynchronously with --async, regardless of the --format flag specified.
    • This behavior is now consistent with other gcloud sql instances commands.
    • To display only the selfLink field, use --format="value(selfLink)".

Cloud Workstations

  • Adding --env flag to gcloud workstations create.

Compute Engine

  • Added IPV6_ONLY option to --stack-type flag of gcloud compute vpn-gateways create command to create an IPv6-only VPN gateway.

Config Connector

Database Migration

  • Updated gcloud database-migrate connection-profiles update to update Database Migration Service connection profile for SQL Server to Cloud SQL-SQL Server migrations.
  • Updated gcloud database-migrate migration-jobs update to update Database Migration Service migration job for SQL Server to Cloud SQL-SQL Server migrations.

Dataproc Metastore

  • Added --deletion-protection flags to gcloud metastore services create GA release track to allow creating a Dataproc Metastore instance with delete protection.
  • Added --deletion-protection and --no-deletion-protection flags to gcloud metastore services update GA release track to allow updating a Dataproc Metastore instance with delete protection.

Security Command Center

  • Added --filter-modules flag in gcloud scc manage services describe ... api to filter response by modules.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

477.0.0 (2024-05-21)

Anthos

  • To support second device login in gcloud anthos auth command.

Cloud Functions

  • Fixed issue where gcloud functions deploy would crash on disconnecting vpc connector when --clear-vpc-connector flag was specified.

Cloud Memorystore

  • Added --[no-]deletion-protection flag to gcloud redis clusters create and gcloud redis clusters updateto allow enabling/disabling deletion protection for Redis Clusters.

Cloud SQL

  • When creating a replica instance with gcloud sql instances create --edition=enterprise-plus, infer --tier from the primary instance if --tier is not provided for new database types.

Compute Engine

  • Added support for adding labels to the disk in the following commands:
    • gcloud beta compute instances create
    • gcloud beta compute instance-templates create
    • gcloud beta compute instances create-with-container
    • gcloud beta compute instance-templates create-with-container.
  • Added support for --resource-policies in the following commands:
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create-with-container.
  • Changed all gcloud compute list commands to log a warning instead of raising an exception when receiving an empty response from AggregatedList requests, even if there are partial errors.

Declarative Workflows

  • Fixed issue where using gcloud beta resource-config bulk-export with certain --resource-types values (e.g. ComputeVPNTunnel, ComputeURLMap) would fail with INVALID_ARGUMENT when looking up the resources in Cloud Asset Inventory.

GKE Hub

  • Support --security-posture=enterprise flag in gcloud container fleet create, gcloud container fleet update in beta and GA track.
  • Support --security-posture=enterprise flag in gcloud container hub create, gcloud container hub update in beta and GA track.

Kubernetes Engine

  • Added flags --[no]-enable-insecure-kubelet-readonly-port and--[no]-autoprovisioning-enable-insecure-kubelet-readonly-port` to enable/disable the insecure Kubelet readonly port on clusters and node-pools.
  • Increased maximum argument to --num-nodes flag of gcloud container clusters create from 1000 to 2000.
  • Updated default kubectl from 1.27.13 to 1.27.14.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.14)
    • kubectl.1.28 (1.28.10)
    • kubectl.1.25 (1.29.5)
    • kubectl.1.30 (1.30.1)

Network Connectivity

  • Added gcloud network-connectivity policy-based-routes to beta.
  • Added IPV6 option to --protocol-version flag of gcloud network-connectivity policy-based-routes.

Network Security

  • Renamed FIREWALL_POLICY column to SOURCE_RESOURCE column in gcloud beta networksecurity address-groups list-references command.
  • Added security policies in the output of gcloud beta networksecurity address-groups list-references command.

Vmware Engine

  • Added GOOGLE_CLOUD_NETAPP_VOLUMES option to --peer-network-type flag of gcloud vmware network-peerings create to allow peering with Google Cloud NetApp Volumes projects.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

476.0.0 (2024-05-14)

Google Cloud CLI

  • Updated pyopenssl package to version 24.0.0 to enable cryptography version 42.0.5.

AlloyDB

  • Added flag --assign-inbound-public-ip to enable or disable public IP for an instance to gcloud alloydb instances create-secondary.
  • Added flag --ssl-mode to configure an instance's SSL mode to gcloud alloydb instances create-secondary.
  • Added flag --require-connectors to enforce whether or not all connections need to come from connectors (e.g. AlloyDB Auth Proxy) to gcloud alloydb instances create-secondary.

App Engine

  • Use java21 as the default runtime for app.yaml generated configuration. This change is compatible with gcloud app deploy command, when there is no app.yaml configuration for Java projects (Maven, or Gradle, or simple jar). Instead of using a java17 runtime target, App Engine deploys the application using the java21 runtime with an F2 instance class. To continue using the java17 runtime, create an app.yaml file, and specify runtime: java17.
  • Updated the Java SDK to version 2.0.27 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v2.0.27.

Cloud Bigtable

  • Rebuilding cbt cli with golang.org/x/net 0.24.0 which fixed CVE-2023-45288.
  • Added Authorized Views feature.

Cloud Dataplex

  • Added gcloud dataplex entries commands which allow manipulating Dataplex Catalog Entries.

Cloud Infrastructure Manager

  • Added --annotations flag for gcloud infra-manager previews create and gcloud infra-manager deployments apply commands.

Cloud Key Management Service

  • Added a new value ec-sign-ed25519 to the flag default-algorithm to support the asymmetric signing algorithm ED25529 through gcloud kms keys create|update and gcloud kms keys versions import.

Cloud Logging

  • Promoted gcloud logging views get-iam-policy command to GA.
  • Promoted gcloud logging views set-iam-policy command to GA.
  • Promoted gcloud logging views add-iam-policy-binding command to GA.
  • Promoted gcloud logging views remove-iam-policy-binding command to GA.

Cloud NetApp

  • Added --allow-auto-tiering to gcloud beta netapp storagepools to allow storage pool enable auto tiering.
  • Added --tiering-policy to gcloud beta netapp volumes to allow volume enable auto tiering.

Cloud Run

  • gcloud run jobs deploy --source has been fixed.

Cloud Storage

  • Updated gsutil component to 5.29.

Compute Engine

  • Deprecated gcloud compute instances move. See https://cloud.google.com/compute/docs/instances/moving-instance-across-zones for an alternative method.
  • Fixed inconsistency in IPv6 flag support for gcloud compute instances create-with-container and gcloud compute instance-templates create-with-container commands. Changes include added support for --internal-ipv6-address and --internal-ipv6-prefix-length flags, as well as stack-type, and ipv6-network-tier arguments for --network-interface flag.
  • Fixed inconsistency in reservation flag support for gcloud compute instances create-with-container and gcloud compute instance-templates create-with-container commands. Changes include added support for --reservation and --reservation-affinity flags.
  • Added specific-then-any-reservation and specific-then-no-reservation to the flag --reservation-affinity for alpha and beta in gcloud compute instances create and gcloud compute instance-templates create-with-container commands.
  • Promoted --mode flag of gcloud compute public-delegated-prefixes create to GA.
  • Promoted --allocatable-prefix-length flag of gcloud compute public-delegated-prefixes create to GA.
  • Promoted --mode flag of gcloud compute public-delegated-prefixes delegated-sub-prefixes create to GA.
  • Promoted --allocatable-prefix-length flag of gcloud compute public-delegated-prefixes delegated-sub-prefixes create to GA.
  • Added gcloud compute routers add-route-policy which creates an empty Route Policy in Cloud Router.
  • Promoted gcloud compute routers add-route-policy to beta.
  • Added gcloud compute routers get-route-policy which describe Route Policy from Cloud Router.
  • Promoted gcloud compute routers get-route-policy to beta.
  • Added gcloud compute routers download-route-policy which downloads Cloud Router's Route Policy into a file.
  • Promoted gcloud compute routers download-route-policy to beta.
  • Added gcloud compute routers list-bgp-routes which lists the routes advertised and learned on individual BGP sessions, both pre- and post-policy evaluation.
  • Promoted gcloud compute routers list-bgp-routes to beta.
  • Added gcloud compute routers list-route-policies which lists all Route Policy within Cloud Router.
  • Promoted gcloud compute routers list-route-policies to beta.
  • Added gcloud compute routers remove-route-policy which removes Cloud Router's Route Policy.
  • Promoted gcloud compute routers remove-route-policy to beta.
  • Added gcloud compute routers upload-route-policy which uploads Route Policy from a file and adds it to Cloud Router.
  • Promoted gcloud compute routers upload-route-policy to beta.
  • Added --import-policies and --export-policies flags to gcloud compute routers add-bgp-peer and gcloud compute routers update-bgp-peer to apply Cloud Router's Route Policies to Cloud Router Bgp Peer.
  • Promoted --import-policies and --export-policies flags of gcloud compute routers add-bgp-peer and gcloud compute routers update-bgp-peer to beta.
  • Added --bgp-identifier-range flag to gcloud compute routers create and gcloud compute routers update.
  • Added --enable-ipv4, --ipv4-nexthop-address, and --peer-ipv4-nexthop-address flags to gcloud compute routers add-bgp-peer and gcloud compute routers update-bgp-peer.
  • Added --ip-version flag to gcloud compute routers add-interface and gcloud compute routers update-interface. Additionally, --ip-address flag of these commands will now accept IPv6 addresses.
  • Promoted --maintenance-interval flag for gcloud compute sole-tenancy node-groups create to GA.
  • Promoted gcloud compute sole-tenancy node-groups perform-maintenance to GA.
  • Added --terraform-script-output-file, --exclusion-patterns-file and --export-exclusion-patterns flags to gcloud (alpha|beta) compute firewall-rules migrate commands.

Database Migration

  • Updated gcloud database-migration connection-profiles create cloudsql to support MySQL_8_0_36 minor version option for Cloud SQL connection profiles.

Eventarc

  • Removed gcloud beta eventarc, including warnings and errors. User are expected to use gcloud eventarc instead.

Kpt

Kubernetes Engine

  • Updated default kubectl from 1.26.15 to 1.27.13.
  • Additional kubectl versions:
    • kubectl.1.27 (1.27.13)
    • kubectl.1.28 (1.28.9)
    • kubectl.1.29 (1.29.4)
    • kubectl.1.30 (1.30.0)

Network Connectivity

  • Added --policy-mode and --preset-topology flags to gcloud network-connectivity hubs create.
  • Added gcloud network-connectivity hubs groups update.

Security Command Center

  • Deprecated read-time and compare-duration flags from the findings list and findings group commands.
  • Promoted management api gcloud scc manage services ... commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

475.0.0 (2024-05-07)

Google Cloud CLI

  • Enabled faster component update mode by default on macOS. This avoids making a backup copy of the installation directory when running certain gcloud components commands, which should significantly improve the time taken by these operations (including installation and updates).
    • If for some reason this change causes problems, please file a bug report. One can temporarily revert to the legacy update mode via gcloud config set experimental/fast_component_update False or by setting the environment variable CLOUDSDK_EXPERIMENTAL_FAST_COMPONENT_UPDATE=False (it may be necessary to first reinstall the gcloud CLI either from scratch or by running gcloud components reinstall). Note that the faster update mode will eventually become the default on all platforms at which point the fast_component_update mode property will be removed.
    • Since the gcloud CLI no longer makes a full copy of the installation directory to allow for this performance improvement, gcloud components restore has been deprecated. However, equivalent functionality can be achieved via gcloud components update --version=<previous version> or gcloud components reinstall, depending on whether one needs to restore an earlier version or reinstall the current version, respectively.

Anthos Multi-Cloud

  • Updated gcloud container attached clusters register to fail when using --has-private-issuer with --distribution=eks.

Artifact Registry

  • Fixed bug where gcloud artifacts docker upgrade migrate sometimes excluded bucket auth from generated IAM policies.

Cloud Build

  • Modified gcloud builds submit to support submitting a build with a Developer Connect GitRepositoryLink resource.

Cloud Dataflow

  • Promoted gcloud dataflow yaml run to GA.

Cloud Datastream

  • Fix bug where append only flag not recognized in BiQueryDestinationConfig.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.6
    • Added --import-data and --export-on-exit flags.
    • Fixed few bugs regarding transactions, including: read only commits, retriable transactions and contention errors on commits.

Cloud NetApp

  • Added flex as a --service-level option during gcloud netapp storage-pools create.

Compute Engine

  • Promoted dual stack IPv6 support for gcloud compute instances create-with-container and gcloud compute instance-templates create-with-container to GA.

Network Connectivity

  • Promote Regional API Endpoints to GA.
  • Added --export-psc and --no-export-psc flags to gcloud network-connectivity hubs create and gcloud network-connectivity hubs update.

Network Security

  • Fixed gcloud network-security tls-inspection-policies import not recognizing minTlsVersion and tlsFeatureProfile.
  • Fixed gcloud network-security tls-inspection-policies export not recognizing minTlsVersion and tlsFeatureProfile.

Security Command Center

  • Removed misleading documentation in gcloud scc findings create command that imply findings can be created at folder and project level. This command only allows findings to be created under an organization.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

474.0.0 (2024-04-30)

Breaking Changes

  • (Cloud Run) gcloud run jobs deploy is not working with source builds in this release. Run gcloud builds submit and then gcloud run jobs deploy with the generated image, or use Google Cloud CLI version 472 or earlier.

AI

  • Added more choice options to --region flag of gcloud ai custom-jobs and gcloud ai hp-tunining-jobs, including: africa-south1, europe-west12, me-central1, me-central2 and us-east5.

AlloyDB

  • Updated gcloud beta alloydb clusters create-secondary to support automated backup policy.
  • Added flags --maintenance-window-day and --maintenance-window-hour to configure preferred maintenance window for a cluster to commands gcloud alloydb clusters create and gcloud alloydb clusters update.
  • Added flag --maintenance-window-any to remove preferred maintenance window for a cluster to gcloud alloydb clusters update.

Artifact Registry

  • Added gcloud artifacts generic upload to support uploading to a Generic Repository.
  • Added gcloud artifacts generic download to support downloading to a Generic Repository.

Cloud DNS

  • Modified --description flag of gcloud dns managed-zones create to be optional instead of required. If not set, the managed zone's description will be empty.

Cloud Monitoring

  • Added --service-agent-auth flag to gcloud monitoring uptime commands.

Compute Engine

  • Added --tls-early-data flag to gcloud compute alpha/beta target-https-proxies create/update to Tls Early Data field in Target Https Proxy.
  • Added gcloud compute project-zonal-metadata for managing project zonal metadata. Documentation of this feature is available at https://cloud.google.com/compute/docs/metadata/setting-custom-metadata#set-custom-project-zonal-metadata.
  • Promoted --stack-type flag of gcloud compute interconnects attachments partner create to GA. Flag defines the stack type of partner interconnect attachment.
  • Promoted --stack-type flag of gcloud compute interconnects attachments partner update to GA. Flag defines the stack type of interconnect attachment.
  • Added producer-port argument when creating PSC NEGs. This is an optional field, and used to specify the port the PSC NEG will consume traffic from the PSC Producer.
  • Promoted the flag of --partner-metadata and --partner-metadata-from-file to beta in:
    • gcloud compute instance-templates create.
    • gcloud compute instances create.
    • gcloud compute instances update.
  • Promoted gcloud compute instances add-partner-metadata command to beta.
  • Promoted gcloud compute instances patch-partner-metadata command to beta.
  • Promoted gcloud compute instances remove-partner-metadata command to beta.
  • Promoted the flag of --view to beta in:
    • gcloud compute instance-templates list
    • gcloud compute instance-templates describe.
    • gcloud compute instances list
    • gcloud compute instances describe.

Firebase Test Lab

  • Promoted --resign flag of gcloud firebase test android run to GA. This flag allows clients to specify if Robo should re-sign the app-under-test APK.

Kubernetes Engine

  • Updated kubectl versions:
    • kubectl.1.26 (1.26.15)
    • kubectl.1.27 (1.27.13)
    • kubectl.1.28 (1.28.9)
    • kubectl.1.29 (1.29.4)
    • kubectl.1.30 (1.30.0)
  • Updated help text for --cluster-ipv4-cidr to clarify that this flag is not applicable in a Shared VPC setup.

Network Services

  • Promoted gcloud network-services service-lb-policies to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

473.0.0 (2024-04-23)

Breaking Changes

  • (Cloud Domains) Changed the default setting of DNSSEC to disabled when using the Cloud DNS Zone in gcloud domains registrations configure dns command. It's unsafe to enable it by default.

Google Cloud CLI

  • Enabled faster component update mode by default on Windows. This avoids making a backup copy of the installation directory when running certain gcloud components commands, which should significantly improve the time taken by these operations (including installation and updates).
    • If for some reason this change causes problems, please file a bug report. One can temporarily revert to the legacy update mode via gcloud config set experimental/fast_component_update False or by setting the environment variable CLOUDSDK_EXPERIMENTAL_FAST_COMPONENT_UPDATE=False (it may be necessary to first reinstall the gcloud CLI either from scratch or by running gcloud components reinstall). Note that the faster update mode will eventually become the default on all platforms at which point the fast_component_update mode property will be removed.
    • Since the gcloud CLI no longer makes a full copy of the installation directory to allow for this performance improvement, gcloud components restore has been deprecated. However, equivalent functionality can be achieved via gcloud components update --version=<previous version> or gcloud components reinstall, depending on whether one needs to restore an earlier version or reinstall the current version, respectively.
  • Updated Windows PuTTY executables to version 0.81.

Artifact Registry

  • Added file name to gcloud artifacts files download progress message.

Backup For GKE

  • Added a new command gcloud container backup-restore backups get-backup-index-download-url.

Cloud Composer

  • Added --image-version to gcloud composer environments update to upgrade composer environment to a newer composer version.

Cloud Domains

  • Deprecated --unsafe-dns-update flag from gcloud domains registrations configure dns command.

Cloud IAM

  • Added --extra-attributes-client-id flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup client id for extra attributes oauth2 flow.
  • Added --extra-attributes-client-secret-value flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup client secret for extra attributes oauth2 flow.
  • Added --extra-attributes-issuer-uri flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup issuer uri for extra attributes oauth2 flow.
  • Added --extra-attributes-type flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup attributes type for extra attributes oauth2 flow.
  • Added --extra-attributes-filter flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup filter for extra attributes oauth2 flow.
  • Added --clear-extra-attributes-config flag to gcloud iam workforce-pools providers update-oidc which allow user to clear extra attributes oauth2 config.

Cloud NetApp

Cloud Run

  • Promoted --network, --subnet, --network-tags, --clear-network and --clear-network-tags flags in all commands to GA.

Compute Engine

  • Fixed a bug where an incorrect error message shown when attempting to specify multiple storage locations on gcloud compute snapshot-settings update command.
  • Added commands <get|set>-iam-policy and <add|remove>-iam-policy-bindings to gcloud compute backend-buckets for GA.

Kubernetes Engine

  • Promote --containerd-config-from-file flags to GA in container cluster and node-pools creation.

Privileged Access Manager

  • Added gcloud beta pam command group which helps manage Privileged Access Manager (PAM) entitlements and grants.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

472.0.0 (2024-04-16)

AI

  • Promoted gcloud ai persistent-resources to GA.
  • Added gcloud ai persistent-resources reboot which allows a user to reboot a Persistent Resource.
  • Promoted --persistent-resource-id flag of gcloud ai custom-jobs create to GA.

AlloyDB

  • Added flag --enable-private-service-connect to enable Private Service Connect for a cluster to the following commands in the GA track:

    • gcloud alloydb clusters create
    • gcloud alloydb clusters restore

  • Added flag --allowed-psc-projects to set a list of allowed consumer projects on an instance in a cluster with Private Service Connect enabled to the following commands in the GA track:

    • gcloud alloydb instances create
    • gcloud alloydb instances update

App Engine

  • Updated dependencies to latest versions.
  • Removed obsolete python2 support code fragments.
  • Fixed an issue with local images API emulator in devappserver.

Artifact Registry

  • Added support for domain-scoped projects to gcloud artifacts docker upgrade migrate.

BigQuery

  • Fixed incorrect help text of mk and update.
  • Added --null_marker flag for creating external tables.
  • Fixed a bug when using --use_google_auth on Windows.
  • Switched to using Google Auth by default for users authenticating with P12 service account keys. To revert to the old behavior, run the command with --nouse_google_auth. Note that the P12 key format has been deprecated and the new JSON key format is recommended. For more information, see https://cloud.google.com/sdk/crypto.

Certificate Manager

  • Added --allowlisted-certificates flag to gcloud certificate-manager trust-configs create.
  • Added --add-allowlisted-certificates, --remove-allowlisted-certificates and --clear-allowlisted-certificates flags to gcloud certificate-manager trust-configs update.

Cloud Build

  • Added --polling-interval argument to gcloud builds submit.

Cloud Datastream

  • Fix list connection profiles to show all connection profile types.
  • Updated BigQueryDestinationConfig with new fields (currently experimental).
  • Updated schemas.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.5
    • Import and export entities now supported in gcloud CLI for Datastore Mode.

Cloud Infrastructure Manager

  • Added --file flag to gcloud infra-manager deployments import-statefile to upload statefile for a deployment.

Cloud NetApp

  • Fixed bug during gcloud netapp volumes update --backup-config=enable-scheduled-backups=false that wasn't correctly updating update mask.

Cloud SQL

  • Published Cloud SQL Auth Proxy v2 binary as new cloud-sql-proxy Cloud SDK component. cloud-sql-proxy contains utilities for connecting securely to your Cloud SQL instances. It may be installed with gcloud components install cloud-sql-proxy and is recommended over cloud_sql_proxy (v1) which will be removed at a later date. See https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/main/migration-guide.md for help migrating.

Cloud Spanner

  • Added flag target-config to support moving instance to a different instance config in gcloud CLI and introduced gcloud spanner instances move command. Promoted the same to GA.

Compute Engine

  • Modified location flag from gcloud compute connect-to-serial-port command to use region from zone flag as location if location is unspecified.
  • Added target-service argument when creating PSC service attachments and treated as a mutually exclusive group with the existing argument producer-forwarding-rule.
  • Promoted --gateway-ip-version flag of gcloud compute vpn-gateways create to GA.
  • Promoted --interface to use IPv6 address flag of gcloud compute external-vpn-gateways create to GA.
  • Now all gcloud compute commands allow regions down and return the partial results by default when sending an AggregatedList requests. Users can turn off this feature by setting compute/allow_partial_error property to false.

Database Migration

  • Added --skip-validation param to gcloud database-migration migration-jobs resume to allow resuming migration jobs without running validations.

Dataproc Metastore

  • Added gcloud metastore services migrations command group to manage the migration to a Dataproc Metastore service.

    • gcloud metastore services migrations start
    • gcloud metastore services migrations complete
    • gcloud metastore services migrations cancel
    • gcloud metastore services migrations describe
    • gcloud metastore services migrations list
    • gcloud metastore services migrations delete

  • Added --min-scaling-factor, --max-scaling-factor, and --autoscaling-enabled flags to gcloud metastore services create and gcloud metastore services update alpha and beta release track to allow updating the autoscaling configuration of a Dataproc Metastore instance.

  • Updated --scaling-factor help text.

Eventarc

  • Removed gcloud beta eventarc. User are expected to use gcloud eventarc instead.

Workbench

  • Added NVIDIA_L4 option to --accelerator-type flag of workbench instances.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

471.0.0 (2024-04-02)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added flag --assign-inbound-public-ip to enable or disable public IP for an instance to the following commands in the GA track:

    • gcloud alloydb instances create
    • gcloud alloydb instances update

  • Added flag --authorized-external-networks to set a list of authorized external networks on an instance to gcloud alloydb instances update in the GA track.

App Engine

BigQuery

  • Downgraded urllib3 to version 1.26.9 be compatible with the request lib.

Certificate Authority Service

  • Added Subject Key Id field to arguments gcloud privateca roots create to allow usage of a custom subject key id for root certificate authorities.
  • Added Subject Key Id field to arguments gcloud privateca subordinates create to allow usage of a custom subject key id for subordinate certificate authorities.
  • Added Subject Key Id field to arguments gcloud privateca certificates create to allow usage of a custom subject key id for certificates.
  • Added maximum lifetime argument to gcloud privateca templates create to allow configuring maximum lifetime restriction using certificate templates.

Certificate Manager

  • Added allowlistedCertificates property to certificate-manager trust-configs import and certificate-manager trust-configs export.

Cloud Bigtable

  • Rebuilt cbt cli with google.golang.org/protobuf version 1.33.0 which fixed CVE-2024-24786.

Cloud Bigtable Emulator

  • Rebuilt cbt cli with google.golang.org/protobuf version 1.33.0 which fixed CVE-2024-24786.

Cloud Composer

  • Added gcloud beta composer environments list-workloads to display Composer workloads list.
  • Added gcloud beta composer environments user-workloads-config-maps create to create a user workloads ConfigMap.
  • Added gcloud beta composer environments user-workloads-config-maps delete to delete a user workloads ConfigMap.
  • Added gcloud beta composer environments user-workloads-config-maps describe to get details about a user workloads ConfigMap.
  • Added gcloud beta composer environments user-workloads-config-maps list to list user workloads ConfigMaps.
  • Added gcloud beta composer environments user-workloads-config-maps update to update a user workloads ConfigMap.
  • Added gcloud beta composer environments user-workloads-secrets create to create a user workloads Secret.
  • Added gcloud beta composer environments user-workloads-secrets delete to delete a user workloads Secret.
  • Added gcloud beta composer environments user-workloads-secrets describe to get details about a user workloads Secret.
  • Added gcloud beta composer environments user-workloads-secrets list to list user user workloads Secrets.
  • Added gcloud beta composer environments user-workloads-secrets update to update a user workloads Secret.

Cloud Deploy

  • Updated gcloud deploy apply to accept the Automation resource YAML configuration with the field names in the API proto.

Cloud Infrastructure Manager

  • Added --file flag to gcloud infra-manager deployments export-statefile to download statefile with a custom file name/path or by default to a file named statefile if only file path is provided.

Cloud Memorystore

  • Add --node-type flag to redis clusters create to add the ability to create clusters with different node types.

Cloud NetApp

  • Added --backup-config and --source-backup to gcloud netapp volumes to allow scheduled backups and create volume from backup workflow.

Cloud Pub/Sub

Cloud Run

  • Updated integration name generation logic to use the integration type followed by 4 digit hash.

Cloud SQL

  • Support for designating a disaster recovery replica in gcloud sql instances patch command using --failover-dr-replica-name flag is in beta.

Compute Engine

Compute OS Config

  • Added gcloud compute os-config project-feature-settings commands that allow to view and change the project feature settings.

Database Migration

  • Added gcloud database-migrate connection-profiles create sqlserver which creates a Database Migration Service connection profile for SQL Server.
  • Updated gcloud database-migrate migration-jobs create to create Database Migration Service migration job for SQL Server to Cloud SQL-SQL Server migrations.
  • Added --dump-type to gcloud database-migrate migration-jobs create to allow creating a migration job with PHYSICAL or LOGICAL dump type.
  • Added --dump-type to gcloud database-migrate migration-jobs update to allow updating a migration job with PHYSICAL or LOGICAL dump type.

GKE Hub

  • Updated gcloud container fleet scopes list to return Fleet Scopes permitted to be viewed by the caller.
  • Added gcloud container fleet scopes list-memberships SCOPE to return Fleet Memberships bound to SCOPE.

Kubernetes Engine

  • Added --additive-vpc-scope-dns-domain and --disable-additive-vpc-scope flags to gcloud container clusters create, create-auto and update.
  • Added --security-posture=enterprise flag to gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update to enable GKE Threat Detection.

Regional Endpoints

  • Add optional address input flag to gcloud beta networkconnectivity regional-endpoints create.

Workbench

  • Fixed issue with gcloud workbench instances failing when accelerator-type flag is set to NVIDIA_A100_80GB.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

470.0.0 (2024-03-26)

Breaking Changes

  • (App Hub) Fixed issue where gcloud apphub discovered-services lookup --location=LOCATION --uri=URI was formatting result as list to stdout.
  • (App Hub) Fixed issue where gcloud apphub discovered-workloads lookup --location=LOCATION --uri=URI was formatting result as list to stdout.

AlloyDB

  • Updated gcloud beta alloydb clusters create-secondary to support continuous backup configuration.

App Engine

  • Updated the Python devappserver to version 1.9.111.

Artifact Registry

  • Fixed issue where gcloud artifacts docker upgrade migrate returned wrong IAM policy bindings.

BigQuery

  • Added use_google_auth to use the Google Auth libraries for authentication.

Cloud Bigtable

  • Promoted gcloud bigtable authorized-views create to GA.
  • Promoted gcloud bigtable authorized-views describe to GA.
  • Promoted gcloud bigtable authorized-views list to GA.
  • Promoted gcloud bigtable authorized-views update to GA.
  • Promoted gcloud bigtable authorized-views delete to GA.
  • Promoted gcloud bigtable authorized-views get-iam-policy to GA.
  • Promoted gcloud bigtable authorized-views set-iam-policy to GA.
  • Promoted gcloud bigtable authorized-views add-iam-policy-binding to GA.
  • Promoted gcloud bigtable authorized-views remove-iam-policy-binding to GA.

Cloud Build

  • Add --service-account option to gcloud builds submit.

Cloud Composer

  • Added --network-attachment to gcloud composer beta environments create to specify network attachment.
  • Added --support-web-server-plugins to gcloud composer beta environments create to enable/disable the support for web server plugins.
  • Added --enable-private-builds-only to gcloud composer beta environments create/update to enable only private connectivity to Google services for Python packages.
  • Added --disable-private-builds-only to gcloud composer beta environments create/update to disable only private connectivity to Google services for Python packages.
  • Added --disable-vpc-connectivity to gcloud composer beta environments create/update to disable connectivity with a user's VPC network.
  • Added --enable-private-environment to gcloud composer beta environments create/update to disable internet connection from any Composer component.
  • Added --disable-private-environment to gcloud composer beta environments create/update to enable internet connection from any Composer component.
  • Added --composer-internal-ipv4-cidr-block to gcloud composer beta environments create/update to specify the IP range in CIDR notation to use internally by Cloud Composer.
  • Added --clear-maintenance-window to gcloud composer beta environments update to clear the maintenance window settings.
  • Added --dag-processor-storage to gcloud composer beta environments create/update to specify the storage allocated to Airflow dag processor.
  • Added --dag-processor-count to gcloud composer beta environments create/update to specify the number of dag processors.
  • Added --dag-processor-cpu to gcloud composer beta environments create/update to specify the CPU allocated to Airflow dag processor.
  • Added --dag-processor-memory to gcloud composer beta environments create/update to specify the memory allocated to Airflow dag processor.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.4
    • Fixes minor reserve ids bug in Datastore Mode
    • Add reset endpoint for Datastore Mode

Cloud Logging

  • Add include-children flag to gcloud logging sinks update command to export logs from descendant resources.
  • Add intercept-children flag to gcloud logging sinks create command to intercept logs from descendant resources.
  • Add intercept-children flag to gcloud logging sinks update command to intercept logs from descendant resources.
  • Add sink-filter flag to gcloud logging sinks list command.

Cloud Memorystore

  • Add redis_7_2 enum to gcloud redis instances create and gcloud redis instances upgrade to support redis version 7.2 instance create/upgrade.
  • Add --redis-config flag to redis clusters create to add the ability to specify Redis config when creating a redis cluster.
  • Add --update-redis-config flag to redis clusters update to update Redis config for existing clusters.
  • Add --remove-redis-config flag to redis clusters update to remove Redis config for existing clusters.

Cloud Run

  • Added vertex-genai integration type to gcloud beta run integrations command group.
  • Added cloudsql integration type to gcloud beta run integrations command group.

Cloud SQL

  • Added --[no-]enable-google-ml-integration flag to gcloud sql instances create and gcloud sql instances patch to support Vertex AI Integration for Cloud SQL. This is currently only supported in Postgres instances.

Cloud Storage

  • Promoted managed-folders command group to GA.
  • Promoted --include-managed-folders flag for cp, mv, and rsync to GA.
  • Promoted --exclude-managed-folders flag for rm to GA.

Cloud Workstations

  • Added --boost-configs flag to beta workstations configs create and beta workstations configs update and --boost flag to beta workstations start.
  • Promoted --accelerator-count and --accelerator-type flags of gcloud workstations configs create and gcloud workstations configs update to GA.

Compute Engine

  • Promoted --resource-manager-tags flag of compute instance-groups managed create to beta. Flag allows creating Managed Instance Group with Resource Manager Tags.
  • Promoted --image-zone flag of gcloud compute images list to beta.
  • Changed OS Login metadata for certificates to enable-oslogin-certificates instead of require-oslogin-certificates.
  • Promoted --no-address flag in --network-interface of gcloud compute instances bulk create to GA.
  • Fixed a bug when parsing the scope of the disk type if replica-zones contains two values in --create-disk flag of gcloud compute instances create.

Kubernetes Engine

  • Updated default kubectl from 1.26.14 to 1.26.15.
  • Additional kubectl versions:
    • kubectl.1.26 (1.26.15)
    • kubectl.1.27 (1.27.12)
    • kubectl.1.28 (1.28.8)
    • kubectl.1.29 (1.29.3)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

469.0.0 (2024-03-19)

Google Cloud CLI

  • Updated bundled-python for windows to version 3.11.8.
  • Updated openssl package to version 3.0.13.

Anthos Multi-Cloud

  • Added --ignore-errors flag to the following command groups: gcloud container aws clusters delete, gcloud container aws node-pools delete, gcloud container azure clusters delete, gcloud container azure node-pools delete, to allow the delete request to succeed, even if errors occur while deleting in-cluster resources.

Artifact Registry

  • Modified gcloud docker images list and gcloud artifacts versions describe to display image size.
  • Fixed issue where gcloud artifacts versions describe formatted extra metadata incorrectly.

BigQuery

  • Began internal refactoring that will continue for this minor version number.
  • Added copy_files_only to load commands targeting BigLake tables.
  • Added universe_domain, use_lep and use_rep as alternatives to using api and use_regional_endpoints.
  • Added support for DELTA_LAKE external table types.
  • Added support to load some configuration that has been set in gcloud config.
  • Exposed more information to the bq info command.
  • Exposes connector_configuration options when creating a connection.

Cloud Bigtable

  • Added support for types and aggregates to the cbt CLI.
  • Added support for Standard Isolation and Data Boost in gcloud beta bigtable app-profiles {create,update,list}.

Cloud Dataproc

  • Updated gcloud dataproc session-templates export to filter out additional output only fields.

Cloud Pub/Sub

  • Added flags to gcloud pubsub topics create to support creating Cloud Pub/Sub Import Topics.
    • Added --kinesis-ingestion-consumer-arn
    • Added --kinesis-ingestion-role-arn
    • Added --kinesis-ingestion-service-account
    • Added --kinesis-ingestion-stream-arn
  • Added flags to gcloud pubsub topics update to support updating Cloud Pub/Sub Import Topics.
    • Added --clear-ingestion-data-source-settings
    • Added --kinesis-ingestion-consumer-arn
    • Added --kinesis-ingestion-role-arn
    • Added --kinesis-ingestion-service-account
    • Added --kinesis-ingestion-stream-arn

Cloud Run

  • Support volumes with type=nfs in gcloud beta run deploy, gcloud beta run services update, gcloud beta run jobs deploy and gcloud beta run jobs update.

Cloud Workstations

  • Added disable-ssh-to-vm flag support for gcloud CLI workstations GA.

Compute Engine

  • Modified location flag from gcloud compute connect-to-serial-port beta command to use region from zone flag as location if location is unspecified.

Database Migration

  • Updated gcloud database-migrate migration-jobs create to support the type of data dump for MySQL to Cloud SQL-MySQL migrations.
  • Updated gcloud database-migrate migration-jobs update to support the type of data dump for MySQL to Cloud SQL-MySQL migrations.

Kubernetes Engine

  • Updated default kubectl from 1.26.13 to 1.26.14.
  • Additional kubectl versions:
    • kubectl.1.26 (1.26.14)
    • kubectl.1.27 (1.27.11)
    • kubectl.1.28 (1.28.7)
    • kubectl.1.28 (1.29.2)

Network Security

  • Promoted gcloud network-security firewall-endpoints to GA track.
  • Promoted gcloud network-security firewall-endpoint-associations to GA track.
  • Promoted gcloud network-security security-profiles to GA track.
  • Promoted gcloud network-security security-profile-groups to GA track.

Recaptcha

  • Add akamai option to --waf-service flag from gcloud recaptcha keys create command to support creating Akamai enabled site keys.

Workbench

  • Added workbench instances get-config to describe the valid configurations for workbench instances.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

468.0.0 (2024-03-12)

App Engine

App Hub

  • Promoted gcloud apphub to GA.

Artifact Registry

  • Added gcloud artifacts files download which downloads a file to the local environment.
  • Allowed --remote-mvn-repo, --remote-docker-repo, --remote-npm-repo, and --remote-python-repo flags to be a custom registry uri (ex: https://registry-1.docker.io) as well as the already-supported registry enum (ex: docker-hub) for artifacts repositories create.
  • Added --disable-remote-validation flag for artifacts repositories create and artifacts repositories update.
  • Added gcloud artifacts docker upgrade migrate.

Cloud Bigtable

  • Added --enable-automated-backup flag to gcloud bigtable instances tables create and gcloud bigtable instances tables update.
  • Added --disable-automated-backup flag to gcloud bigtable instances tables update.

Cloud Build

  • Unhidedgcloud builds connections create bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds connections update bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds triggers create bitbucket-cloud, gcloud builds triggers update bitbucket-cloud, gcloud builds triggers create bitbucket-data-center, gcloud builds triggers update bitbucket-data-center.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.3
    • Includes fix for ancestor queries and namespace scoped queries in Datastore Mode.

Cloud Resource Manager

  • Added support for --tags flag in gcloud projects create command.
  • Added support for --tags flag in gcloud resource-manager folders create command.

Cloud Run

  • Added --no-deploy-health-check to gcloud beta run deploy and gcloud beta run services update which allows disabling the deployment health check behavior.

Cloud SQL

  • Added gcloud sql instances acquire-ssrs-lease to acquire a lease for SQL Server Reporting Services setup in Cloud SQL for SQL Server.
  • Added gcloud sql instances release-ssrs-lease to release a lease for SQL Server Reporting Services setup in Cloud SQL for SQL Server.

Cloud TPU

  • Added --reserved flag to gcloud compute tpus queued-resources create.

Cloud Tasks

  • Promoting gcloud tasks buffer to GA which enables creation of an HTTP task without specifying the task body. It requires the parent queue to have an HTTP target override.

Compute Engine

  • Added support for OS Login SSH certificates for first-party users in alpha and beta tracks of gcloud compute ssh.
  • Promoted --source-regions flag of gcloud compute health-checks to beta.
  • Added --cloud-armor-tier flag to gcloud compute project-info update command.

Dataproc Metastore

  • Promoted --scheduled-backup-configs-from-file, enable-scheduled-backup, scheduled-backup-cron and scheduled-backup-location flag of gcloud metastore services create and gcloud metastore services update to GA.

Distributed Cloud Edge

  • Added --node-labels flag to gcloud edge-cloud container clusters node-pools create and gcloud edge-cloud container clusters node-pools update commands to allow assigning labels to individual nodes in a node pool.

Kubernetes Engine

Notebooks

  • Added NVIDIA_L4 option to --accelerator-type flag of gcloud notebooks instances create and gcloud notebooks instances update.

Pubsub Emulator

  • Add support for topic ingestion settings.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

467.0.0 (2024-03-05)

Google Cloud CLI

  • Updated linux bundled python for the gcloud CLI to 3.11.8.
  • Updated cryptography package to version 42.0.5.
  • Updated openssl package to version 3.0.13.

Backup For GKE

  • Removed --cluster-resource-restore-scope flag from gcloud container backup-restore restore-plans create and gcloud container backup-restore restore-plans update. Use --cluster-resource-selected-group-kinds instead.

Cloud Bigtable

  • Added gcloud bigtable tables command group identical to existing gcloud bigtable instances tables.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.2
    • Fix few bugs affecting client SDKs for DS Mode.

Cloud Functions

  • Added --build-service-account flag to gcloud functions deploy for 1st Gen functions to alpha and beta.

Cloud Run

  • Add --service-min-instances flag to gcloud beta run deploy and gcloud beta run services update to update min instances on a service without redeploying.
  • Promote --dry-run flag of gcloud run services replace to GA.

Cloud TPU

  • Promoted gcloud compute tpus queued-resources create, gcloud compute tpus queued-resources delete, gcloud compute tpus queued-resources describe, gcloud compute tpus queued-resources list, gcloud compute tpus queued-resources reset to GA.

Cloud Workstations

  • Fixed flag descriptions for grouped enabled/disabled flags.
  • Removed default values for grouped enabled/disabled flags.

Compute Engine

  • Promoted --announce-prefix flag of gcloud compute public-advertised-prefixes update to GA.
  • Promoted --withdraw-prefix flag of gcloud compute public-advertised-prefixes update to GA.
  • Promoted --pdp-scope flag of gcloud compute public-advertised-prefixes create to GA.
  • Promoted --announce-prefix flag of gcloud compute public-delegated-prefixes update to GA.
  • Promoted --withdraw-prefix flag of gcloud compute public-delegated-prefixes update to GA.

Container Registry

  • Added gcloud container images list-gcr-usage which lists Container Registry usage within your Google Cloud project, folder, or organization.

Kubernetes Engine

  • Added --enable-multi-networking flag to gcloud container clusters update.
  • Fixed issue where --respect-pdb flag was not working with gcloud container node-pools rollback.

Network Security

  • Promoted --[no-]disabled flag to gcloud <beta> network-security firewall-endpoint-associations update command to enable/disable a firewall endpoint association without removing it.

Pubsub Emulator

  • Fixes exactly once delivery and message ordering compatibility with the Java client library.

Service Extensions

  • Added additional values to the supported events. Updated comments.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

466.0.0 (2024-02-27)

Google Cloud CLI

  • Updated gcloud auth application-default login --no-launch-browser to work with Context Aware Access.

Cloud Build

  • Hidedgcloud builds connections create bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds connections update bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds triggers create bitbucket-cloud, gcloud builds triggers update bitbucket-cloud, gcloud builds triggers create bitbucket-data-center, gcloud builds triggers update bitbucket-data-center.

Cloud Infrastructure Manager

  • Fixed issue where gcloud infra-manager previews export directly downloads files when --file flag is not provided.

Compute Engine

  • Promoted delete command of gcloud compute instance-groups managed all-instances-config to GA.
  • Promoted update command of gcloud compute instance-groups managed all-instances-config to GA.
  • Promoted --default-action-on-vm-failure flag of gcloud compute instance-groups managed <create | update> to GA.
  • Promoted gcloud compute instant-snapshots create to GA.
  • Promoted gcloud compute instant-snapshots delete to GA.
  • Promoted gcloud compute instant-snapshots describe to GA.
  • Promoted gcloud compute instant-snapshots list to GA.
  • Promoted gcloud compute instant-snapshots add-labels to GA.
  • Promoted --source-instant-snapshot flag of gcloud compute disks create to GA.
  • Promoted --source-instant-snapshot, --source-instant-snapshot-zone, --source-instant-snapshot-region and --source-instant-snapshot-key-file flags of gcloud compute snapshots create to GA.

Kubernetes Engine

  • Removed --dataplane-v2-observability-mode flag of gcloud container clusters create|update|create-auto command. Users are expected to use --enable-dataplane-v2-flow-observability and --disable-dataplane-v2-flow-observability flags now.

Network Security

  • Added --[no-]disabled flag to gcloud <alpha> network-security firewall-endpoint-associations update command to enable/disable a firewall endpoint association without removing it.

Security Command Center

  • Added --location flag to gcloud scc findings, gcloud scc muteconfigs, gcloud scc bqexports and gcloud scc notifications commands to provide data residency for scc resources.

Workbench

  • Fixed gcloud workbench instances commands failing when all three --shielded-secure-boot, --shielded-integrity-monitoring, --shielded-vtpm flags are not passed.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

465.0.0 (2024-02-21)

AI

  • Added update-mask to gcloud ai indexes upsert-datapoints command for dynamic metadata update.

App Engine

  • Enable devappserver support for Go 1.22 runtime.

Certificate Manager

  • Added --type flag to gcloud certificate-manager dns-authorizations create.

Cloud Build

  • Promoted gcloud builds connections create bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds connections update bitbucket-cloud, gcloud builds connections create bitbucket-data-center, gcloud builds triggers create bitbucket-cloud, gcloud builds triggers update bitbucket-cloud, gcloud builds triggers create bitbucket-data-center, gcloud builds triggers update bitbucket-data-center command to beta and GA.

Cloud Composer

  • Add --enable-cloud-data-lineage-integration and --disable-cloud-data-lineage-integration to gcloud composer environments create to explicitly enable or disable the integration on creations.
  • Add --enable-cloud-data-lineage-integration and --disable-cloud-data-lineage-integration to gcloud composer environments update to explicitly enable or disable the integration on updates.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.19.1
    • Adds support for Datastore Mode to the Firstore Emulator. Adds --database-mode flag to gcloud emulator firestore start command. Note that this is a preview feature and if you find any bugs, please file them here: https://github.com/firebase/firebase-tools/issues.

Cloud Functions

Cloud Infrastructure Manager

  • Added --file flag to gcloud infra-manager previews export to download export artifacts to a custom file name or by default to files named preview if one is not provided.

Cloud NetApp

  • Added --large-capacity and --multiple-endpoints flag to gcloud beta netapp volumes {create}.

Cloud Run

  • Added firestore integration type to gcloud alpha/beta run integrations command groups.

Cloud TPU

  • Fixed race condition bug in SSH and SCP commands that may affect large TPUs.

Compute Engine

  • Promoted --security-profile-group and --[no-]tls-inspect flags for gcloud compute [network-]firewall-policies rules [create|update] to v1.

Database Migration

  • Added heterogeneous migration job update filter and commit id support via gcloud database-migration migration-jobs update.

Kubernetes Engine

  • Updated default kubectl from 1.27.9 to 1.26.13.
  • Additional kubectl versions:
    • kubectl.1.26 (1.26.13)
    • kubectl.1.27 (1.27.10)
    • kubectl.1.28 (1.28.6)
    • kubectl.1.28 (1.29.1)
  • Added --enable-queued-provisioning flag to gcloud container node-pools update for enabling queued provisioning on existing node pools. For more information see https://cloud.google.com/kubernetes-engine/docs/how-to/provisioningrequest.
  • Made --enable-queued-provisioning GA in gcloud container node-pools create. For more information see https://cloud.google.com/kubernetes-engine/docs/how-to/provisioningrequest.
  • Added --enable-cilium-clusterwide-network-policy flag to gcloud container clusters create and gcloud container clusters update.
  • Promoted gcloud container binauthz policy evaluate to beta.
  • Updated help text for --services-ipv4-cidr, --create-subnetwork, --cluster-secondary-range-name, --services-secondary-range-name options to have consistent text noting the requirement of --enable-ip-alias option for gcloud container create.
  • Updated help text for --services-ipv4-cidr, --create-subnetwork, --cluster-secondary-range-name, --services-secondary-range-name options to remove the note requiring --enable-ip-alias option for gcloud container create-auto. Autopilot clusters always use alias IPs for pods, so --enable-ip-alias option is always set for create-auto and cannot be specified by the user.

Security Command Center

  • Fixed issue that caused gcloud scc muteconfigs update to crash when an --update-mask is provided.
  • Promoted management api gcloud scc manage ... commands to GA.

Service Extensions

  • Promoted gcloud service-extensions lb-route-extensions and gcloud service-extensions lb-traffic-extensions to GA.

Vmware Engine

  • Added --vmware-engine-network-project flag to gcloud vmware network-peerings create to allow peering with VMware Engine network of different project.
  • Expanded logging server gcloud vmware private-clouds logging-servers capabilities with TLS, RELP, and SSL protocol support.

Workbench

  • Added gcloud workbench instances resize-disk to update workbench instances disk size.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

464.0.0 (2024-02-13)

Google Cloud CLI

  • Introduced ACCOUNT as a positional parameter to gcloud auth application-default login. This parameter can be used to specify the account that should be used for creating application default credentials.

Bare Metal Solution

  • Promoted gcloud bms os-images describe to GA.

Cloud Run

  • Added --no-default-url to gcloud beta run deploy and gcloud beta run services update which allows disabling the default service URL. This may be useful in combination with the internal and internal-and-cloud-load-balancing ingress settings where the default http ingress point is not desired.

Cloud TPU

  • Promoted --spot flag of gcloud compute tpus tpu-vm create to GA.

Cloud Workstations

  • Adding global fallback to gcloud workstations list, gcloud workstations list-usable, gcloud workstations configs list, and gcloud workstations cluster list commands. This allows the command to be used without any resource flags to list all of the specified resources under a project. It can also be used with a subset of the previously required flags for more granular results e.g. gcloud workstations list --cluster=cluster-1 --region=us-central1 list all workstations in 'us-central1' that use a configuration created under the 'cluster-1' cluster.
  • Adding --disable-ssh-to-vm flag to gcloud workstations configs to disallow SSH access to the workstations root VM.

Compute Engine

  • Promoted --stack-type flag of compute interconnects attachments partner create to beta. Flag defines the stack type of partner interconnect attachment.
  • Promoted --stack-type flag of compute interconnects attachments partner update to beta. Flag defines the stack type of interconnect attachment.

Notebooks

  • Added tags flag to notebook instances.
  • Fixed a bug where vm-image defaults are not populated when no environment flags are specified.

Pubsub Emulator

  • Add support for push payload unwrapping (no_wrapper).

Secure Source Manager

  • Added gcloud source-manager command group which includes gcloud source-manager instances, gcloud source-manager locations, gcloud source-manager operations to beta.

Security Command Center

  • Fixed issue that caused gcloud scc muteconfigs update to crash when an --update-mask is provided.

Workbench

  • Fixed boolean flags --shielded-secure-boot, --shielded-vtpm, and --shielded-integrity-monitoring in gcloud workbench instances commands always parsing as true.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

463.0.0 (2024-02-06)

AlloyDB

  • Added option for --cpu-count=128 in instances create and instances update commands.

Cloud Deploy

  • Added IAM policy commands to gcloud deploy custom-target-types.

Cloud Functions

  • Changed gcloud alpha functions deploy and gcloud beta functions deploy to deploy new functions via Cloud Functions (2nd gen) by default. 1st gen functions can still be created by specifying --no-gen2 or by setting the functions/gen2 property to off. This change will be applied in the GA release track in a future release.

Cloud Run

  • Promoted --container flag of gcloud run deploy and gcloud run services update to GA to allow deploying multi-container Services.

Cloud SQL

  • Fixed and added back support for parallel import and export.

Cloud Workflows

  • gcloud workflows run to avoid backlogging the execution when the

Cloud Workstations

  • Adding a region column to the tables in gcloud workstations list, gcloud workstations list-usable, gcloud workstations configs list, and gcloud workstations clusters list.

Compute Engine

  • Added support of flags to --detection-load-threshold, detection-absolute-qps, detection-relative-to-baseline-qps, and traffic-granularity-configs to gcloud compute security-policies add-layer7-ddos-defense-threshold-config in alpha/beta.
  • Added gcloud compute instance-groups managed resize-requests which provides capability to create, describe, list, cancel, and delete resize requests in a zonal MIG to beta.
  • Promoted --existing-reservation flag of gcloud compute commitments create to GA.

GKE Hub

  • Promoted Fleet operations commands to beta and GA.
    • Promoted gcloud container fleet operations describe to beta and GA.
    • Promoted gcloud container fleet operations list to beta and GA.
    • Promoted gcloud container fleet operations wait to beta and GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

462.0.1 (2024-01-31)

Cloud SQL

  • Rolled back gcloud support for parallel import and export as it was breaking default behavior for the customers.

Cloud Workflows

  • Added --disable-concurrency-quota-overflow-buffering flag to concurrency quota is exhausted.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

462.0.0 (2024-01-30)

Google Cloud CLI

  • Updated linux bundled python for the gcloud CLI to 3.11.7.
  • Updated pip package to version 23.3.2.

Binauthz

  • Updated gcloud container binauthz attestations create and sign-and-create to make --attestor optional, allowing creation of attestations on a specified --note. Note that --validate can only be used with --attestor.

Cloud Asset Inventory

  • Promoted Cloud assets analysis commands gcloud asset analyze-org-policies, gcloud asset analyze-org-policy-governed-containers and gcloud asset analyze-org-policy-governed-assets to GA.

Cloud DNS

  • Added support to allow importing RecordSets with routing policies from YAML.

Cloud Dataflow

  • Added dataflow yaml command gcloud beta dataflow yaml run.

Cloud Pub/Sub

  • Promoted --message-storage-policy-enforce-in-transit flag of gcloud pubsub topics create and gcloud pubsub topics update to GA. This allows users to enable enforcement for in-transit guarantees.

Cloud Run

  • Reverted regionalized builds for Cloud Run source deploys.
  • Add --service-account flag to specify deployment service account for Cloud Run integrations deployments.

Cloud SQL

  • Added support for parallel import and export.

Cloud Speech API

  • Added telephony and telephony_short options for gcloud ml speech <recognize | recognize-long-running> --model flag.

Cloud TPU

  • Promoted --queue-count flag of gcloud compute tpus tpu-vm create to GA.

Cloud Workflows

  • Added --disable-concurrency-quota-overflow-buffering flag to gcloud workflows execute to avoid backlogging the execution when the concurrency quota is exhausted.

Compute Engine

  • Promoted gcloud compute networks subnet --reserved-internal-ranges to GA.
  • Promoted gcloud compute networks subnet --secondary-range_with-reserved-internal-ranges to GA.

Database Migration

  • Added gcloud database-migration migration-job demote-destination which allows demoting the destination of a migration job.
  • Added alloydb-cluster flag to gcloud database-migration connection-profiles to allow creating connection profiles that link to existing AlloyDB clusters.

Distributed Cloud Edge

  • Added --offline-credential flags to gcloud edge-cloud container clusters get-credentials command to retrieve the credential used under disconnectivity to Google.
  • Added --release-channel argument to gcloud edge-cloud container clusters update to allow updating release channel for local control plane clusters.

Kubernetes Engine

  • Promoted --enable-fqdn-network-policy flag to gcloud container clusters create and gcloud container clusters update.

Security Command Center

  • Renamed gcloud alpha scc securityposture-operations command group to gcloud alpha scc posture-operations.
  • Also, promoted the above renamed command group gcloud alpha scc posture-operations to GA as gcloud scc posture-operations.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

461.0.0 (2024-01-23)

Breaking Changes

AlloyDB

  • Added flag --assign-inbound-public-ip to enable or disable public IP for an instance to the following commands in the alpha and beta track:

    • gcloud alloydb instances create
    • gcloud alloydb instances update

  • Added flag --authorized-external-networks to set a list of authorized external networks on an instance to gcloud alloydb instances update in the alpha and beta track.

Batch

  • Promoted Batch submit job config YAML support from alpha to beta and GA.

Binauthz

  • Updated gcloud container binauthz attestations list, create, and sign-and-create commands to support image URLs with both a tag and a digest. Attestations with these URLs are supported only in Continuous Validation with check-based policies for GKE.

Cloud Functions

Cloud Storage

  • Updated gcloud storage sign-url to allow using impersonation specified through configuration.

Cloud Workstations

  • Added --local-host-port flag to the workstations ssh command.

Compute Engine

  • Promoted --confidential-compute-type=TDX flag of gcloud compute instances create to beta.
  • Added IPV6_ONLY option to --stack-type flag of gcloud beta compute vpn-gateways create command to create an IPv6-only VPN gateway.
  • Promoted --location flag of gcloud compute connect-to-serial-port to GA.
  • Updated behaviour of gcloud instances delete: it will throw error if instance.delete operation takes more than 70 minutes instead of 30 minutes previously.

Distributed Cloud Edge

  • Added IPv6 support for --ip-address flag of gcloud edge-cloud networking routers add-interface subcommand.

Kubernetes Engine

  • Restored original maximum argument to --max-nodes-per-pool flag of gcloud container clusters create from 2000 to 1000, as this unintentionally changed the default value.

Recaptcha

  • Add gcloud recaptcha firewall-policies reorder command.

Security Command Center

  • Promoted gcloud scc postures commands to GA.
  • Promoted gcloud scc posture-templates commands to GA.
  • Promoted gcloud scc posture-deployments commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

460.0.0 (2024-01-17)

Cloud Bigtable

  • Rebuilt cbt cli with golang.org/x/crypto version 0.17.0 which fixed CVE-2023-48795.

Cloud Bigtable Emulator

  • Rebuilt cbt cli with golang.org/x/crypto version 0.17.0 which fixed CVE-2023-48795.

Cloud Billing

  • Added ownership-scope flag to gcloud billing budget CLI to select scope of ownership for a budget.

Cloud Domains

Cloud Functions

  • Hid --gen2 flag in gcloud functions add-iam-policy-binding, gcloud functions add-invoker-policy-binding, gcloud functions call, gcloud functions delete, gcloud functions describe, gcloud functions get-iam-policy, gcloud functions remove-iam-policy-binding, gcloud functions remove-invoker-policy-binding, and gcloud functions set-iam-policy-binding. The --gen2 flag is unnecessary for these commands and will eventually be removed from them in a future release.

Cloud Healthcare

  • Added gcloud healthcare dicom-stores metrics command which allows users to retrieve metrics associated with a DICOM store.

Cloud Monitoring

  • Promoted gcloud monitoring uptime commands to beta and GA.

Cloud Org Policy

  • Update the error message that mentions the 'update-mask' flag name incorrectly.

Cloud Run

  • Reverted regionalized builds for Cloud Run source deploys.

Cloud SQL

  • Added -i flag to provide the instance for gcloud sql generate-login-token command.

Cloud Workstations

  • Added --disable-tcp-connections flag to gcloud workstations configs` to support disabling plain TCP connections in workstations.

Dataproc Diagnose

  • Added --tarball-access flag to gcloud dataproc clusters diagnose for enabling Google support to access the diagnostic tar file, which supports the following values:-
    1. GOOGLE_DATAPROC_DIAGNOSE : This value transfers the tar file automatically to Google support.
    2. GOOGLE_CLOUD_SUPPORT : This flag doesn't transfer the tar file automatically to Google support but provides the necessary read access for Google support to read or download the tar file.
  • Added --start-time and --end-time flags to gcloud dataproc clusters diagnose to specify a time range, in %Y-%m-%dT%H:%M:%S.%fZ format, for the collection of diagnostic data within this timeframe.
  • Added --job-ids flag to gcloud dataproc clusters diagnose to collect job driver, Spark event, YARN application, and Sparklens output logs, in addition to the default log files, for a specified comma-separated list of dataproc job IDs.
  • Added --yarn-application-ids flag to gcloud dataproc clusters diagnose to collect job driver, Spark event, YARN application, and Sparklens output logs in addition to the default log files, for a specified comma-separated list of YARN application IDs.

Eventarc

  • Deprecated gcloud beta eventarc. Users are expected to use gcloud eventarc instead.

Identity and Access Management

  • Added --include-deny flag to gcloud projects get-ancestors-iam-policy and gcloud resource-manager folders get-ancestors-iam-policy to specify if it should return deny policies on the hierarchy.

Immersive Stream

  • Added --mode flag to gcloud immersive-stream xr instances create to allow specifying 3D/AR or 3D-only experience modes.
  • Added --gpu-class flag to gcloud immersive-stream xr instances create to allow specifying the type of underlying GPU used by the stream instance.

Network Security

  • In gcloud network-security firewall-endpoint-associations create, the ASSOCIATION_ID argument is no longer mandatory, and a UUID will be auto-generated on the server if not specified.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

459.0.0 (2024-01-09)

Google Cloud CLI

  • Removed the warning about --update-adc deprecation.

AI

  • Added --notification-channels flag to gcloud ai model-monitoring-jobs create|update to allow sending alerts to notification channels.

App Engine

Assured Workloads

  • Promote assured workloads enable-resource-monitoring to GA.

Binauthz

  • Updated gcloud container binauthz attestations create to make --attestor optional, allowing creation of attestations on a specified --note. Note that --validate can only be used with --attestor.

Cloud Composer

  • Fixed gcloud beta composer environments list-upgrades for Composer 2 environments.
  • Added --enable-logs-in-cloud-logging-only flag to gcloud composer environments create to enable writing and reading task logs only from cloud logging and disable using gcs buckets for logs.
  • Added --disable-logs-in-cloud-logging-only flag to gcloud composer environments create to disable writing and reading task logs only from cloud logging and disable using gcs buckets for logs.
  • Added --enable-logs-in-cloud-logging-only flag to gcloud composer environments update to enable logs in cloud logging only feature for environments.
  • Added --disable-logs-in-cloud-logging-only flag to gcloud composer environments update to disable logs in cloud logging only feature for environments.

Cloud Datastore

  • Promoted --database flag of gcloud datastore indexes create command to beta.
  • Promoted --database flag of gcloud datastore indexes create command to GA.

Cloud Firestore

  • Promoted firestore databases delete to beta.
  • Promoted firestore databases delete to GA.
  • Promoted --delete-protection and --no-delete-protection flag of gcloud firestore databases create and gcloud firestore databases update command to beta.
  • Promoted --delete-protection and --no-delete-protection flag of gcloud firestore databases create and gcloud firestore databases update command to GA.

Cloud Functions

  • Fixed file check issue with gcloud functions deploy for gradle-based Java deployments.
  • Added --build-service-account flag to gcloud beta functions deploy for 2nd Gen functions to alpha and beta.

Cloud Memorystore

  • Allowed using project numbers in command arguments.

Cloud Org Policy

  • Updated etag field in the output of gcloud org-policies list command to show a top-level etag which better reflects the current state of the policy.
  • Added --etag to gcloud org-policies delete to support etag on policy deletion that will ensure the client has an up-to-date value before proceeding.

Cloud Run

  • add --add-volume, --remove-volume and --clear-volumes flags to gcloud beta run deploy, gcloud beta run services update, gcloud beta run jobs deploy, and gcloud beta run jobs update to support managing volumes in your Cloud Run Services and Jobs.
  • add -add-volume-mount, --remove-volume-mount, and --clear-volume-mount flags to gcloud beta run deploy, gcloud beta run services update, gcloud beta run jobs deploy, and gcloud beta run jobs update to support mounting volumes within containers.

Cloud SQL

  • Rename the positional argument of gcloud sql backups restore command from BACKUP_ID to ID.
  • Allowed using project numbers in command arguments.

Cloud Services

  • Promoted gcloud services vpc-peerings get-vpc-service-controls to GA.

Cloud Workstations

  • Added --domain flag to gcloud workstations clusters to enable using custom domains.

Compute Engine

  • Promoted --server-tls-policy and --clear-server-tls-policy for gcloud compute target-https-proxies create and gcloud compute target-https-proxies update to beta.

Compute Firewall Policy Rules

  • Fixed issue where gcloud firewall-policies rules update didn't allow clearing list fields.
  • Fixed issue where gcloud firewall-policies rules update set disabled and enabledLogging to false if it was not specified by the user.
  • Fixed issue where gcloud beta firewall-policies rules update and gcloud beta network-firewall-policies rules update required providing --security-profile-group even if it was not changed.
  • Fixed issue where gcloud beta firewall-policies rules update and gcloud beta network-firewall-policies rules update didn't allow clearing securityProfileGroup (--security-profile-group='').

Database Migration

  • Added MySQL_8_0_35 minor version option when creating Cloud SQL connection profile using gcloud database-migration connection-profiles create cloudsql command.

Kubernetes Engine

  • Updated default kubectl from 1.27.8 to 1.27.9.
  • Additional kubectl versions:
    • kubectl.1.24 (1.24.17)
    • kubectl.1.25 (1.25.16)
    • kubectl.1.26 (1.26.12)
    • kubectl.1.27 (1.27.9)
    • kubectl.1.28 (1.28.5)
    • kubectl.1.28 (1.29.0)
  • Added --enable-secret-manager flags to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in alpha and beta.
  • Deprecated --dataplane-v2-observability-mode flag of gcloud container clusters create|update|create-auto command. Users are expected to use --enable-dataplane-v2-flow-observability and --disable-dataplane-v2-flow-observability flags now.
  • Increased maximum argument to --num-nodes flag of gcloud container clusters create from 1000 to 2000.

Network Services

  • Updated gcloud network-services gateways to show a new ipVersion field for v1 version.
  • Added envoyHeaders field to gcloud network-services <meshes|gateways> <import|export|describe> commands to inject envoy internal debug headers into upstream requests.
  • Added idleTimeout field to gcloud network-services <http-routes|grpc-routes|tcp-routes|tls-routes> <import|export|describe> to configure idle timeouts for the upstream and downstream connections.
  • Added mirrorPercent to gcloud network-services http-routes <import|export|describe> to configure fractional mirror percentage.
  • Added directResponse to gcloud network-services http-routes <import|export|describe> which returns a static HTTP response for all requests.
  • Added requestHeaderModifier to gcloud network-services http-routes <import|export|describe> to modify request headers to a particular destination.
  • Added responseHeaderModifier to gcloud network-services http-routes <import|export|describe> to modify response headers from a particular destination.

Service Directory

  • Allowed using project numbers in command arguments.

Transcoder

  • Allowed using project numbers in command arguments.

telco automation

  • Promoted gcloud telco-automation orchestration-cluster to GA.
  • Promoted gcloud telco-automation operations to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

458.0.1 (2023-12-20)

Google Cloud CLI

  • Fixed error 'ython'' is not recognized as an internal or external command, operable program or batch file. when updating gcloud on Windows.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

458.0.0 (2023-12-19)

Breaking Changes

  • (Compute Engine) Updated behaviour of gcloud instances stop: it will not throw error if
  • (Compute Engine) instance gets deleted during polling on the stopping operation.
  • (GKE Hub) Changed output of gcloud container fleet memberships list to display the UUID of the memberships instead of external_id. The external_id is still available in the json-formatted output.

Google Cloud CLI

  • Updated cryptography package to version 41.0.7.

App Engine

  • Updated the Go SDK to version 1.9.76. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/go/release-notes.
  • Promoted command gcloud app runtimes list --environment=standard to GA. The command displays the runtimes for the App Engine standard environment.

BigQuery

  • Fixed a bug in 2.0.99 and 2.0.100 that causes any command to fail if initialization is required.

Cloud Bigtable

  • Adds reversed flag to cbt read command to enable reverse scans.
  • Rebuild with golang 1.21.5.

Cloud Bigtable Emulator

  • Rebuild with golang 1.21.5.

Cloud Run

  • Promoted --condition flag for gcloud run services {add,remove}-iam-policy-binding from alpha to beta.
  • Enabled --cpu-boost by default for run deploy on new services if not otherwise specified.

Cloud Services

  • Promoted gcloud services vpc-peerings get-vpc-service-controls to beta.

Compute Engine

  • Promoted --with-extended-notifications flag of gcloud compute instances simulate-maintenance-event to beta and GA.
  • Promoted --confidential-compute flag of gcloud compute disks create to GA.
  • Promoted --create-disk=confidential-compute for gcloud compute instances create to GA.
  • Promoted Instance API Perform Maintenance to beta and GA.

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.48 to 1.0.0-beta.49.

Kubernetes Engine

  • gcloud container clusters create and gcloud container clusters update now allow multiple binauthz policies to be bound to a cluster using --binauthz-policy-bindings.
  • Updated default kubectl from 1.27.7 to 1.27.8.
  • Additional kubectl versions:
    • kubectl.1.24 (1.24.17)
    • kubectl.1.25 (1.25.16)
    • kubectl.1.26 (1.26.11)
    • kubectl.1.27 (1.27.8)
    • kubectl.1.28 (1.28.4)
  • Added enterprise option to --workload-vulnerability-scanning flag of gcloud container clusters create|update|create-auto commands to enable Advanced vulnerability insights mode in the GA track.
  • Promote --in-transit-encryption flag to gcloud container clusters create and gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

457.0.0 (2023-12-12)

Breaking Changes

  • (Network Actions) Removed network-actions surface.

Google Cloud CLI

  • Added deprecation warning to gcloud components restore. To revert gcloud to a previous version, please run gcloud components update --version=<previous_version>.

AI

  • Added --container-deployment-timeout-seconds flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-shared-memory-size-mb flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-startup-probe-exec flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-startup-probe-period-seconds flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-startup-probe-timeout-seconds flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-health-probe-exec flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-health-probe-period-seconds flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-health-probe-timeout-seconds flag to gcloud ai models upload and gcloud beta ai models upload.
  • Added --container-grpc-ports flag to gcloud ai models upload and gcloud beta ai models upload.

Anthos Multi-Cloud

  • Added gcloud container aws node-pools rollback to rollback failed AWS node pool update operations. This allows customers to revert the node pool back to its original state.

App Engine

BigQuery

  • Added the ability to update table tags by using add_tags, remove_tags and clear_all_tags.

Certificate Manager

  • Added command certificate-manager trust-configs update.

Cloud Composer

  • Add --disable-cloud-data-lineage-integration to gcloud composer environments create (alpha and beta) to explicitly disable the integration.

Cloud Deploy

  • Added gcloud deploy custom-target-types command group.

Cloud Functions

  • Added --runtime-update-policy flag to gcloud beta functions deploy for 1st Gen functions to alpha and beta.
  • Added --runtime-update-policy flag to gcloud functions deploy for 1st Gen functions to GA.

Cloud Logging

  • Allow for using the logging feature with protocol SSL in gcloud compute backend-services create and gcloud compute backend-services update.

Cloud Pub/Sub

  • Promoted --use-table-schema flag of gcloud pubsub subscriptions [create|update] to GA. This option allows Pub/Sub to use the schema of the BigQuery table to write the fields of a JSON message to the corresponding columns.

Cloud Services

  • Promoted gcloud services api-keys undelete to GA.

Compute Engine

  • Added support for version=23.10 and short-name=ubuntu in --os-types for gcloud beta compute instances ops-agents policies [create|update].
  • Promoted gcloud compute instances set-name command to GA.
  • Promoted --recaptcha-action-site-keys and --recaptcha-session-site-keys in gcloud compute security-policies rules create|update to GA.
  • Added tls-ja3-fingerprint and user-ip as valid rate limit key types in gcloud compute security-policies rules.

Distributed Cloud Edge

  • Made flag --ipv4-range optional for gcloud edge-cloud networking subnets create.

GKE Hub

  • Promoted gcloud container fleet clusterupgrade and gcloud container hub clusterupgrade to beta and GA.

Kubernetes Engine

  • gcloud container clusters create and gcloud container clusters update now allow multiple binauthz policies to be bound to a cluster using --binauthz-policy-bindings.
  • Added --autoprovisioning-resource-manager-tags flag to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in GA track.
  • Added --resource-manager-tags flag to gcloud container clusters create, gcloud container node-pools create and gcloud container node-pools update in GA track.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

456.0.0 (2023-12-05)

Breaking Changes

  • (AlloyDB) Modified gcloud alloydb instances update to be asynchronous by default. Use
  • (AlloyDB) --no-async flag to get the old behavior.

Google Cloud CLI

  • Updated gcloud CLI to support Python v3.11 and v3.12.

AlloyDB

  • Added support for specifying --database-version in clusters create command in GA track.

Anthos

  • Support new flag server for gcloud anthos auth login command.
  • 'server' flag obviates the need to download login-config file.

Anthos Multi-Cloud

  • Added --proxy-secret-name and --proxy-secret-namespace flags to gcloud container attached clusters import to configure an HTTP/HTTPS proxy for outbound traffic.
  • Promoted --max-surge-update and --max-unavailable-update flags to GA (General Availability) for gcloud container aws node-pools create and gcloud container aws node-pools update commands. These flags let you specify or modify surge update parameters during node pool creation and updating.

App Engine

  • Added gcloud beta app runtimes list --environment=standard which displays the supported runtimes for App Engine Standard.

Artifact Registry

  • Added domain as a config option to use a different domain endpoint for artifacts docker.

BigQuery

  • Added python 3.12 support.
  • Added support for kms_key_name to connections.
  • Added concurrent requests when looking up IAM information.
  • Added support to show replica table information.
  • Updated quotes library used.
  • Fixed bug in cp to ensure all regions are being checked.
  • Ensured bq ls -p only displays the first page of results by default to align with other list methods.
  • Added messaging for DDL statements modifying vector indexes.
  • Improved error messaging for tag updates.
  • Added improved error messaging when project lookups are aborted.

Certificate Manager

  • Added command certificate-manager trust-configs create.

Cloud Backup DR

  • Promoted gcloud backup-dr command group which includes gcloud backup-dr management-servers, gcloud backup-dr locations and gcloud backup-dr operations to GA.

Cloud Datastore

  • Updated gcloud datastore operations list to respect a --limit set to >100.

Cloud Domains

  • Added support for disabling and enabling automatic renewal of domains using the Cloud Domains gcloud domains registrations configure management method (with the preferred-renewal-method flag or in the interactive flow).

Cloud Firestore

  • Updated gcloud firestore operations list to respect a --limit set to >100.

Cloud Healthcare

  • Added gcloud healthcare hl7v2-stores metrics which allows users to retrieve metrics associated with a HL7v2 store.

Cloud NetApp

  • Removed netapp/region as a property since netapp/location can be either region or zone depending on SO or PO.

Cloud Pub/Sub

  • Fix missing error message for commands under gcloud pubsub.

Cloud Run

  • Added the information of whether the job to be deleted has running executions to the confirm message of gcloud run jobs delete.
  • Regionalize builds for Cloud Run source deploys.

Cloud Services

  • Promoted gcloud services api-keys create to GA.
  • Promoted gcloud services api-keys delete to GA.
  • Promoted gcloud services api-keys get-key-string to GA.
  • Promoted gcloud services api-keys update to GA.

Cloud TPU

  • Promoted --update-metadata, --clear-metadata, --remove-metadata and --metadata-from-file flags of gcloud compute tpus tpu-vm update to GA.

Cloud Workstations

  • Added --enable-audit-agent flag to workstations configs create and workstations configs update.

Compute Engine

  • Promoted --confidential-compute-type flag of gcloud compute instance create to beta.
  • Promoted flag --user-ip-request-headers of gcloud compute security-policies update to GA.
  • Fixed issue where gcloud compute ssh and gcloud compute scp commands would fail on Windows when PuTTY prompted in certain situations, such as when using --plain or when connecting to an instance with OS Login 2FA enabled.
  • Fixed crash in gcloud compute diagnose routes when specifying --reverse-traceroute.
  • Promoted location flag for gcloud compute connect-to-serial-port to beta.
  • Promoted --type flag of gcloud compute routers nats create to GA.
  • Promoted --source-nat-active-ranges, --source-nat-active-ranges-region, --source-nat-drain-ranges, --clear-source-nat-drain-ranges and --source-nat-drain-ranges-region flags of gcloud compute routers nats rule update to GA.
  • Promoted --source-nat-active-ranges and --source-nat-active-ranges-region flags of gcloud compute routers nats rule create to GA.
  • Promoted new allowed value: PRIVATE_NAT for --purpose flag of gcloud compute networks subnets create to GA.
  • Promoted new :ALL range option for subnets passed to --nat-custom-subnet-ip-ranges flag of gcloud compute routers nats (create|update) to GA.

Compute Firewall Rules

  • Added --export-terraform-script flag to gcloud compute firewall-rules migrate to prepare a terraform script for migrated Network Firewall Policy.
  • Added disabled column to default view of gcloud compute networks get-effective-firewalls and gcloud compute network-firewall-policies get-effective-firewalls.

Database Migration

  • Updated gcloud database-migration to show error details on command failure when used with --no-async flag.
  • Adding support for choosing Alloy DB database version using --database-version flag in gcloud database-migration connection-profiles create alloydb.

GKE Hub

  • Promoted gcloud container fleet dataplane-v2-encryption {describe, disable, enable} to GA.
  • Added property pod-affinity to gcloud container fleet policycontroller deployment set and gcloud container fleet policycontroller deployment remove so that users can configure high availability on Policy Controller deployments.
  • Added --binauthz-evaluation-mode flag to gcloud container fleet create, gcloud container fleet update in alpha, beta and GA track.
  • Added --binauthz-evaluation-mode flag to gcloud container hub create, gcloud container hub update in alpha, beta and GA track.
  • Added --binauthz-policy-bindings flag to gcloud container fleet create, gcloud container fleet update in alpha, beta and GA track.
  • Added --binauthz-policy-bindings flag to gcloud container hub create, gcloud container hub update in alpha, beta and GA track.

Kpt

Kubernetes Engine

  • Added --enable-dataplane-v2-flow-observability and --disable-dataplane-v2-flow-observability flags for toggling DPv2 Flow Observability feature.

Network Security

  • Add --billing-project required flag to gcloud network-security firewall-endpoints create command to provide Google Cloud project ID for API enablement check, quota, and endpoint uptime billing.
  • Add --update-billing-project flag to gcloud network-security firewall-endpoints update command to update the Google Cloud project used for API enablement check, quota, and endpoint uptime billing.

Recaptcha

  • Support creating Fastly enabled site keys using recaptcha keys create --waf-service=cloudfare.

Regional Endpoints

  • Unhid regional-endpoints as a subgroup of gcloud beta networkconnectivity.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

455.0.0 (2023-11-14)

Breaking Changes

  • (Network Connectivity) Removed gcloud network-connectivity spokes accept and gcloud network-connectivity spokes reject commands. Use gcloud network-connectivity hubs accept-spoke and gcloud network-connectivity hubs reject-spoke commands instead.

Google Cloud CLI

  • Updated bundled python for the gcloud CLI to 3.11.6.
  • Updated cryptography package to version 41.0.5.
  • Updated openssl to version 3.1.4 for cryptography.

AI

  • Added more choice options to --region flag of gcloud ai custom-jobs and gcloud ai hp-tuning-jobs, including: asia-northeast2, australia-southeast2, europe-north1, europe-southwest1, europe-west8, and southamerica-west1.

App Engine

Binauthz

  • Updated gcloud container binauthz attestations list to make --attestor optional, allowing listing from any project.
  • Modified gcloud container binauthz attestations sign-and-create to allow --validate to work with --pae-encode-payload.

Cloud Bigtable

  • Fixed issue where cbt createtable would create column families with a MaxVersions(1) GC policy. As per our documentation (https://cloud.google.com/bigtable/docs/garbage-collection#everything-else), tables created by the cbt cli should retain an infinite number of versions by default.

Cloud Data Fusion

  • Added --patch_revision optional argument to
    gcloud beta data-fusion instances create to create a Cloud Data Fusion
    instance with the provided patch revision version.
  • Added --patch_revision optional argument to
    gcloud beta data-fusion instances update to perform patch revision
    update of the Cloud Data Fusion instance.

Cloud Filestore

  • Added --tier=REGIONAL flag to gcloud filestore instances create to support a regional filestore instance creation.

Cloud Functions

  • Promoted --concurrency flag of gcloud functions deploy to GA.
  • Promoted --cpu flag of gcloud functions deploy to GA.

Cloud Run

  • Promoted gcloud run jobs executions cancel to GA. This command allows cancelling a running Cloud Run job execution.

Cloud SQL

  • Added --show-sql-network-architecture and --upgrade-sql-network-architecture flags to gcloud sql instances list and gcloud sql instances patch to support New Network Architecture self upgrade for Cloud SQL.

Cloud Storage

  • Released object lock feature and per-object retention settings.
  • Added storage/multipart_chunksize and storage/multipart_threshold for adjusting settings of Boto3 client uploads via S3 or the other XML APIs.

Cloud TPU

  • Promoted --attach-disk and --detach-disk flags of gcloud compute tpus tpu-vm update to GA.

Dataproc Metastore

  • Promoted --data-catalog-sync flag of gcloud metastore services create and gcloud metastore services update to GA.

GKE Hub

  • Added --security-posture flag to gcloud container fleet create, gcloud container fleet update in alpha, beta and GA track.
  • Added --security-posture flag to gcloud container hub create, gcloud container hub update in alpha, beta and GA track.
  • Added --workload-vulnerability-scanning flag to gcloud container fleet create, gcloud container fleet update in alpha, beta and GA track.
  • Added --workload-vulnerability-scanning flag to gcloud container hub create, gcloud container hub update in alpha, beta and GA track.
  • Added support for fleet-default-member-config command to Service Mesh in alpha, beta and GA tracks.

  • Promoted --fleet-default-member-config flag of the following commands to GA:

    • gcloud container fleet identity-service enable
    • gcloud container hub identity-service enable
    • gcloud container fleet identity-service delete
    • gcloud container hub identity-service delete

  • Added --fleet-default-member-config flag to the following commands in alpha, beta, and GA tracks:

    • gcloud container fleet identity-service apply
    • gcloud container hub identity-service apply

    to modify a fleet-level default membership configuration.

  • Added --origin flag to the following commands in alpha, beta, and GA tracks:

    • gcloud container fleet identity-service apply
    • gcloud container hub identity-service apply

    to apply a fleet-level default membership configuration to a membership.

  • Added support for fleet-default-member-config command to Service Mesh in alpha, beta and GA tracks.

Kubernetes Engine

  • Fixed a bug where if --artifact-url was passed to gcloud container binauthz attestations list only attestations over the full artifact url would be returned instead of attestations over the artifact digest.

Security Command Center

  • Promoted gcloud scc custom-modules sha simulate to GA.

Vmware Engine

  • Added commands for managing new types of resources:
    • Added gcloud vmware dns-bind-permission which manages DNS bind permission resources.
    • Added gcloud vmware private-clouds dns-forwarding which manages DNS forwarding resources.
    • Added gcloud vmware network-policies external-access-rules which manages external access rule resources.
    • Added gcloud vmware private-clouds external-addresses which manages external address resources.
    • Added gcloud vmware private-clouds logging-servers which manages logging server resources.
    • Added gcloud vmware private-clouds management-dns-zone-bindings which manages management DNS zone binding resources.
    • Added gcloud vmware network-peerings which manages network peering resources.
    • Added gcloud vmware network-peering routes which manages network peering route resources.
    • Added gcloud vmware private-clouds clusters nodes which allows cluster node resources.
  • Added --type, --preferred-zone, and --secondary-zone to gcloud vmware private-clouds create command to support stretched private clouds creation.
  • Added clusterCoreCount, clusterVirtualCpuCount, clusterStorageGb and clusterMemoryGb fields in gcloud vmware private-clouds clusters describe command output.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

454.0.0 (2023-11-07)

AI

  • Added deployment-group, enable-access-logging,audiences,allowed-issuers to gcloud ai index-endpoints mutate-deployed-index.

Anthos Multi-Cloud

  • Updated container attached clusters register and container attached clusters import to check for proper deployment of the install agent before attempting to register/import.

Artifact Registry

  • Updated gcloud artifacts sbom load to have the newly created bucket have Uniform Bucket Level Access set to true.

Binauthz

  • Fixed issue with gcloud container binauthz attestations sign-and-create where --validate is not supported with --pae-encode-payload.

Certificate Manager

  • Added --update-mask flag to gcloud certificate-manager trust-configs import.

Cloud Bigtable

  • Rebuilt cbt cli with go version 1.21.3 which fixed CVE-2023-39323.

Cloud Bigtable Emulator

  • Rebuilding cbt emulator with go version 1.21.3 which fixed CVE-2023-39323.

Cloud Build

  • Added --clear-subscription-filter to gcloud builds triggers update pubsub command.

Cloud Dataproc

  • Added --min-secondary-worker-fraction flags to gcloud dataproc clusters create and gcloud dataproc clusters update.

Cloud Deploy

  • Added gcloud deploy automations and gcloud deploy automation-runs command groups.

Cloud IAM

  • Added --allowed-services flag to gcloud iam workforce-pools providers create-oidc, which allows the user to setup domains that can be accessed by users in a workforce pool.
  • Added --disable-programmatic-signin flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc, which lets the administrator disable programmatic sign-in for users in a workforce pool.

Cloud Run

  • Added --container, --remove-containers, and --depends-on flags to gcloud beta run deploy and gcloud beta run services update to allow deploying and updating multi-container Services.

Cloud SQL

  • Added --cascadable-replica flag to gcloud sql instances create to enable cascadable replica creation for SQL Server.
  • Added gcloud sql instances switchover in alpha and beta to enable switchover in Cloud SQL for SQL Server.
  • Added --failover flag to gcloud sql instances promote-replica to enable unmanaged failover in Cloud SQL for SQL Server.

Cloud Storage

  • Fixed "Completed" progress count incrementing for uploads with errors.
  • Fixed an issue where --content-md5 flag was showing up for gcloud storage objects update command. MD5 Hash is a read only field so cannot be updated. Removed --content-md5 flag from the update command and removed --clear-content-md5 flag from gcloud storage {cp|mv|rsync|objects update} commands.
  • Added --autoclass-terminal-storage-class flag to gcloud storage buckets {create|update} to set the terminal storage class for Autoclass buckets.
  • Updated gsutil component to 5.27.
  • Releases soft delete feature, including restore command and various flags across other commands.
  • Removes un-implemented operations list flags: --uri and --page-size. These flags didn't do anything and there are no operations public users could have been using them on yet.

Cloud TPU

  • Promote --update-labels, --clear-labels, and --remove-labels flags of gcloud compute tpus tpu-vm update to GA.

Compute Engine

  • Promoted Standby Policy flags for gcloud compute instance-groups managed create in beta.
  • Promoted Standby Policy flags for gcloud compute instance-groups managed update in beta.
  • Promoted gcloud compute snapshot-settings to GA. Documentation of this feature is available at https://cloud.google.com/compute/docs/disks/snapshot-settings.
  • Updated enum name for --managed-protection-tier flag for gcloud compute project-info update from CAMP_PLUS_MONTHLY to CAMP_PLUS_PAYGO.
  • Added --network-user-defined-fields, --network-src-ip-ranges, --network-dest-ip-ranges, --network-ip-protocols, --network-src-ports, --network-dest-ports, --network-src-region-codes, and --network-src-asns to gcloud compute security-policies rules create|update.
  • Added gcloud compute security-policies add-user-defined-fields and gcloud compute security-policies remove-user-defined-fields commands.
  • Added --region to gcloud compute backend-services update.
  • Added --security-policy and --security-policy-region to gcloud compute instances network-interfaces update.
  • Added gcloud compute target-pools update and gcloud compute target-instances update commands.

Distributed Cloud Edge

  • Added upgrade command to gcloud edge-cloud container clusters to allow manually upgrading local control plane clusters.
  • Promoted --router to gcloud edge-cloud container vpn-connections create to allow users to define Cloud Router to use when creating the VPN connection.

GKE Hub

  • Promoted gcloud container fleet policycontroller group to GA.

Kubernetes Engine

  • Fixed issue where gcloud container clusters create-auto would prefer compute/zone over compute/region if both configs were set. Now prioritizes using compute/region.
  • Updated default kubectl from 1.27.5 to 1.27.7.
  • Additional kubectl versions:
    • kubectl.1.24 (1.24.17)
    • kubectl.1.25 (1.25.15)
    • kubectl.1.26 (1.26.10)
    • kubectl.1.27 (1.27.7)
    • kubectl.1.28 (1.28.3)
  • Added --labels flag to gcloud container clusters create-auto to enable applying labels on Autopilot clusters at creation time.

Looker

  • Added gcloud looker regions list which displays all available regions to deploy a Looker instance.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

453.0.0 (2023-10-31)

Breaking Changes

  • (Cloud Infrastructure Manager) Removed support for blueprints/location property, in favor of infra-manager/location property.

AI

  • Added --encryption-kms-key-name flag to gcloud ai indexes create to support encryption spec.

Artifact Registry

  • Added --remote-username and --remote-password-secret-version flags for artifacts repositories create and artifacts repositories update.

Cloud Build

  • Renamed Google Cloud Build to Cloud Build in the help text of gcloud builds command group.

Cloud Infrastructure Manager

  • Added infra-manager/location property to set the default Infra Manager region.

Cloud NetApp

  • Added gcloud beta netapp backup-vaults backups surface command, and made help text public.

Cloud Run

  • Added --args, --task-timeout, --tasks and --update-env-vars flags to gcloud run jobs execute to allow executing a Cloud Run job with runtime overrides.
  • Promoted --add-custom-audiences, --clear-custom-audiences, --remove-custom-audiences and --set-custom-audiences flags of gcloud run deploy and gcloud run services update to GA.

Cloud Storage

  • Added --autoclass-terminal-storage-class flag to gcloud storage buckets {create|update} to set the terminal storage class for Autoclass buckets.
  • Updated gsutil component to 5.27.
  • Fixed broken objects update clear flags.

Cloud Tasks

  • Added gcloud tasks cmek-config to [alpha|beta|GA] which enables creation of CMEK configuration for a given project in a particular location.

Cloud Workstations

  • Added --domain flag to gcloud beta workstations clusters to enable using custom domains.

Compute Engine

  • Promoted --default-action-on-vm-failure flag of gcloud compute instance-groups managed <create | update> to beta.
  • Promoted --source-disk-for-recovery-checkpoint and --source-disk-for-recovery-checkpoint-region flags of gcloud compute snapshots create to GA.

GKE Hub

  • Added policycontroller group which provides configuration commands for GKE Hub Policy Controller.

Kpt

Kubernetes Engine

  • Fixed issue where gcloud container clusters create-auto would prefer compute/zone over compute/region if both configs were set. Now prioritizes using compute/region.

Notebooks

  • Added gcloud notebooks runtimes migrate command. This command migrates a Google-Managed Notebook to a Workbench Instance.
  • Added gcloud notebooks instances migrate command. This commands migrates a User-Managed Notebook to a Workbench Instance.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

452.0.1 (2023-10-25)

Google Cloud CLI

  • gcloud will prefer using a supported version of Python if one is available on PATH.
    • This only affects environments where gcloud does not already manage a Python interpreter via bundled Python or virtualenv.
    • Currently supported versions are 3.8, 3.9, 3.10.

Cloud Storage

  • Updated gsutil component to 5.27.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

452.0.0 (2023-10-24)

AI

  • Added deployment-group, enable-access-logging,audiences,allowed-issuers to gcloud ai index-endpoints deploy-index.
  • Added enable-private-service-connect, project-allowlist, encryption-kms-key-name to gcloud ai index-endpoints create.

Anthos On-Prem

  • Renamed --upgrade-control-plane flag of gcloud container vmware clusters create and gcloud container vmware clusters update to --upgrade-policy. Promoted --upgrade-policy flag to GA.

App Engine

Artifact Registry

  • Fixed Registry URL in the output of artifacts repositories describe.

Cloud BCE App Connector

Cloud Bigtable

  • Added --priority flag to gcloud bigtable app-profiles create and gcloud bigtable app-profiles update.

Cloud Composer

  • Added --cloud-preferred-zone to gcloud composer environments create to select preferred zone for sql database creation.
  • Added --storage-bucket to gcloud composer environments create to specify the Cloud Storage bucket to be used by the environment.
  • Added --storage-bucket to gcloud beta composer environments create to specify the Cloud Storage bucket to be used by the environment.

Cloud Dataproc

  • Added --driver-required-memory-mb and --driver-required-vcores flags to gcloud dataproc jobs submit.

Cloud Domains

Cloud IAM

  • Promoted optional --recommend flag to beta for the following command:
    • gcloud iam service-account delete

Cloud NetApp

  • Added gcloud beta netapp backup-vaults surface command, and made help text public.

Cloud Resource Manager

  • Promoted optional --recommend flag to beta for the following commands:
    • gcloud projects remove-iam-policy-binding
    • gcloud projects delete

Cloud SQL

  • Support --ssl-mode flag for gcloud sql instances create and gcloud sql instances patch.

Cloud Spanner

  • Added the flags --autoscaling-min-nodes, --autoscaling-max-nodes, --autoscaling-min-processing-units, --autoscaling-max-processing-units, --autoscaling-high-priority-cpu-target and --autoscaling-storage-target to support creating an autoscaled instance in gcloud spanner instances create, or updating the autoscaling config of an instance in gcloud spanner instances update.

Cloud Storage

  • Releases storage operations command group for managing long-running operations. However, there is currently no way to create these operations.

Cloud TPU

  • Promote --add-tags, --clear-tags, and --remove-tags flags of gcloud compute tpus tpu-vm update to GA.

Cloud Workstations

  • Added config set workstations/region REGION, config set workstations/cluster CLUSTER_ID, config set workstations/config CONFIG_ID, and config set workstations/workstation WORKSTATIONS_ID commands.

Compute Engine

  • Promoted regional INTERNET_IP_PORT and INTERNET_FQDN_PORT Network Endpoint Groups in gcloud compute network-endpoint-groups to GA. Affected commands:
    • gcloud compute network-endpoint-groups create
    • gcloud compute network-endpoint-groups list-network-endpoints
    • gcloud compute network-endpoint-groups update <RESOURCE_NAME> --add-endpoint
    • gcloud compute network-endpoint-groups update <RESOURCE_NAME> --remove-endpoint
  • Promoted ENDPOINT_TYPE_MANAGED_PROXY_LB enum option of --endpoint-types flag in gcloud compute routers nats create to GA.
  • Added gcloud beta compute project-zonal-metadata for managing project zonal metadata. Documentation of this feature is available at https://cloud.google.com/compute/docs/metadata/setting-custom-metadata#set-custom-project-zonal-metadata.
  • Promoted gcloud compute network-attachments update to GA.

Firebase Test Lab

  • Increased the maximum number of test shards allowed for Arm virtual devices from 100 to 200 shards when using --num-uniform-shards or --test-targets-for-shard with gcloud firebase test android run.

Kubernetes Engine

Notebooks

  • Added gcloud notebooks runtimes migrate command. This command migrates a Google-Managed Notebook to a Workbench Instance.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

451.0.1 (2023-10-19)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

451.0.0 (2023-10-17)

Google Cloud CLI

  • Bump cryptography to 41.0.4 and pyopenssl to 23.2.0.

App Engine

  • Enable devappserver support for Python 3.12 runtime.

Assured Workloads

  • Added --acknowledge-type flag (optional) for gcloud assured workloads violations acknowledge to acknowledge violation with type through gcloud command.

Cloud Filestore

  • Added --tier=ZONAL flag to gcloud filestore instances create to support a zonal filestore instance creation.

Cloud Run

  • Added volumes and volume mounts to gcloud run jobs describe, gcloud run jobs executions describe, and gcloud run jobs executions tasks describe.

Cloud SQL

  • Add new enum TLOG to --bak-type and added --stop-at and --stop-at-mark flag to gcloud sql import bak to support transaction log import on Cloud SQL for SQL Server.

Cloud Storage

  • Updated gcloud storage sign-url to allow using service account credentials to create signed URLs. Omit --private-key-file flag to use the active service account or account specified with --impersonate-service-account flag.

Compute Engine

  • Added SEV_LIVE_MIGRATABLE_V2 to the list of --guest-os-features for gcloud compute images create.
  • Promoted gcloud compute backend-services list-usable to GA.
  • Updated gcloud compute images import to handle exceptions in case of failure in fetching the cloud build logs.
  • Updated gcloud compute images import to check the storage permissions required for cloud build service account.

Kubernetes Engine

  • Updated default kubectl from 1.26.7 to 1.27.4.
  • Additional kubectl versions:
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.16)
    • kubectl.1.25 (1.25.12)
    • kubectl.1.26 (1.26.7)
    • kubectl.1.27 (1.27.4)
  • Deprecate --enable-workload-config-audit, --enable-workload-vulnerability-scanning, and enable-security-posture flags in gcloud container clusters {create, create-auto, update}. The replacements for these are:
    • --enable-workload-config-audit -> --security-posture=standard
    • --enable-security-posture -> --security-posture=standard
    • --enable-workload-vulnerability-scanning -> --workload-vulnerability-scanning=standard
  • Added enterprise value to the available modes for --workload-vulnerability-scanning flag in the alpha and beta tracks.
  • Added --in-transit-encryption flag to gcloud container clusters create and gcloud container clusters update.

Service Extensions

  • New commands for service-extensions resources - LbTrafficExtensions and LbRouteExtensions.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

450.0.0 (2023-10-10)

AI

  • Promoted gcloud ai indexes upsert-datapoints and gcloud ai indexes remove-datapointsto GA.

App Engine

Cloud Bigtable

  • Rebuilt cbt cli with go version 1.21.1 which fixed CVE-2023-39319.

Cloud Bigtable Emulator

  • Rebuilding cbt emulator with go version 1.21.1 which fixed CVE-2023-29409.

Cloud Composer

  • Added --triggerer-count to gcloud composer environments create/update to specify number of Airflow triggerers.
  • Added --triggerer-cpu to gcloud composer environments create/update to specify CPU allocated to Airflow triggerer.
  • Added --triggerer-memory to gcloud composer environments create/update to specify memory allocated to Airflow triggerer.

Cloud Firestore

  • Promoted Cloud Firestore PiTR gcloud CLI changes to beta and GA.
  • Promoted --enable-pitr and --no-enable-pitr flag of gcloud firestore databases create command to GA.
  • Promoted --enable-pitr and --no-enable-pitr flag of gcloud firestore databases create command to beta.
  • Promoted --enable-pitr and --no-enable-pitr flag of gcloud firestore databases update command to GA.
  • Promoted --enable-pitr and --no-enable-pitr flag of gcloud firestore databases update command to beta.

Cloud Run

  • Show container dependencies in gcloud run services describe and gcloud run revisions describe.

Cloud Storage

  • Added option to read from stdin to ls command.

Compute Engine

  • Promoted --requested-features flag of gcloud compute interconnects create to GA.
  • Promoted gcloud compute interconnects macsec get-config to GA.
  • Promoted gcloud compute interconnects macsec update to GA.
  • Promoted gcloud compute interconnects macsec add-key to GA.
  • Promoted gcloud compute interconnects macsec remove-key to GA.
  • Promoted gcloud compute interconnects macsec update-key to GA.
  • Promoted the following flags of gcloud compute instance-groups managed create, gcloud compute instance-groups managed create-instance, and gcloud compute instance-groups managed instance-configs create to GA:
    • --stateful-internal-ip,
    • --stateful-external-ip.
  • Promoted the following flags of gcloud compute instance-groups managed update and gcloud compute instance-groups managed instance-configs update to GA:
    • --stateful-internal-ip,
    • --remove-stateful-internal-ips,
    • --stateful-external-ip,
    • --remove-stateful-external-ips.
  • Promoted --maintenance-interval flag for gcloud compute sole-tenancy node-groups create to beta.
  • Promoted gcloud compute sole-tenancy node-groups perform-maintenance to beta.
  • Promoted --delete-at-time and --delete-after-durationflags forgcloud compute reservations create|update` surfaces to beta.

Database Migration

  • Added the ability to specify an empty password when creating MySQL connection profiles using gcloud database-migration connection-profiles create mysql command.

Dataproc Metastore

  • Added --endpoint-protocol flag to gcloud metastore services update to specify the Customer-managed KMS key name to use for encrypting the Dataproc Metastore service.

Distributed Cloud Edge

  • Added --lro-timeout flag for gcloud edge-cloud container clusters node-pools create and gcloud edge-cloud container clusters node-pools create to allow specifying a custom duration for the gcloud CLI to wait on LROs.

GKE Hub

  • Fixed the issue of applying generated RBAC policies for third-party identities using the command gcloud container fleet memberships generate-gateway-rbac.

Kpt

Kubernetes Engine

  • Modified local ssd count value of --ephemeral-storage-local-ssd, --ephemeral-storage, and --local-nvme-ssd-block flags from gcloud container cluster create/update to be optional to support third generation machine types, which specify a static count. Pre-Gen3 behavior is unchanged.

Network Services

  • Updated gcloud network-services gateways to show a new ipVersion field for alpha version.

Workbench

  • Fixed issues with boot-disk-kms-key and data-disk-kms-key flags from gcloud workbench instances create command not working properly.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

449.0.0 (2023-10-03)

Breaking Changes

  • (Compute Engine) Modified gcloud beta compute future-reservations update to replace the paths query parameter with update_mask.

App Engine

  • Enable devappserver support for Go 1.21 runtime.

Cloud Dataproc

  • Fixed a bug that caused Instance Flexibility Policy to be disabled if a user only specified --secondary-worker-machine-types in dataproc clusters create command for the secondary workers flags.

Cloud Functions

  • Updated gcloud functions add-invoker-policy-binding and gcloud functions remove-invoker-policy-binding to support Cloud Functions (1st gen).

Cloud Run

  • Show mounted volumes in gcloud run services describe and gcloud run revisions describe.
  • Updated display format for task timeout in gcloud run jobs describe and gcloud run jobs executions describe. Timeouts larger than 1 minute will now show the duration in hours, minutes, and seconds.

Cloud Storage

  • Updated gsutil component to 5.26.
  • Resolved an issue where metadata flags were disregarded when interacting with the Google Cloud Storage and S3 XML APIs.

Cloud TPU

  • Promote --internal-ips flag of gcloud compute tpus tpu-vm update to GA.

Cloud Workstations

  • Added --service-account-scopes flag to workstations configs create and workstations configs update.

Compute Engine

  • Added --public-delegated-prefix flag to gcloud compute public-delegated-prefixes create and promoted the new flag to GA.
  • Added boot-disk-provisioned-throughput support to gcloud compute instances create and gcloud compute instance-templates create.

Distributed Cloud Edge

  • Add gcloud edge-cloud container get-server-configcommand with --location flag to get server config in target location.

Kubernetes Engine

  • Added --enable-fleet flag to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in GA track.
  • Added --fleet-project flag to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in GA track.
  • Added --clear-fleet-project flag to gcloud container clusters update in GA track.
  • Added --resource-manager-tags flag to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update to manage tags on the underlying Compute Engine VMs of GKE Nodes which can be used to selectively enforce Cloud Firewall network firewall policies.
  • Added --autoprovisioning-resource-manager-tags flag to gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update to manage tags on the underlying Compute Engine VMs of GKE Nodes which can be used to selectively enforce Cloud Firewall network firewall policies.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

448.0.0 (2023-09-26)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.5-3.7. The minimum supported Python version is Python 3.8.

Google Cloud CLI

  • Updated Mac installer to prompt to install Python 3.10.11.

Anthos On-Prem

  • Promoted gcloud container vmware admin-clusters to GA.
  • Promoted gcloud container vmware clusters to GA.
  • Promoted gcloud container vmware node-pools to GA.
  • Promoted gcloud container vmware operations to GA.
  • Promoted gcloud container bare-metal admin-clusters to GA.
  • Promoted gcloud container bare-metal clusters to GA.
  • Promoted gcloud container bare-metal node-pools to GA.
  • Promoted gcloud container bare-metal operations to GA.

App Engine

  • Fixed "https://github.com/GoogleCloudPlatform/java-docs-samples/issues/8659".

Artifact Registry

  • Improved error reporting for artifacts repositories set-cleanup-policies.
  • Added Registry URL to the output of artifacts repositories describe.
  • Added VEX_SCOPE column to gcloud artifact vulnerabilities list results.

Cloud Deploy

  • Fixed an issue where you couldn't create a release without clouddeploy.config.get permission.

Cloud Healthcare

  • Added --parser-version flag to gcloud healthcare hl7v2-stores create to enable specifying parser config version.
  • Updated gcloud healthcare hl7v2-stores list to include PARSER_VER header.

Cloud NetApp

  • Added --source-backup flag to gcloud beta netapp volumes {create,update} in order to introduce a source backup resource to restore to during disaster recovery.

Cloud Workstations

  • Added support for the replica zones flag in the beta workstations config create command.

Distributed Cloud Edge

  • Added --control-plane-kms-key flags to gcloud edge-cloud container clusters create command to allow specify a KMS key for the control plane data encryption of remote control plane clusters.
  • Fixed parsing of new cluster creation properties --system-addons-confg, --external-lb-ipv4-address-pools, --control-plane-node-count, --control-plane-machine-filter, --control-plane-shared-deployment-policy, --version, --release-channel, --version, and --release-channel.

Eventarc

  • Added destination-http-endpoint-uri, destination-http-endpoint-forward-dns-requests and network-attachment flags to gcloud eventarc triggers create as part of Eventarc integration with Message Streams.

Network Security

  • New flag to add description for Firewall Endpoint in create and update commands.

Vmware Engine

  • Deprecated --node-type-config flag from gcloud vmware private-clouds clusters update command.
  • Added --update-nodes-config and --remove-nodes-config flags in gcloud vmware private-clouds clusters update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

447.0.0 (2023-09-19)

Breaking Changes

  • (GKE Hub) Removed gcloud {alpha, beta} fleet namespaces. Use gcloud fleet scopes namespaces instead.
  • (GKE Hub) Removed gcloud {alpha, beta} fleet namespaces rbacrolebindings. Use gcloud fleet scopes rbacrolebindings instead.
  • (Network Connectivity) Deprecated gcloud network-connectivity spokes accept and gcloud network-connectivity spokes reject commands. Use gcloud network-connectivity hubs accept-spoke and gcloud network-connectivity hubs reject-spoke commands instead.

Google Cloud CLI

  • Improved post-processing times during gcloud components update and gcloud components install on macOS and Linux.
  • Fixed write permission check for gcloud auth enterprise-certificate-config create.

Anthos On-Prem

  • Added --vcenter-resource-pool, --vcenter-datastore, --vcenter-datacenter, --vcenter-cluster, --vcenter-folder, --vcenter-ca-cert-data, --vcenter-storage-policy-name to gcloud container vmware clusters create to specify vCenter configurations that are different from its admin cluster.

App Engine

Binauthz

  • Added flag --pae-encode-payload in command gcloud container binauthz attestations sign-and-create to generate DSSE format attestations.
  • Added flag --dsse-type in command gcloud container binauthz attestations sign-and-create to allow specifying the DSSE type for the attestations.

Cloud Dataproc

  • Added --secondary-worker-machine-types flags to gcloud dataproc clusters create.

Cloud Datastream

  • Fixed a bug updating the backfill policy of a stream.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.18.2
    • Remove nanosecond precision of event timestamp in the Firestore eventarc integration(2nd gen).
    • Fix a bug to make emulator consistent with production for queries.

Cloud Memorystore

  • Updated gcloud memcache instances create command to include MEMCACHE_1_6_15 as an allowed value for memcached-version flag.
  • Promoted the command gcloud memcache instances upgrade to GA.

Cloud NetApp

  • Fixed a crash when creating NetApp snapshots, backup policies, backup vaults.

Cloud Storage

  • Added the storage/parallel_composite_upload_prefix config option, which allows adjusting the paths of temporary components created during composite uploads.

Cloud TPU

  • Promote gcloud compute tpus tpu-vm update command and its --description flag to GA.

Compute Engine

  • Promoted --purpose=global-managed-proxy flag of gcloud compute networks subnets create to GA.

  • Added 'STANDARD_WITH_GRAPHQL' enum value to gcloud compute security-policies update --json-parsing and promoted it to beta.

  • Added specific-then-any-reservation and specific-then-no-reservation to the flag --reservation-affinity for alpha and beta in:

    • gcloud compute instances create
    • gcloud compute instances bulk create
    • gcloud compute instances-templates create

Database Migration

  • Added POSTGRES_15 database version option for --database-version flag to database-migration connection-profiles create cloudsql.
  • Added server side SSL support using --ca-certificate flag in database-migration connection-profiles create oracle.
  • Added oracle connection update support via database-migration connection-profiles update oracle.

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.43 to 1.0.0-beta.44.

Kubernetes Engine

  • Added --enable-backup-restore flag to gcloud container clusters create-auto to allow enabling Backup for GKE agent on Autopilot clusters at creation time.

Network Connectivity

  • Added gcloud network-connectivity hubs accept-spoke and gcloud network-connectivity hubs reject-spoke commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

446.0.1 (2023-09-14)

Cloud Run

  • Fixed race condition where tags could go to different Revisions than expected

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

446.0.0 (2023-09-12)

AlloyDB

  • Added the ability to specify a backup or source cluster using its full resource path when creating a restored cluster. This enables restoring across projects.

Anthos Multi-Cloud

  • Added --instance-type flag to gcloud container aws node-pools update to update the EC2 instance type of node pool nodes.

BigQuery

  • Added --external_source flag for dataset creation.
    • Updated bq show to display tags on a table.
    • Fixed an issue where a command could fail with little to no messaging. Other uncaught cases will need --debug_mode to get more information.
    • Fixed a bug when updating kms_key_name on a connection.
    • Improved logging for discovery doc load and authentication.
    • Utilized new python features with breaking changes for python 2.

Certificate Manager

  • Promoted gcloud certificate-manager trust-configs delete to GA.
  • Promoted gcloud certificate-manager trust-configs describe to GA.
  • Promoted gcloud certificate-manager trust-configs export to GA.
  • Promoted gcloud certificate-manager trust-configs import to GA.
  • Promoted gcloud certificate-manager trust-configs list to GA.

Cloud Billing

  • Added filter-resource-ancestors flag to gcloud billing budget CLI to include folders and organizations filter.

Cloud Composer

  • Added maintenance window flags for environment update:
    • --maintenance-window-start
    • --maintenance-window-end
    • --maintenance-window-recurrence
    • --clear-maintenance-window.

Cloud Dataplex

  • Added snake case support for dataplex datascans spec file.

Cloud Filestore

  • Updated --capacity flag description with High Scale tier capacity range.

Cloud Monitoring

  • Updated the format of gcloud beta monitoring metrics-scopes list <PROJECT_ID> to gcloud beta monitoring metrics-scopes list projects/<PROJECT_ID>.
  • Updated the format of gcloud beta monitoring metrics-scopes create <PROJECT_ID> to gcloud beta monitoring metrics-scopes create projects/<PROJECT_ID>.
  • Updated the format of gcloud beta monitoring metrics-scopes delete <PROJECT_ID> to gcloud beta monitoring metrics-scopes delete projects/<PROJECT_ID>.

Cloud NetApp

  • Add Standard service level to gcloud (alpha|beta) netapp storage-pools command group.
  • Removed explicit check on --volume in gcloud netapp volumes replications stop command.

Compute Engine

  • Added support for --cloudbuild-service-account flag for:

    • gcloud compute images import in GA;
    • gcloud compute instances import in GA;
    • gcloud compute machine_images import in GA.

  • Added alpha and beta versions of a new API named snapshot settings. Documentation of this feature will be available at https://cloud.google.com/compute/docs/disks/snapshot-settings following shortly after the release of this version of gcloud CLI.

Distributed Cloud Edge

  • Added --version and --release-channel flags to gcloud edge-cloud container clusters create command to allow specifying the cluster version and release channel.
  • Promoted --system-addons-confg, --external-lb-ipv4-address-pools, --control-plane-node-count, --control-plane-machine-filter, --control-plane-shared-deployment-policy, --version, and --release-channel flags from ALPHA to GA.

Network Security

  • Promoted gcloud network-security server-tls-policies delete to GA.
  • Promoted gcloud network-security server-tls-policies describe to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

445.0.0 (2023-09-06)

Breaking Changes

  • (GKE Hub) Removed --security-posture and --workload-vulnerability-scanning flags of gcloud container fleet and gcloud beta container fleet.
    • --security-posture and --workload-vulnerability-scanning flags are not supported yet.
  • (GKE Hub) Updated anthos-support and users flags to be mutually exclusive in adding groups support to gcloud container fleet memberships generate-gateway-rbac command.

Google Cloud CLI

  • Fixed issue where the gcloud CLI would crash on unknown platforms.
  • Added a warning that --update-adc is now deprecated for 1st-party user credentials and replaced by gcloud auth application-default login.

Anthos Multi-Cloud

  • Promoted --enable-autorepair and --no-enable-autorepair of gcloud container aws node-pools create to GA.
  • Promoted --enable-autorepair and --no-enable-autorepair of gcloud container aws node-pools update to GA.
  • Promoted --enable-autorepair and --no-enable-autorepair of gcloud container azure node-pools create to GA.
  • Promoted --enable-autorepair and --no-enable-autorepair of gcloud container azure node-pools update to GA.
  • Added --admin-groups flag to gcloud container aws clusters create for setting groups as admins.
  • Added --admin-groups flag to gcloud container aws clusters update for setting groups as admins.
  • Added --admin-groups flag to gcloud container azure clusters create for setting groups as admins.
  • Added --admin-groups flag to gcloud container azure clusters update for setting groups as admins.
  • Added --admin-groups flag to gcloud container attached clusters create for setting groups as admins.
  • Added --admin-groups flag to gcloud container attached clusters register for setting groups as admins.
  • Added --admin-groups flag to gcloud container attached clusters update for setting groups as admins.
  • Added --proxy-secret-name and --proxy-secret-namespace flags to gcloud container attached clusters to configure an HTTP/HTTPS proxy for outbound traffic.
  • Added --binauthz-evaluation-mode flag to gcloud container aws clusters create to configure Binary Authorization evaluation mode.
  • Added --binauthz-evaluation-mode flag to gcloud container aws clusters update to configure Binary Authorization evaluation mode.
  • Added --binauthz-evaluation-mode flag to gcloud container attached clusters register to configure Binary Authorization evaluation mode.
  • Added --binauthz-evaluation-mode flag to gcloud container attached clusters update to configure Binary Authorization evaluation mode.
  • Added --clear-admin-groups and --clear-admin-users flags to gcloud container attached clusters update to clear admin users and groups from the cluster.

Cloud Billing

Cloud Build

  • Modified gcloud builds submit to support submitting a build with 2nd-gen repository resource.
  • Added --dir and --revision flag in gcloud builds submit command.

Cloud Deploy

  • Added support to fail fast when using an unsupported Skaffold version in the create release command.
  • Added a new command deploy get-config which gets the config for the specified region and project.

Cloud Firestore

  • Added Firestore backups feature support to Alpha.

Cloud NetApp

  • Added --restricted-actions flag to gcloud netapp volumes and gcloud beta netapp volumes during create and update.

Cloud Run

  • Added --dry_run flag to gcloud beta run services replace, which will validate the YAML service specification without applying it.
  • Modified the output format of gcloud run services describe and gcloud run revisions describe to support multiple containers.

Cloud SQL

  • Promoted --password-policy-disallow-compromised-credentials flag for gcloud sql instances create and gcloud sql instances patch to GA.

Cloud TPU

  • Fixed issue where gcloud compute tpus tpu-vm ssh is unable to login when project-level enable-oslogin:TRUE is configured and instance-level enable-oslogin is unset.

Compute Engine

  • Promoted the flag of --instance-template-region to GA in gcloud compute instance-templates create.
  • Promoted the flag of --region to GA in:
    • gcloud compute instance-templates list
    • gcloud compute instance-templates delete
    • gcloud compute instance-templates describe.

Distributed Cloud Edge

  • Added --version and --release-channel flags to gcloud edge-cloud container clusters create command to allow specifying the cluster version and release channel.

GKE Hub

  • Updated gcloud container fleet memberships generate-gateway-rbac to include handling for first-party groups (email) and third-party groups of the format principalSet://iam.googleapis.com/locations/global/workforcePools/example-pool/group/third party group.

Kpt

  • Updated kpt to v1.0.0-beta.43 release. Refer to release notes for more details.

Kubernetes Engine

  • Deprecate --enable-workload-config-audit, --enable-workload-vulnerability-scanning, and enable-security-posture flags in gcloud container clusters {create, create-auto, update}. The replacements for these are:
    • --enable-workload-config-audit -> --security-posture=standard
    • --enable-security-posture -> --security-posture=standard
    • --enable-workload-vulnerability-scanning -> --workload-vulnerability-scanning=standard
  • Added enterprise value to the available modes for --workload-vulnerability-scanning flag in the alpha and beta tracks.
  • Updated default kubectl from 1.27.4 to 1.27.5.
  • Additional kubectl versions:
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.17)
    • kubectl.1.25 (1.25.13)
    • kubectl.1.26 (1.26.8)
    • kubectl.1.27 (1.27.5)
    • kubectl.1.28 (1.28.1)

Network Connectivity

  • Added gcloud network-connectivity hubs groups command group.
  • Added gcloud network-connectivity service-connection-policies update command.

Notebooks

  • Added --timeout-minutes to the following commands to allow specifying custom timeout for the diagnose operation.
    • gcloud notebooks instances diagnose
    • gcloud notebooks runtimes diagnose

Policy Troubleshooter

  • Promoted gcloud policy-intelligence troubleshoot-policy iam to GA.

Workbench

  • Fixed workbench instances diagnose flags.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

444.0.0 (2023-08-22)

AI

  • Added gcloud beta ai persistent-resources command group which supports creating and managing persistent resources for running custom training jobs.

AlloyDB

  • Added flag --availability-type to specify availability-type for an instance to the following commands:

    • gcloud alloydb instances create
    • gcloud alloydb instances update
    • gcloud alloydb instances create-secondary

  • Added the following flags of gcloud alloydb instances create and gcloud alloydb instances update to alpha, beta and GA:

    • --ssl-mode
    • --require-connectors

  • Added flag --allocated-ip-range-name to specify the allocated IP range for a cluster to the following commands:

    • gcloud alloydb clusters create
    • gcloud alloydb clusters restore
    • gcloud alloydb clusters create-secondary

Anthos Multi-Cloud

  • Added --node-labels flag to gcloud container aws node-pools update to update the labels assigned to node pool nodes.
  • Added --clear-node-labels flag to gcloud container aws node-pools update to clear the labels assigned to node pool nodes.

App Engine

BigQuery

  • Added --quota_project_id flag to force the quota project of a request.

Cloud Billing

  • Promoted gcloud billing accounts and gcloud billing projects to GA.

Cloud Dataplex

  • Promoted resource-read-access-mode flag in assets command group to GA.
  • Added export-results-table flag in datascans create data-profile command.

Cloud Dataproc

  • Added --min-num-workers flags to gcloud dataproc clusters create.
  • Added gcloud beta dataproc sessions to create and manage Dataproc interactive sessions.
  • Added gcloud beta dataproc session-templates to create and manage Dataproc session templates.

Cloud NetApp

  • Added gcloud netapp operations and gcloud netapp locations command group.

Cloud Run

  • Added gcloud beta run jobs executions cancel to allow cancelling a running Cloud Run job execution.

Compute Engine

  • Promoted support for Standby Policy for gcloud compute instance-groups managed create in Alpha.
  • Promoted support for Standby Policy for gcloud compute instance-groups managed update in Alpha.
  • Promoted compute routers get-nat-ip-info to GA.
  • Promoted gcloud compute future-reservations command group to beta.

Connectors

  • Added gcloud connectors command group. Commands in this group provide ways to interact with Integration Connectors resources.

Dataproc Metastore

  • Promoted gcloud metastore operations cancel to GA.

GKE Hub

  • Promoted GkeHub tenancy commands to GA.
    • Promoted gcloud container fleet methods to GA.
    • Promoted gcloud container fleet memberships bindings to GA.
    • Promoted gcloud container fleet scopes to GA.
    • Promoted gcloud container fleet scopes namespaces to GA.
    • Promoted gcloud container fleet scopes rbacrolebindings to GA.

Network Connectivity

  • Updated gcloud network-connectivity internal-ranges to support overlap-existing-subnet-range enum value for --overlaps flag during create and update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

443.0.0 (2023-08-15)

AI

  • Added --notification-channels flag to gcloud beta ai model-monitoring-jobs create|update to allow sending alerts to notification channels.

AlloyDB

  • Added option for --cpu-count=96 in instances create and instances update commands.
  • Added support for specifying --database-version in clusters create command in alpha and beta tracks.

Anthos Multi-Cloud

  • Promoted --spot-instance-types flag of gcloud container aws node-pools create to GA.

Anthos On-Prem

  • Promoted gcloud vmware admin-clusters unenroll to beta.

Artifact Registry

  • Added --remote-apt-repo and --remote-apt-repo-path to gcloud artifacts repositories create to support Apt remote repos.
  • Added --remote-yum-repo and --remote-yum-repo-path to gcloud artifacts repositories create to support Yum remote repos.
  • Fixed issue where gcloud artifacts versions delete --delete-tags errors, when the package name has slashes.
  • Updated to use the project from URI of gcloud artifacts sbom export for requests.
  • Include InTotoSlsaProvenanceV1 in the process of computing SLSA build level.

Cloud Bigtable

  • Promoted gcloud bigtable backups copy to beta and GA.

Cloud Build

  • Remove gcloud builds triggers create gitlab-enterprise command.

Cloud DNS

  • Added support to allow specifying Global internal Application load balancers as health checked targets for Routing Policies.

Cloud Dataflow

  • Promoted gcloud dataflow jobs update-options from beta to GA.

Cloud Deploy

  • Enable "Uniform Bucket Level Access" by default for the Cloud Storage buckets created in gcloud deploy releases create.

Cloud Domains

  • Added information about an agreement between Google and Squarespace, Inc. to Cloud Domains gcloud domains registrations command group.

Cloud On Demand Scanning

  • Fixed issue with extracting packages from Go binaries with invalid dependency versions.

Cloud Storage

  • Fixed --uri flag for buckets list and objects list commands.

Compute Engine

  • Promoted AWS Origin Authentication in BackendService compute API to v1.
  • Added --managed-protection-tier flag to gcloud beta compute project-info update command.

Kubernetes Engine

  • Added --tpu-topology flag to gcloud container node-pools create for creating TPU node pools with a TPU topology. For more information on TPU topologies, see https://cloud.google.com/tpu/docs/types-topologies#tpu_topologies. flag when create a cluster.
  • Added hugepage related options inside existing --system-config-from-file flag for users to configure hugepages to clusters/nodepools.

Network Management

  • Updated gcloud network-management connectivity-tests list command to print details about Google-managed endpoints, networks, and forwarding rules.
  • Updated help text for the ipAddress argument in gcloud network-management connectivity-tests to keep it consistent with the currently supported scenarios.

Workbench

  • Fixed issue with metadata flag for gcloud workbench instances create.
  • Fixed issue with service-account-email flag for gcloud workbench instances create.
  • Fixed issue with machine_type flag for gcloud workbench instances update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

442.0.0 (2023-08-08)

Artifact Registry

  • Added an argument group of two flags allow-sbom-generation and disable-sbom-generation to gcloud artifacts repositories create, to set the SBOM generation config of the repository.
  • Added an argument group of two flags allow-sbom-generation and disable-sbom-generation to gcloud artifacts repositories update, to set the SBOM generation config of the repository.
  • Added gcloud artifacts sbom export command to export SBOM into Google Cloud Storage.
  • Added gcloud artifacts sbom list command to list SBOMs.
  • Added gcloud artifacts sbom load command to upload a custom SBOM for an artifact.
  • Added gcloud artifacts vulnerabilities load-vex command to upload a vex statement.
  • Added gcloud artifacts vulnerabilities list command to list vulnerabilities for an artifact.

Bare Metal Solution

  • Promoted gcloud bms os-images list to GA.

BigQuery

  • Fixed a bug in discovery doc load when caching is used.
  • Fixed a bug that caused a crash in some common actions like bq show.

Cloud Dataflow

  • Added gcloud beta dataflow jobs update-options which updates properties of running dataflow jobs.

Cloud Functions

Cloud Memorystore

  • Added MEMCACHED_VERSION field to the output of the command gcloud memcache instances list to specify memcached version of the instance.

Cloud Run

  • Added --network, --subnet, --network-tags, --clear-network and --clear-network-tags flags to the following commands to allow enabling or disabling Direct VPC egress for a Cloud Run service or job:
    • gcloud beta run deploy
    • gcloud beta run services update
    • gcloud beta run jobs create
    • gcloud beta run jobs deploy
    • gcloud beta run jobs update
  • Added --args, --task-timeout, --tasks and --update-env-vars flags to gcloud beta run jobs execute to allow executing a Cloud Run job with runtime overrides.

Cloud SQL

  • Added --enable-private-service-connect, --allowed-psc-projects and --clear-allowed-psc-projects flags to gcloud sql instances create and gcloud sql instances patch to support Private Service Connect for Cloud SQL.
  • Added gcloud sql instances reencrypt, which re-encrypts a Cloud SQL CMEK instance with the current primary key version.

Cloud Services

  • Promoted gcloud services api-keys lookup to GA.

Compute Engine

  • Added support for version=12 and short-name=debian in --os-types for gcloud beta compute instances ops-agents policies [create|update].
  • Promoted --auto-network-tier flag of gcloud compute routers nats create and gcloud compute routers nats update to GA.
  • Added --local-ssd-recovery-timeout to specify the timeout to recover Local SSD to GA for:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
    • gcloud compute instances bulk create
    • gcloud compute instances set-scheduling
    • gcloud compute instances update-from-file
  • Added gcloud compute security-policies add/remove-layer7-ddos-defense-threshold-config.
  • Added --maintenance-interval to specify the frequency of planned maintenance events to beta for:
    • gcloud compute instance-templates create
  • Promoted --resource-policies flag for glcloud compute commitments createto to beta.
  • Promoted --resource-policies flag for glcloud compute commitments createto to GA.

Database Migration

  • Modified gcloud database-migration connection-profiles --help to specify what the host field value should be when --psc-service-attachment is also specified.
  • Added --edition to gcloud database-migration connection-profiles create cloudsql to allow creating a connection profile with the edition of the given Cloud SQL instance.
  • Added skip-validation param to gcloud database-migration migration-jobs start and gcloud database-migration migration-jobs restart to allow starting/restarting migration jobs without running validations.

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.37 to 1.0.0-beta.41.

Kubernetes Engine

  • flag when create a cluster.
  • Fixed issue of gcloud container cluster update --dataplane-v2-observability-mode resetting dataplane-v2-metrics to false.
  • Updated help-text by adding hyperdisk types to --disk-type choices.

Network Management

  • Added forwardingRule argument for destination in gcloud network-management connectivity-tests. This allows the user to run tests using a Forwarding Rule endpoint as a source.

Network Security

  • Added labels support for Security Profile create, add-override, delete-override and update-override commands.

Recommender

  • Added a list command for locations that lists all locations.

Transcoder

  • Added support for --batch-mode-priority flag when creating a new job.

Transfer

  • Log info about agent delete delays.
  • Fix bug for users mounting root with --mount-directories.

Workbench

  • Added gcloud workbench instances rollback to rollback workbench instances.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

441.0.0 (2023-08-01)

Artifact Registry

  • Include InTotoSlsaProvenanceV1 in the provenance output of gcloud artifacts docker images describe when using --show-provenance flag.
  • Deprecated artifacts repositories set-cleanup-policies --overwrite. The overwrite action is now the default behavior.

BigQuery

  • Fixed bug where local discovery docs were not loaded locally.
  • Added file_set_spec_type flag to support manifest Files in load jobs and external tables.

Cloud Bigtable

  • Updated --transactional-writes behavior in gcloud bigtable app-profile update to no longer silently disable transactional writes, if not specified. --no-transactional-writes must be used to disable transactional writes, as opposed to the previous behavior, which only required omitting --transactional-writes.

Cloud Build

  • Fixed issue where gcloud builds triggers update pubsub command returned invalid request when not providing pubsub topic.

Cloud Composer

  • Fixed an issue where using comments in the requirements.txt file broke updating Python packages.

Cloud Dataplex

  • Promoted datascans command group to GA.

Cloud Key Management Service

  • Added gcloud kms raw-encrypt and gcloud kms raw-decrypt commands to support raw symmetric encryption algorithms AES-128-GCM, AES-256-GCM, AES-128-CBC, AES-256-CBC, AES-128-CTR, and AES-256-CTR.

Cloud NetApp

  • Removed some extra fields in gcloud {beta, alpha} netapp {storage-pools, volumes, kms-configs} list due to messy output when too many fields.

Cloud Storage

  • Fixed behavior when preserving both symlinks and POSIX metadata on an OS with limited symlink support.
  • Fixed an issue clobbering an existing file on download if the file is a broken symlink.
  • Fixed an issue causing some hidden files to be skipped or transferred multiple times.
  • Added name field to objects and buckets list and describe commands.
  • Added bucket field to objects list and describe commands.

Cloud Workstations

  • Added --enable-nested-virtualization flag to gcloud workstations configs to enable nested virtualization on new or existing Cloud Workstation Configurations.

Compute Engine

  • Added new ENDPOINT_TYPE_MANAGED_PROXY_LB enum option to --endpoint-types flag of gcloud compute routers nats create in beta.
  • Promoted any-single-zone target distribution shape for regional managed instance groups to GA.
  • Promoted regional INTERNET_IP_PORT and INTERNET_FQDN_PORT Network Endpoint Groups in gcloud compute network-endpoint-groups to beta. Affected commands:
    • gcloud compute network-endpoint-groups create - support for Internet NEG types in regional scopes
    • gcloud compute network-endpoint-groups list-network-endpoints
    • gcloud compute network-endpoint-groups update <RESOURCE_NAME> --add-endpoint
    • gcloud compute network-endpoint-groups update <RESOURCE_NAME> --remove-endpoint
  • Update replica-zones support --create-disk=replica-zones for gcloud compute instance-templates create.
  • Promoted --purpose=global-managed-proxy flag of gcloud compute networks subnets create to beta.

Database Migration

  • Added gcloud database-migration conversion-workspaces describe-ddls which describes DDLs in a Database Migration Service conversion workspace.
  • Added gcloud database-migration conversion-workspaces describe-issues which describes issues in a Database Migration Service conversion workspace.
  • Added gcloud database-migration migration-jobs create to allow creating a migration job with a dump parallelization level.
  • Added gcloud database-migration migration-jobs update to allow configuring a migration job with a dump parallelization level.
  • Added --allocated-ip-range to gcloud connection-profiles create cloudsql to allow using an allocated subnet range when creating the destination Cloud SQL instance with a private connection.

GKE Hub

  • Updated gcloud container fleet memberships generate-gateway-rbac to include handling for third-party principals of the format principal://iam.googleapis.com/locations/global/workforcePools/example-pool/subject/third party user.

Kubernetes Engine

  • Updated default kubectl from 1.25.11 to 1.26.7.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.16)
    • kubectl.1.25 (1.25.12)
    • kubectl.1.26 (1.26.7)
    • kubectl.1.27 (1.27.4)
  • Removed prerequisite for using --enable-master-global-access

Network Connectivity

  • Updated gcloud network-connectivity internal-ranges update to support setting and clearing overlaps.

Network Security

  • Added labels support for Security Profile Group create and update commands.

Policy Simulator

  • Added gcloud beta policy-intelligence simulate orgpolicy which runs a Simulation for OrgPolicy.

Pubsub Emulator

  • Fixed issue where messages may not be delivered in order when using unary pull.

Workbench

  • Added gcloud workbench to manage workbench instances.
  • Added gcloud workbench instances add-iam-policy-binding to add iam policy for workbench instances.
  • Added gcloud workbench instances delete to delete workbench instances.
  • Added gcloud workbench instances describe to describe workbench instances.
  • Added gcloud workbench instances get-iam-policy to get the iam policy for workbench instances.
  • Added gcloud workbench instances remove-iam-policy-binding to remove the iam policy binding for workbench instances.
  • Added gcloud workbench instances set-iam-policy to set the iam policy for workbench instances.
  • Added gcloud workbench instances reset to reset workbench instances.
  • Added gcloud workbench instances stop to stop workbench instances.
  • Added gcloud workbench instances start to start workbench instances.
  • Added gcloud workbench instances diagnose to diagnose workbench instances.
  • Added gcloud workbench instances upgrade to upgrade workbench instances.
  • Added gcloud workbench instances check-instance-upgradability to check upgradability of workbench instances.
  • Added gcloud workbench instances create to create workbench instances.
  • Added gcloud workbench instances update to update workbench instances.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

440.0.0 (2023-07-25)

Cloud Build

  • Updated help text for --comment-control flag in gcloud builds triggers bitbucket-server, gcloud builds triggers gitlab and gcloud builds triggers gitlab-enterprise to describe the allowed values.

Cloud Composer

  • Added --enable-high-resilience to gcloud composer environments update to enable high resilience mode for environments.
  • Added --disable-high-resilience to gcloud composer environments update to disable high resilience mode for environments.

Cloud DNS

  • Added support to allow specifying regional L7 forwarding rules as health checked targets for Routing Policies.

Cloud Healthcare

  • Added support for --stream-configs and --send-for-bulk-import flags to the following commands:
    • gcloud healthcare dicom-stores create
    • gcloud healthcare dicom-stores update
    • gcloud beta healthcare dicom-stores list
    • gcloud healthcare dicom-stores list

Cloud NetApp

  • Added LOCATION to fields to be listed in structured output during gcloud beta netapp volumes list.

Cloud Pub/Sub

  • Added a warning when --push-auth-token-audience and --push-auth-service-account flags are ignored due to missing dependent flags in gcloud pubsub subscriptions [create|update|modify-push-config] commands.

Cloud Storage

  • Modified buckets create so that multiple buckets can be created with a single command.

Compute Engine

  • Promoted --service-lb-policy flag of gcloud compute backend-services create and gcloud compute backend-services update to beta.
  • Promoted --type flag of gcloud compute routers nats create to beta.
  • Promoted --source-nat-active-ranges, --source-nat-active-ranges-region, --source-nat-drain-ranges, --clear-source-nat-drain-ranges and --source-nat-drain-ranges-region flags of gcloud compute routers nats rule update to beta.
  • Promoted --source-nat-active-ranges and --source-nat-active-ranges-region flags of gcloud compute routers nats rule create to beta.
  • Promoted new allowed value: PRIVATE_NAT for --purpose flag of gcloud compute networks subnets create to beta.
  • Promoted new :ALL range option for subnets passed to --nat-custom-subnet-ip-ranges flag of gcloud compute routers nats (create|update).
  • Promoted --security-profile-group and --[no-]tls-inspect flags for gcloud compute <network->firewall-policies rules <create|update> to beta.
  • Promoted gcloud compute resource-policies update snapshot-schedule to GA.
  • Promoted --force-update-on-repair flag of gcloud compute instance-groups managed <create | update> to GA.
  • Promoted --confidential-compute flag of gcloud compute disks create to beta.
  • Promoted --create-disk=confidential-compute for gcloud compute instances create to beta.

Container Registry

  • Fixed gcloud container images describe for gcr.io repos in Artifact Registry.

Kubernetes Engine

  • Updated broken links in gcloud container get-credentials help text.
  • Added --network-performance-configs=total-egress-bandwidth-tier=[DEFAULT|TIER_1] to gcloud container clusters create and gcloud container clusters update to allow setting default network performance tier for new node-pools. See gcloud container node-pools create.
  • Added --enable-multi-networking to gcloud container clusters create and added --additional-node-network and --additional-pod-network to gcloud container node-pools create to allow creation of multi-networking enabled clusters with additional node and pod networks.
  • Added --placement-policy flag to gcloud container clusters create command.
  • Added --placement-policy flag to gcloud container node-pools create command.
  • Disabled --enable-insecure-kubelet-readonly-port flag.
  • Updated help-text by removing --release-channel=NONE option for gcloud container create-auto. This option is not available for create-auto since Autopilot cluster must be subscribed to a release-channel.

Transcoder

  • Added support for --optimization flag when creating a new job.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

439.0.0 (2023-07-18)

Breaking Changes

  • (Kubernetes Engine) Renamed --binauthz-policy to --binauthz-policy-bindings in gcloud beta container clusters commands.

App Engine

Assured Workloads

  • Added --partner-permissions flag (optional) for gcloud assured workloads create command to enable setting the partner permissions parameter for creation of partner workload (workload managed by local trusted partners) through gcloud command.

BigQuery

  • Updated bundled discovery docs to revision 20230614.
  • Fixed bug stopping httplib2_debuglevel from being used.
  • Added file_set_spec_type flag to support manifest Files in load jobs and external tables.
  • Added destination_kms_key to create / update transfer configs.

Cloud Bigtable

  • Added --change-stream-retention-period flag to gcloud bigtable instances tables create and gcloud bigtable instances tables update.
  • Added --clear-change-stream-retention-period flag to gcloud bigtable instances tables update.
  • Rebuilt with golang 1.20.6 to address CVEs present in prior versions.

Cloud Bigtable Emulator

  • Rebuilt with golang 1.20.6 to address multiple CVEs in prior versions of golang.
  • Added support for reverse scans.

Cloud Build

  • Promoted gcloud builds triggers update to GA.

Cloud Datastream

  • Fixed issue where creating an oracle profile with streamLargeObjects field returned an error.

Cloud Functions

  • Updated gcloud functions deploy to prompt to allow unauthenticated invocations for new 2nd gen functions before deploying. This aligns with the behavior for new 1st gen functions.

Cloud IAM

  • Added --web-sso-additional-scopes flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allows specification of additional OIDC scopes for web sign-in.

Cloud Memorystore

  • Added --reserved-ip-range-id flag to gcloud memcache instances create to allow specifying named allocations while creating an instance.

Cloud Pub/Sub

  • Promoted --push-no-wrapper and --push-no-wrapper-write-metadata flags of gcloud pubsub subscriptions [create|update|modify-push-config] to GA. Adds the ability to set and update payload unwrapping properties for push subscriptions. For more information, see the https://cloud.google.com/pubsub/docs/payload-unwrapping.

Cloud SQL

  • Added --[no-]recreate-replicas-on-primary-crash flag to gcloud sql instances create and gcloud sql instances patch to enable/disable replica recreation when a Mysql primary instance operating in reduced durability mode crashes.

Cloud Spanner

  • Added --priority flag to gcloud spanner databases execute-sql to allow setting request priority for the query to convey the relative importance of workloads.

Cloud Storage

  • Fixed gcloud storage buckets update --clear-log-bucket behavior so it now clears the entire logging configuration.
  • Promoted gcloud storage du command to GA.
  • Promoted gcloud storage hmac command group to GA.
  • Promoted gcloud sign-url command to GA.
  • Standardized resource format for describe and list commands across API providers. Use --raw flag to get the old API-specific format.

Compute Engine

  • Promoted --custom-learned-route-priority and --set-custom-learned-route-ranges flags of gcloud compute routers add-bgp-peer to GA.
  • Promoted --custom-learned-route-priority, --set-custom-learned-route-ranges, --add-custom-learned-route-ranges and --remove-custom-learned-route-ranges flags of gcloud compute routers update-bgp-peer to GA.
  • Promoted --http-keep-alive-timeout-sec flag for gcloud compute <target-http-proxies|target-https-proxies> <create|update> to GA.
  • Promoted --clear-http-keep-alive-timeout-sec flag for gcloud compute <target-http-proxies|target-https-proxies> update to GA.
  • Added --local-ssd-recovery-timeout to specify the timeout to recover Local SSD to beta for:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
    • gcloud compute instances bulk create
    • gcloud compute instances set-scheduling
    • gcloud compute instances update-from-file
  • Added --requested-features flag to gcloud compute interconnects create to allow requesting MACSec support for an Interconnect.
  • Promoted --requested-features flag of gcloud compute interconnects create to beta.
  • Promoted gcloud compute interconnects macsec get-config to beta.
  • Promoted gcloud compute interconnects macsec update to beta.
  • Promoted gcloud compute interconnects macsec add-key to beta.
  • Promoted gcloud compute interconnects macsec remove-key to beta.
  • Added gcloud compute interconnects macsec update-key to allow updating MACSec pre-shared keys.
  • Promoted gcloud compute interconnects macsec update-key to beta.
  • Custom machine type validation in regional gcloud compute instances bulk create command has been fixed.

GKE Hub

  • Promoted gcloud container fleet fleetobservability to GA.

Kubernetes Engine

  • Updated broken links in gcloud container get-credentials help text.
  • Added --enable-dataplane-v2-metrics and --dataplane-v2-observability-mode flags to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update.

Network Security

  • Updated import/export schema for gcloud network-security tls-inspection-policies with new fields in beta.
  • Security Profile Groups and Security Profiles only supports global location. --location flag now takes default global as location.
  • Updated Firewall Endpoint Associations resource to accept TLS inspection policy with an optional flag.

Security Command Center

  • Add deprecation notices to gcloud scc assets commands which are being deprecated in favor of Cloud Asset Inventory APIs.

Workbench

  • Added gcloud workbench to manage workbench instances.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

438.0.0 (2023-07-11)

Breaking Changes

  • (AI) Modified gcloud ai index-endpoints create to create public endpoint by default. Set --network flag to create private endpoint.
  • (Cloud IAM) Make --web-sso-response-type and --web-sso-assertion-claims-behaviorflag required in gcloud iam workforce-pools providers create-oidc.
  • (Stackdriver Debugger) Deleted gcloud deploy. Cloud Debugger is deprecated and was shut down May 31, 2023. For more information, see https://cloud.google.com/debugger/docs/deprecations.

Artifact Registry

  • Added artifacts repositories set-cleanup-policies.
  • Added artifacts repositories list-cleanup-policies.
  • Added artifacts repositories delete-cleanup-policies.

Backup For GKE

  • Added the following flags to gcloud container backup-restore restore-plans create and gcloud container backup-restore restore-plans update to expand cluster resource restore scope options:
    • --cluster-resource-scope-all-group-kinds
    • --cluster-resource-scope-selected-group-kinds
    • --cluster-resource-scope-excluded-group-kinds
    • --cluster-resource-scope-no-group-kinds
  • Deprecated --cluster-resource-restore-scope. Use --cluster-resource-selected-group-kinds instead.
  • Added the following flags to gcloud container backup-restore restore-plans create and gcloud container backup-restore restore-plans update to expand namespaced resourced restore scope options:
    • --no-namespaces
    • --excluded-namespaces

Cloud Build

  • Add E2_MEDIUM machine type.
  • Promoted gcloud builds connections and gcloud builds repositories to GA.
  • Promoted gcloud builds triggers create gitlab to GA.

Cloud Datastore Emulator

  • Released Cloud Datastore emulator v2.3.1
    • Fixed bug which caused /reset to never return a response.

Cloud Functions

  • Added warning and prompting to gcloud functions get-iam-policy and gcloud functions remove-iam-policy-binding about needing to bind the roles/run.invoker role for 2nd gen functions.

Cloud Healthcare

  • Added --stream-configs flag to the following commands:
    • gcloud beta healthcare dicom-stores create
    • gcloud beta healthcare dicom-stores update

Cloud IAM

  • Added --client-secret-value flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup client secret for authorization code flow.
  • Added --clear-client-secret flag to gcloud iam workforce-pools providers update-oidc which allow user to clear client secret setup for authorization code flow.
  • Added code as value for --web-sso-response-type flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to setup authorization code flow.
  • Added merge-user-info-over-id-token-claims as value for --web-sso-assertion-claims-behavior flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc which allow user to merge the UserInfo Endpoint Claims with ID Token Claims, preferring UserInfo Claim Values for the same Claim Name.

Cloud Pub/Sub

  • Promoted --cloud-storage-bucket, --cloud-storage-file-prefix, --cloud-storage-file-suffix, --cloud-storage-max-bytes, --cloud-storage-max-duration, --cloud-storage-output-format and --cloud-storage-write-metadata flags of gcloud pubsub subscriptions create to GA. Adds the ability to set Cloud Storage configuration options in Cloud Pub/Sub subscriptions. For more information, see the https://cloud.google.com/pubsub/docs/cloudstorage.
  • Promoted --cloud-storage-bucket, --cloud-storage-file-prefix, --cloud-storage-file-suffix, --cloud-storage-max-bytes, --cloud-storage-max-duration, --cloud-storage-output-format, --cloud-storage-write-metadata, and --clear-cloud-storage-config flags of gcloud pubsub subscriptions update to GA. Adds the ability to update Cloud Storage configuration options in Cloud Pub/Sub subscriptions. For more information, see the https://cloud.google.com/pubsub/docs/cloudstorage.

Cloud SQL

  • Added gcloud sql operations cancel to cancel an operation running on a Cloud SQL instance.
  • Added edition and enable-data-cache flags to gcloud sql instances create and gcloud sql instances patch to support Edition and Data Cache.

  • Added show-edition flag to gcloud sql instances list and gcloud sql tiers list to display Edition.

  • Added --password-policy-disallow-compromised-credentials flag to gcloud sql instances create and gcloud sql instances patch for ALPHA and BETA.

Cloud Storage

  • Updated gsutil component to 5.25.
  • Fix a bug preventing nested directory symlinks from being preserved when uploading a directory recursively.

Cloud Workstations

  • Updated --machine-type flag for configs command to accept any string.

Compute Engine

  • Added 23.04 to allowed list of values for --version of gcloud beta compute instances ops-agents policies [create|update].
  • Promote --instance-kms-key flag of gcloud compute instance create to GA.
  • Promoted --preference flag of gcloud compute backend-services add-backend and gcloud compute backend-services update-backend to beta.
  • Added --allow-cidr-routes-overlap flag to gcloud beta compute networks subnets update command.
  • Added SEV_SNP_CAPABLE to the list of guestOsFeatures.
  • Added support for clearing fields to gcloud beta compute security-policies remove-user-defined-field and gcloud beta compute security-policies rules update.

GKE Hub

  • Modified gcloud container fleet memberships register command to validate that the --manifest-output-file flag is only used with the --install-connect-agent flag.

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.35 to 1.0.0-beta.37.

Kubernetes Engine

  • Added new kubedns option to --cluster-dns to allow KubeDNS to be explicitly specified as the cluster DNS provider.
  • Added GcsFuseCsiDriver option to --addons flag of gcloud container clusters create to enable the Cloud Storage FUSE Container Storage Interface (CSI) Driver.
  • Added GcsFuseCsiDriver option to --update-addons flag of gcloud container clusters update to enable/disable the Cloud Storage FUSE Container Storage Interface (CSI) Driver.
  • Updated default kubectl from 1.25.9 to 1.25.11.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.15)
    • kubectl.1.25 (1.25.11)
    • kubectl.1.26 (1.26.6)
    • kubectl.1.27 (1.27.3)

Network Connectivity

  • Added gcloud network-connectivity hubs add-iam-policy-binding, gcloud network-connectivity hubs remove-iam-policy-binding, gcloud network-connectivity hubs get-iam-policy, and gcloud network-connectivity hubs set-iam-policy commands.
  • Added gcloud network-connectivity hubs list-spokes command which supports listing all spokes associated with a hub.
  • Added gcloud network-connectivity hubs route-tables command group which supports listing and describing route tables.
  • Added gcloud network-connectivity hubs route-tables routes command group which supports listing and describing routes.
  • Added gcloud network-connectivity spokes accept and gcloud network-connectivity spokes reject commands.
  • Added --global flag to gcloud network-connectivity spokes delete, gcloud network-connectivity spokes describe, and gcloud network-connectivity spokes list commands.
  • Added gcloud network-connectivity spokes linked-vpc-network command group which supports creating and updating VPC spokes.

Network Security

  • Added gcloud network-security firewall-endpoint-associations update to alpha and beta. This command updates the labels and TLS inspection policy of Cloud Firewall Plus associations.

Network Services

  • Promoted gcloud network-services service-lb-policies to beta.

Recaptcha

  • Added --skip-billing-check to recaptcha keys migrate. If usage is under the free quota, the billing check can be safely skipped.

Recommender

  • Added list insight-types to beta for recommender surface.
  • Added list recommenders to beta for recommender surface.
  • Updated list insights to use beta list insight-types command.
  • Updated list recommendations to use beta list recommenders command.

Security Command Center

  • Updated gcloud scc findings documentation to fix an invalid finding id used in examples.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

437.0.1 (2023-06-30)

Cloud Storage

  • Reverted change that broke gcloud storage cp with relative path characters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

437.0.0 (2023-06-27)

Anthos Multi-Cloud

  • Modified gcloud container aws node-pools list and gcloud container azure node-pools list to fetch server configurations and to give a warning when any of the node pools are running an end-of-life version.

App Engine

Artifact Registry

  • Updated the output of gcloud artifacts docker images describe to include SBOM location information.
  • Added flag --show-sbom-references to gcloud artifacts docker images describe to list SBOM reference occurrences.
  • Updated the output of gcloud artifacts docker images describe with flag --show-all-metadata to include SBOM reference occurrences.
  • Added Go as an option of --repository-format flag of gcloud artifacts repositories create to create Go repositories.
  • Added gcloud artifacts go upload command to upload Go modules.

Cloud Bigtable

  • The maximum retention period for a Cloud Bigtable backup has been increased from 30 days to 90 days, giving you more robust data protection and data quality control. For more information on how Bigtable backups work, see https://cloud.google.com/bigtable/docs/backups.

Cloud Build

  • Added gcloud beta builds connections create gitlab and gcloud beta builds connections update gitlab.

Cloud Filestore

  • Added --tier=ZONAL flag to gcloud beta filestore instances create to support a zonal filestore instance creation.

Cloud NetApp

  • Removed a print statement that led to messy output during gcloud beta netapp volumes replications create.

Cloud SQL

  • Added gcloud beta sql instances reencrypt, which re-encrypts a Cloud SQL CMEK instance with the current primary key version in beta.

Cloud Storage

  • Release rsync command

Compute Engine

  • Gcloud compute will now retry two times if its follow-up Operations.Wait|Get requests return 503 error.

GKE Hub

  • Added gcloud container fleet memberships support-access which allows users to manage Support access.

Network Security

  • Added gcloud network-security firewall-endpoints update to alpha and beta. This command updates the labels of Cloud Firewall Plus endpoints.

Recaptcha

  • Removed gcloud recaptcha firewallpolicies surface and all commands within. Please use gcloud recaptcha firewall-policies instead.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

436.0.0 (2023-06-21)

AlloyDB

  • Promoted AlloyDB Inject Fault commands to GA track. Modified commands include: alloydb instances inject-fault.

Anthos Multi-Cloud

  • Modified gcloud container aws node-pools describe and gcloud container azure node-pools describe to fetch server configurations and to give a warning when the nodepool is running an end-of-life version.
  • Modified gcloud container aws clusters list and gcloud container azure clusters list to fetch server configurations and to give a warning when any of the clusters are running an end-of-life version.

Batch

  • Promoted Batch submit job optional prefix feature to beta and GA.

Cloud Deploy

  • Added new --deploy-parameters to gcloud deploy releases create command. When used, deploy parameters will be set for the release.
  • Added gcloud deploy rollouts advance, gcloud deploy rollouts cancel, gcloud deploy rollouts ignore-job, and gcloud deploy job-runs terminate commands for the Deployment Strategies GA launch.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.18.1
    • Added a new emulator configuration to start with experimental mode.

Cloud Functions

  • Fixed issue where gcloud functions deploy could fail in certain cases if the caller was missing permissions to get the project IAM policy.

Cloud IAM

  • Added flags --folder and --organization to gcloud beta services identity create.
    • Support folder and organization level service agents creation, in addition to project level service agents.

Cloud NetApp

  • Added --force parameter to gcloud beta netapp volumes replications stop to force stop a replication during a data transfer.

Cloud SQL

  • Added --preferred-zone flag to gcloud sql instances clone --point-in-time to support point in time recovery to a specified zone for PostgreSQL.
  • Added gcloud sql instances get-latest-recovery-time command to get the latest recovery time for a PostgreSQL instance.

Cloud Spanner

  • Promoted spanner databases update command to beta and GA tracks.

Cloud Storage

  • Fixed issue where certain gcloud storage commands would fail to load when the PATH environment variable was not set.

Cloud Workstations

  • Promoting workstations, workstations configs, and workstations clusters commands to GA.

Compute Engine

  • Promoted --instance-kms-key flag of gcloud compute instance create to beta.
  • Promoted --max-count-per-zone flag of gcloud compute instances bulk create to v1. Flag defines maximum number of instances that can be created per zone for regional bulk insert.
  • Promoted disk-consistency-group argument of gcloud compute resource-policies create to GA.
  • Promoted --primary-disk, --primary-disk-project, --primary-disk-region, and --primary-disk-zone of gcloud compute disks create to GA.
  • Promoted gcloud compute disks start-async-replication to GA.
  • Promoted gcloud compute disks stop-async-replication to GA.
  • Promoted gcloud compute disks stop-group-async-replication to GA.
  • Promoted gcloud compute disks bulk create to GA.
  • Added deny as a choice for --action and--exceed-action of gcloud compute security-policies rules create|update.

Kubernetes Engine

  • Added --sole-tenant-node-affinity-file flag to gcloud container node-pools create for creating node pools backed by sole tenant node groups. For more information see https://cloud.google.com/kubernetes-engine/docs/how-to/sole-tenancy.

  • Added --security-posture and --workload-vulnerability-scanning flags to gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update for controlling GKE Security Posture features.

  • Added --workload-policies flag to gcloud container clusters create-auto and gcloud container clusters update for enabling NET_ADMIN privilege. Added --remove-workload-policies flag to gcloud container clusters update for disabling NET_ADMIN privilege.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

435.0.1 (2023-06-14)

Cloud Firestore

  • Removed the --enable-pitr flag from gcloud firestore databases <create|update> which was causing firestore database creation failures.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

435.0.0 (2023-06-13)

Breaking Changes

  • (Compute Engine) Modified quota exceeded errors to show future limit and rollout status information to user in addition to original error message.

Anthos Multi-Cloud

  • Modified gcloud container aws clusters describe and gcloud container azure clusters describe to fetch server configurations and to give a warning when the cluster is running an end-of-life version.
  • Added --root-volume-throughput flag to gcloud container aws clusters and gcloud container aws node-pools to support customizable EBS root volume throughput.
  • Added --main-volume-throughput flag to gcloud container aws clusters create to support customizable EBS main volume throughput.
  • Added --disable-per-node-pool-sg-rules flag to gcloud container aws clusters create and gcloud container aws clusters update to disable the default security group rules provisioned for each node pool.
  • Added --enable-per-node-pool-sg-rules flag to gcloud container aws container clusters update to re-enable the default security group rules provisioned for each node pool.

Cloud Bigtable

  • Add ability to count rows for a prefix.

Cloud Filestore

  • Added --kms-key flag to gcloud filestore backups create, which allows an Enterprise or High Scale backup to be created that is encrypted with a CMEK key." => "which creates a backup with an associated customer-managed encryption key (CMEK). Only available for Enterprise or High Scale tier instances.
  • Added --instance-location flag to gcloud filestore backups create, which accepts either a zone or region and allows clients to restore Basic HDD, Basic SSD, and Enterprise tier backups.

Cloud Functions

  • Promoted --docker-repository, --kms-key, clear-docker-repository, and --clear-kms-key flags of gcloud functions deploy --gen2 to GA, which bring CMEK support for Cloud Functions 2nd Gen.

Cloud NetApp

  • Added gcloud beta netapp group which includes gcloud beta netapp storage-pools, gcloud beta netapp volumes, gcloud beta netapp active-directories, gcloud beta netapp kms-configs, gcloud beta netapp locations, gcloud beta netapp operations, gcloud beta netapp volumes snapshots, and gcloud beta netapp volumes replications.

Cloud Run

  • Promoted gcloud run services proxy to GA. This command allows you to proxy a service or a revision to localhost. Requests will be authenticated as the current SDK account, or with a provided token.

Cloud TPU

  • Fixed bug so that gcloud compute tpus tpu-vm ssh respects instance preference of setting enable-oslogin to false.

Compute Engine

  • Promoted source-instant-snapshot flag of gcloud compute disks create to beta.
  • Promoted --source-instant-snapshot, --source-instant-snapshot-zone and --source-instant-snapshot-region flags of gcloud compute snapshots create to beta.
  • Promoted gcloud compute instant-snapshots create to beta.
  • Promoted gcloud compute instant-snapshots delete to beta.
  • Promoted gcloud compute instant-snapshots describe to beta.
  • Promoted gcloud compute instant-snapshots list to beta.
  • Promoted gcloud compute instant-snapshots add-labels to beta.
  • Fixed bug in handling quota exceeded error with gcloud compute commitments create command.
  • Added force-attach support to gcloud compute instances create.
  • Added --recaptcha-action-site-keys and --recaptcha-session-site-keys to gcloud beta compute security-policies rules create|update.
  • Added --network-user-defined-fields, --network-src-ip-ranges, --network-dest-ip-ranges, --network-ip-protocols, --network-src-ports, --network-dest-ports, --network-src-region-codes, and --network-src-asns to gcloud beta compute security-policies rules create|update.
  • Added gcloud beta compute security-policies add-user-defined-fields and gcloud beta compute security-policies remove-user-defined-fields commands.
  • Added --security-policy and --security-policy-region to gcloud beta compute instances network-interfaces update.
  • Added gcloud beta compute target-pools update and gcloud beta compute target-instances update commands.

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.34 to 1.0.0-beta.35.

Kubernetes Engine

  • Undeprecated and unhid --logging and --monitoring flags from gcloud container clusters create-auto.

  • Added a new command gcloud container clusters check-autopilot-compatibility which returns a list of autopilot compatibility issues of the given cluster.

Vmware Engine

  • Added commands for managing resources:

    • Private connections:
    • Added commands to perform CRUD

    • Retrieving exchanged routes

    • Subnets:

    • Added commands to describe and update a subnet

    • Private clouds:

    • Added ability to create a time limited PC

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

434.0.0 (2023-06-06)

AlloyDB

  • Promote Continuous Backups related commands to the GA track, which include changes to gcloud alloydb clusters create, gcloud alloydb clusters update and gcloud alloydb clusters restore.

Anthos On-Prem

  • Modified gcloud container vmware admin-clusters list. When specifying --location=-, or when both --location and gcloud configuration container_vmware/location are not specified, return admin clusters in all locations of the specified project.

Cloud Functions

  • Updated gcloud functions logs read to read function logs from both 1st gen and 2nd gen functions when no function name is provided unless --gen2 or --no-gen2 is set.

Cloud Key Management Service

  • Promoted gcloud kms inventory which allows viewing and tracking of keys across cloud resources.

Cloud Logging

  • Promoted --custom-writer-identity flag of gcloud logging sinks create to beta and GA.
  • Promoted --custom-writer-identity flag of gcloud logging sinks update to beta and GA.

Compute Engine

  • Updated the Interconnect attachment Bring Your Own IP (BYOIP) IPv6 fields to be unavailable.
  • Added --size flag to gcloud compute disks update to support size update.
  • Added hyperdisk-balanced support to gcloud compute disks create and gcloud compute instances create.
  • Added --per-instance-hostnames flag to gcloud compute instances bulk create for alpha and beta.
  • Promoted --http-keep-alive-timeout-sec flag for gcloud compute <target-http-proxies|target-https-proxies> <create|update> and --clear-http-keep-alive-timeout-sec flag for gcloud compute <target-http-proxies|target-https-proxies> update to beta.

Dataproc Metastore

  • Promoted --endpoint-protocol flag to GA.

Kubernetes Engine

  • Added --enable-fqdn-network-policy flag to gcloud beta container clusters create and gcloud beta container clusters update.

Recommender

  • Added a list command for insights that lists all available insight types.
  • Added a list command for recommenders that lists all available recommenders.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

433.0.1 (2023-06-1)

Google Cloud CLI

  • Disabled self-signed jwt usage for service accounts.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

433.0.0 (2023-05-31)

Breaking Changes

  • (Cloud Run) Added --[no-]async flags to gcloud run jobs delete and gcloud run jobs executions delete with a default value of --no-async. Changed these two commands to wait for delete operation by default.

Google Cloud CLI

  • Fixed issue where running the install script from within the root google-cloud-sdk directory would crash with an unactionable error when new versions of certain components were made available prior to installation.

AlloyDB

  • Promoted AlloyDB Cross Region Replication commands to GA track. Modified commands include: alloydb clusters create-secondary, alloydb clusters promote, alloydb instances create-secondary.

Anthos On-Prem

  • Modified gcloud container bare-metal admin-clusters list. When specifying --location=-, or when both --location and gcloud configuration container_bare_metal/location are not specified, return admin clusters in all locations of the specified project.

Artifact Registry

  • Updated the output of gcloud artifacts docker images list with flag --show-occurrences to include SBOM reference occurrences.

Certificate Authority Service

  • Added --publishing-encoding-format flag to gcloud privateca pools create and gcloud privateca pools update to allow users to optionally publish DER encoded CA certificates and CRLs to Google Cloud Storage buckets.

Cloud Build

  • Added flag to specify substitutions in gcloud builds triggers run.
  • Modified --branch, --tag, --sha flags to be optional in gcloud builds triggers run command.

Cloud Composer

  • Added --enable-high-resilience to gcloud composer environments create to create environments with high resilience mode.
  • Added gcloud composer environments database-failover to manually run a database failover for environments with high resilience enabled.
  • Added gcloud composer environments fetch-database-properties to fetch airflow database properties for Composer environments.

Cloud Logging

  • Added logging_service_account_id to settings describe response.

Cloud SQL

  • Added --no-recovery, --bak-type and --recovery-only flags to gcloud sql import bak and added --bak-type and --differential-base flags to gcloud sql export bak to enable the differential import/export feature for SQL Server.

Cloud Workstations

  • Added --accelerator-type and --accelerator-count flags to gcloud beta workstations configs create.

Compute Engine

  • Fixed bug in handling quota exceeded error with gcloud compute commitments create command.
  • Added --region flag to gcloud beta compute security-policies rules commands.
  • Deprecated --no-client-ttl and --no-max-ttl arguments of gcloud compute [backend-services|backend-buckets] [create|update].

Kpt

  • Updated kpt in Google Cloud CLI from 1.0.0-beta.33 to 1.0.0-beta.34.

Kubernetes Engine

  • Added --enable-best-effort-provision and --min-provision-nodes to gcloud container node-pools create to turn on best effort provisioning for node pool creation.

Network Security

  • Added network-security firewall-endpoint-associations commands to manage Cloud Firewall Plus endpoint associations, and promoted them to beta.
  • Promoted commands under gcloud network-security address-groups to GA.
  • Promoted commands under gcloud network-security org-address-groups to GA.

Security Command Center

  • Added gcloud topic datetimes support for gcloud scc command group timestamp and duration flags.

Transfer

  • Added --docker-network flag to gcloud transfer agents install to allow configuration of the underlying Docker container's network.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

432.0.0 (2023-05-23)

AI

  • Added --public-endpoint-enabled flag to gcloud ai index-endpoints create to support public endpoint.
  • Modified --network flag of gcloud ai index-endpoints create to be optional.

Anthos On-Prem

  • Added --disable-control-plane-v2 flag to gcloud container vmware clusters create to explicitly disable the use of control plane v2 feature.
  • --enable-control-plane-v2 in gcloud container vmware clusters create is by default set for version 1.15+.
  • Added --ignore-errors flag to gcloud container bare-metal admin-clusters unenroll. If set, the unenrollment of a bare metal admin cluster resource will succeed even if errors occur during unenrollment.

Artifact Registry

  • Changed IAM policy analysis scope to the root of project in gcloud beta artifacts docker upgrade print-iam-policy.

BigQuery

  • Fixed bug to ensure show works with encrypted S3 managed tables.
    • Fixed bug to ensure spark properties can be updated to empty values.
    • Fixed RANGE<TIMESTAMP> to correctly display UNBOUNDED boundaries.
    • Fixed bug in the bq info command that caused it to always fail.
    • Fixed bug where a line of logging was always printed.
    • Added connections to get-iam-policy and set-iam-policy.

Cloud Build

  • Modified (--repo, --repo-type) and --repository to be optional in gcloud builds triggers create manual, gcloud builds triggers create webhook and gcloud builds triggers create pubsub.

Cloud Storage

  • Updated gsutil component to 5.24.

Compute Engine

  • Added --http-keep-alive-timeout-sec flag to gcloud compute alpha/beta target-http-proxies/target-https-proxies create/update to configure http keep alive timeout sec field in target httpx proxy.
  • Added --server-tls-policy and --clear-server-tls-policy flags to gcloud compute target-https-proxies create/update to attach/detach a server TLS policy to the target https proxy.
  • Release pathTemplateMatch and pathTemplateRewrite fields in urlMaps to v1 API.
  • Updated --consumer-accept-list and --consumer-reject-list of gcloud compute service-attachments create and gcloud compute service-attachments update to support networks.
  • Promoted --provisioned-throughput flag of gcloud compute disks create and gcloud compute disks update to GA.
  • Promoted --create-disk=provisioned-throughput for gcloud compute instances create and gcloud compute instance-templates create to GA.
  • Promoted gcloud compute interconnects remote-locations <describe|list> to beta and GA.
  • Promoted --remote-location flag of gcloud compute interconnects create to beta and GA.
  • Promoted --subnet-length flag of gcloud compute interconnects attachments <dedicated|provider> create to beta and GA.

Container Registry

  • Changed "gloud container images describe" to check existence of the digest.

Database Migration

  • Updated gcloud database-migration connection-profiles create alloydb to support customer-managed encryption key(CMEK).
  • Updated gcloud database-migration connection-profiles create cloudsql to support customer-managed encryption key(CMEK).

Kpt

Kubernetes Engine

  • Promoted fields gpu-driver-version within --accelerator flag to enable GPU driver auto installation.
  • Updated default kubectl from 1.24.13 to 1.25.9.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.13)
    • kubectl.1.25 (1.25.9)
    • kubectl.1.26 (1.26.4)
    • kubectl.1.27 (1.27.1)

Network Security

  • Promoted gcloud network-security security-profile-groups to beta.
  • Added network-security firewall-endpoints commands to manage Cloud Firewall Plus endpoints, and promoted them to beta.
  • Promoted gcloud network-security security-profiles threat-prevention to beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

431.0.0 (2023-05-16)

Breaking Changes

  • (Anthos On-Prem) Modified --version flag to be required in gcloud container vmware clusters create.
  • (Compute Engine) Added centos-stream-8 and centos-stream-9 options to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in GA

Google Cloud CLI

  • Fixed error when filtering was applied to date or time type keys and their values were None. Now, the resources will be excluded as when values were empty.
  • Added warning message to indicate support for Python 3.5-3.7 will be deprecated on August 8th, 2023.

Anthos On-Prem

  • Modified gcloud container bare-metal clusters list to return clusters in all locations of the specified project if --location is not specified and configuration container_bare_metal/location is not set.

Artifact Registry

  • Changed IAM policy translation logic in gcloud beta artifacts docker upgrade print-iam-policy.

Batch

  • Promoted Batch submit job optional job_id feature to beta and GA.

Cloud Build

  • Added --repository flag to gcloud builds triggers create manual, gcloud builds triggers create webhook and gcloud builds triggers create pubsub which supports creating manual, webhook or Pub/Sub trigger with 2nd-gen repository resource.

Cloud Dataproc

  • Added --staging-bucket flag to gcloud dataproc batches submit ... commands in GA. This sets staging bucket when creating batches.
  • Added --staging-bucket flag to gcloud dataproc session create ... commands in Preview. This sets staging bucket when creating sessions.

Cloud Firestore

  • Promoted firestore locations list to GA.

Cloud Run

  • Promoted gcloud run jobs deploy to GA, which allows creating or updating a Cloud Run job from a container image or source to build.

Cloud Storage

  • Added a preserve_symlinks option to gcloud storage cp and mv commands; when present, this option will cause file and directory symlinks to be represented by placeholder files in the cloud, and reconstructed as symlinks when downloaded.

Compute Engine

  • Promoted gcloud compute addresses move to GA.

Compute Firewall Rules

  • Added --bind-tags-to-instances flag to gcloud compute firewall-rules migrate to bind secure tags to VM instances.

Database Migration

  • Updated gcloud database-migration migration-jobs create to support customer-managed encryption key(CMEK).

Dataproc Metastore

  • Promoted gcloud metastore services alter-metadata-resource-location to GA.
  • Promoted gcloud metastore services alter-table-properties to GA.
  • Promoted gcloud metastore services move-table-to-database to GA.
  • Promoted gcloud metastore services query-metadata to GA.

Events

  • Removed gcloud beta events surface and all commands within. Please use gcloud eventarc instead.

Kubernetes Engine

  • Deprecated --linux-sysctls flag since --system-config-from-file is now used to config nodes.

Notebooks

  • Added --data-disk-type, --data-disk-size, --no-remove-data-disk to gcloud notebooks instances create to configure data disk.

Recaptcha

  • Added --private-key-file, --team-id, --key-id to recaptcha keys create for iOS keys. Providing these fields allows reCAPTCHA Enterprise to provide more accurate risk scores.
  • Added --private-key-file, --team-id, --key-id to recaptcha keys update for iOS keys. Providing these fields allows reCAPTCHA Enterprise to provide more accurate risk scores.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

430.0.0 (2023-05-09)

Breaking Changes

Google Cloud CLI

  • Fixed issue where gcloud auth enterprise-certificate-config create used cert_issuer instead of issuer for Windows and MacOS configurations.

AlloyDB

  • Added gcloud alloydb users <command> Users API to manage AlloyDB users.

Anthos On-Prem

  • Modified gcloud container vmware clusters list to return clusters in all locations of the specified project if --location is not specified and configuration container_vmware/location is not set.

App Engine

Bare Metal Solution

  • Promoted gcloud bms instance rename to GA.
  • Promoted gcloud bms networks rename to GA.
  • Promoted gcloud bms nfs-shares rename to GA.
  • Promoted gcloud bms volumes rename to GA.

Cloud Bigtable

  • Rebuilt cbt cli with go version 1.20.4 which fixed CVE-2022-41723.
  • Add ability to count rows for a prefix.

Cloud Bigtable Emulator

  • Rebuilt cbt emulator with go version 1.20.4 which fixed CVE-2022-41723.

Cloud Build

  • Added --git-source-revision flag to gcloud builds submit.
  • Added --git-source-dir flag to gcloud builds submit.

Cloud Firestore

  • Promoted firestore locations list to beta.

Cloud IAM

  • Added --web-sso-response-type and --web-sso-assertion-claims-behavior flag to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers update-oidc to allow user to setup web sso configuration.

Cloud Logging

  • Added --custom-learned-route-priority and --set-custom-learned-route-ranges flags of gcloud compute routers add-bgp-peer in beta to specify the custom learned route configuration.
  • Added --custom-learned-route-priority, --set-custom-learned-route-ranges, --add-custom-learned-route-ranges and --remove-custom-learned-route-ranges flags of gcloud compute routers update-bgp-peer in beta to specify the custom learned route configuration.

Cloud Pub/Sub

  • The gcloud pubsub pull command now waits for messages by default.
    • The --wait flag has been deprecated from gcloud beta pubsub pull command.
    • The --return-immediately flag has been added to gcloud beta pubsub pull command to support the old behavior.

Cloud Run

  • No longer sets the client.knative.dev/user-image annotation when deploying or updating Cloud Run Services and Jobs.
  • Fixes issue in gcloud run deploy and gcloud run services update where changing --port would fail due to health check errors.

Compute Engine

  • Update replica-zones support --create-disk=replica-zones for gcloud compute instances create.
  • Promoted gcloud compute addresses move to beta.
  • Added --user-ip-request-headers for gcloud compute security-policies update, and promoted it to beta.

Database Migration

  • Added a set of commands for gcloud database-migration private-connections to perform common (create, list, describe, delete) operations on private connections.
  • Updated gcloud database-migration connection-profiles create to support creating Oracle connection profiles.
  • Updated gcloud database-migration connection-profiles create to support connectivity in creating Postgresql connection profiles.
  • Added gcloud database-migrate conversion-workspaces that supports the following commands for creating and managing conversion workspaces: create, update, delete, list, describe, commit, rollback, seed, import-rules, convert, apply, list background jobs and describe entities.
  • Updated gcloud database-migration migration-jobs create to support heterogeneous migration jobs.

Kubernetes Engine

  • Added --enable-master-global-access flag of gcloud container clusters create-auto.

Looker

  • Launch Looker (Google Cloud core) for General Availability to the public.

Network Connectivity

  • Updated gcloud network-connectivity service-connection-policies create subnet flag field to accept resource arguments.

Network Services

  • Updated GA schema for gcloud network-services gateways.
  • This primarily impacts gateway import/export.
  • It includes SWG-specific changes so gateways of type SWG can be created.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

429.0.0 (2023-05-02)

Breaking Changes

  • (Compute Engine) Added rocky-9 option to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in GA

Google Cloud CLI

  • Updated bundled-python cryptography package to 39.0.1 and PyOpenSSL to 23.0.0.

AlloyDB

  • Added --update-mode flag to gcloud alloydb instances update in alpha and beta tracks.

BigQuery

  • Added bq info command to print debug information.
  • Froze the request library to version '2.27.1' until python2 is removed.
  • Removed excess line of logging to stderr that was printed on most commands.
  • Improved error messaging for unsupported regions.
  • Added support for an encoding when creating a JSON backed external table.
  • Updated bundled urllib3.

Certificate Authority Service

  • Added --ignore_dependent_resources flag to gcloud privateca roots disable to allow a root CA to be disabled even if it is the last CA in its CA Pool while its CA Pool is being depended on by another cloud resource.
  • Added --ignore_dependent_resources flag to gcloud privateca subordinates disable to allow a subordinate CA to be disabled even if it is the last CA in its CA Pool while its CA Pool is being depended on by another cloud resource.
  • Added --ignore_dependent_resources flag to gcloud privateca roots delete to allow a root CA to be deleted even if its CA Pool is being depended on by another cloud resource.
  • Added --ignore_dependent_resources flag to gcloud privateca subordinates delete to allow a subordinate CA to be deleted even if its CA Pool is being depended on by another cloud resource.
  • Added --ignore_dependent_resources flag to gcloud privateca pools delete to allow a CA Pool to be deleted even if it is being depended on by another cloud resource.

Cloud Bigtable

  • Rebuilding cbt cli with go version 1.20.3 which fixed CVE-2022-41723.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.17.4
    • Added support for eventarc triggers(2nd gen)
    • Fix ListDocuments to have page token

Cloud Identity-Aware Proxy

  • Fixed a low throughput issue that appeared in some download cases for gcloud compute start-iap-tunnel.

Cloud Monitoring

  • Promoted gcloud monitoring snoozes commands to beta and GA.

Cloud Pub/Sub

  • Added --event-time flag to gcloud pubsub lite-topics publish to allow users to specify an event time when publishing a message.

Cloud Run

  • Updated gcloud beta run integrations list to display integrations across all regions by default when --region flag is not specified.

Cloud SQL

  • Promoted --threads-per-core flag for gcloud sql instances create and gcloud sql instances patch to GA.

Cloud Workstations

  • Added the beta workstations list-usable command which lists a user's usable workstations under a given configuration.
  • Added gcloud beta workstations get-iam-policy.
  • Added gcloud beta workstations set-iam-policy.
  • Added gcloud beta workstations configs get-iam-policy.
  • Added gcloud beta workstations configs set-iam-policy.

Compute Engine

  • Added "REGION" column in the output of gcloud compute ssl-certificates list.
  • Promoted --gateway-ip-version flag of gcloud compute vpn-gateways create to beta. Flag defines the IP version of VPN Gateway.
  • Allowed --interfaces flag to accept IPv6 addresses of gcloud beta compute external-vpn-gateways create.
  • Promoted support of regional instance template for gcloud compute instance-groups managed create to beta and GA.
  • Promoted support of regional instance template for gcloud compute instance-groups managed set-instance-template to beta and GA.
  • Promoted support of regional instance template for gcloud compute instance-groups managed rolling-action start-update to beta and GA.
  • Promoted --nat-name flag of gcloud compute routers get-nat-mapping-info to GA.

Distributed Cloud Edge

  • Added --lro-timeout for gcloud edge-cloud container clusters create which allows specifying a custom duration for the gcloud CLI to wait on LROs.

Identity and Access Management

  • Fixed issue with gcloud auth login --login-config=$LOGIN_CONFIG --no-browser not working on Linux machines due to terminal input limit.

Kpt

Kubernetes Engine

  • Added --enable-unstable-kubernetes-apis flag to gcloud containers cluster create and gcloud containers cluster update to facilitate enabling beta apis in kube-apiserver.

Network Connectivity

  • Made network field accept both resource identifier and path.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

428.0.0 (2023-04-25)

Breaking Changes

  • (Cloud Run) For gcloud beta run jobs deploy, gcloud run jobs create, and gcloud run jobs update, mark --execute-now and --async flags mutually exclusive.

Google Cloud CLI

  • Added --lifetime flag to gcloud auth application-default print-access-token to configure service account impersonation access token lifetime.
  • Duration flags now support fractional input.

Anthos Multi-Cloud

  • Promoted --enable-managed-prometheus flag of gcloud container aws clusters create to GA.
  • Promoted --enable-managed-prometheus and --disable-managed-prometheus flags of gcloud container aws clusters update to GA.
  • Promoted --enable-managed-prometheus flag of gcloud container azure clusters create to GA.
  • Promoted --enable-managed-prometheus and --disable-managed-prometheus flags of gcloud container azure clusters update to GA.
  • Fixed issue where --max-nodes, --min-nodes, and --max-pods-per-node flags of gcloud container aws node-pools create and gcloud container azure node-pools create were incorrectly documented as optional.

Anthos On-Prem

  • Added gcloud container bare-metal admin-clusters unenroll which removes Cluster API resources so that the cluster is no longer managed by the Anthos On-Prem API.
  • Added support for annotations in the container bare-metal clusters update command.

Cloud Bigtable

  • Rebuilding cbt cli with go version 1.20 which fixed cve-2023-24537.

Cloud Bigtable Emulator

  • Rebuilding cbt emulator with go version 1.20 which fixed cve-2023-24537.

Cloud Run

  • Added firebase-hosting integration type to gcloud beta run integrations command group.

Cloud Storage

  • Updated gsutil component to 5.23.

Cloud Tasks

  • Added gcloud beta tasks buffer which enables creation of an HTTP task without specifying the task body. It requires the parent queue to have an HTTP target override and is only enabled in the beta track.

Cloud Workstations

  • Added -labels flag to gcloud beta workstations create and gcloud beta workstations cluster create.

Compute Engine

  • Added --auto-network-tier flag of gcloud compute routers nats create and gcloud compute routers nats update in beta to select network tier to be used by NAT in auto mode.
  • Promoted flag --enforce-on-key-configs of gcloud compute security-policies rules create|update to GA.
  • Added --certificate-manager-certificates flag to gcloud compute target-https-proxies create/update to add a list of ssl certificates created in certificate-manager to the target https proxy.
  • Added --allow-psc-global-access flag of gcloud compute forwarding-rules <create|update> to v1.

Compute Firewall Policies

  • Promoted --src-threat-intelligence and --dest-threat-intelligence flags to GA in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.
  • Promoted --src-region-codes and --dest-region-codes flags to GA in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.
  • Promoted --src-fqdns and --dest-fqdns flags to GA in gcloud compute firewall-policies rules create/update and gcloud compute network-firewall-policies rules create/update commands.
  • Promoted --src-address-groups and --dest-address-groups flags to GA in gcloud compute firewall-policies rules create/update and gcloud compute network-firewall-policies rules create/update commands.

Kubernetes Engine

  • Added --location flag to clusters, node-pools, and operations surfaces as a simpler alternative to --zone or --region.
  • Updated default kubectl from 1.24.12 to 1.24.13.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.13)
    • kubectl.1.25 (1.25.9)
    • kubectl.1.26 (1.26.4)

Network Security

  • Added gcloud network-security server-tls-policies describe to alpha and beta.
  • Promoted gcloud network-security gateway-security-policies to GA.
  • Promoted gcloud network-security gateway-security-policies rules to GA.
  • Promoted gcloud network-security url-lists to GA.
  • Promoted gcloud network-security tls-inspection-policies to GA.

Public CA

  • Promoted gcloud publicca to GA.

Security Command Center

  • Fixed gcloud scc findings list to provide descriptive error message when parent argument is omitted.

Transcoder

  • Added support for --mode flag when creating a new job.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

427.0.0 (2023-04-18)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 2. The minimum supported Python version is Python 3.5.
  • (Cloud Datastore) Remove gcloud datastore databases create after version 427.0.0. Please use gcloud firestore database update --type=datastore-mode instead.
  • (Cloud Firestore) Switched firestore database create to use Firestore API.
  • (Cloud Firestore) Deprecated --region in gcloud firestore database create. Use --location to specify the database location.

Google Cloud CLI

  • Added --lifetime flag to gcloud auth print-access-token to configure service account impersonation access token lifetime.

App Engine

Artifact Registry

  • Promoted gcloud artifacts googet command group to GA.

BigQuery

  • Removed restrictions to what locations can be used with --location when combined with --use_regional_endpoints.
  • Improved Format RANGE<TIMESTAMP> formatting.

Certificate Authority Service

  • Added ignore_dependent_resources parameter to disable CA, delete CA, and delete CA Pool. These commands would normally fail if the CA Pool would be in a state where it's not able to issue certificates while there's a resource that depends on it. This flag skips the check and may cause unintended and unrecoverable effects on any dependent resource(s) since the CA Pool would no longer be able to issue certificates.

Cloud Firestore

  • Promoted firestore databases describe to beta.
  • Promoted firestore databases update to beta.
  • Promoted firestore databases list to beta.
  • Promoted firestore databases describe to GA.
  • Promoted firestore databases update to GA.
  • Promoted firestore databases list to GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.16.2
    • Fixed an issue where some http/1 headers were causing 400 errors.

Cloud On Demand Scanning

  • Updated local-extract component to 1.5.8 to allow it to run in environments without glibc.

Cloud Run

  • Promoted --session-affinity to GA for --platform=managed for gcloud run deploy and gcloud run services update.
  • Promoted --add-custom-audiences, --clear-custom-audiences, --remove-custom-audiences and --set-custom-audiences to beta for --platform=managed for gcloud run deploy and gcloud run services update.

Cloud SQL

  • Added PostgreSQL 15 to database versions.

Cloud Spanner

  • Added database drop protection column to gcloud spanner databases list command.

Cloud Storage

  • Promoted gcloud storage insights commands to GA.

Cloud TPU

  • Add gcloud compute tpus topologies list to list available TPUs by chip topology.

Cloud Workstations

  • Adding support for labels in the beta workstations config create and beta workstations config update commands.

Compute Engine

  • Updated the scope flags --zone or --region of the primary disk, --secondary-disk-zone or --secondary-disk-region of the secondary disk to be required for gcloud compute disks start-async-replication.

Dataproc Metastore

  • Added support for Dataproc Metastore admin interface. The following commands have been added to alpha/beta release tracks:
    • metastore services alter-table-properties

Events

  • Deprecated gcloud beta events surface and all commands within. This surface will be removed in an upcoming release. Please use gcloud eventarc instead.

GKE Hub

  • Added --location flag to gcloud container fleet memberships register and gcloud beta container fleet memberships register.
  • If --location is not specified when registering GKE clusters, Membership region is selected to match to GKE cluster location by default.
  • If --location is not specified when registering non-GKE clusters, Membership region is selected as "global" by default.

Kpt

Kubernetes Engine

  • Added --addons=GcsFuseCsiDriver to gcloud beta container clusters create and --update-addons=GcsFuseCsiDriver to gcloud beta container clusters update to enable/disable the Cloud Storage FUSE Container Storage Interface (CSI) Driver.
  • Allow --enable-managed-prometheus or --disable-managed-prometheus flag to be passed with --logging and --monitoring flags at the same time in gcloud container clusters update.
  • Added --additional-pod-ipv4-ranges and --remove-additional-pod-ipv4-ranges flags of gcloud container clusters update to GA.

Network Connectivity

  • Renamed 'psc-subnetworks' field to 'subnets' based on review comments.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

426.0.0 (2023-04-11)

Breaking Changes

  • (Cloud Firestore) Switched firestore database create to use Firestore API after version 427.0.0.
  • (Cloud Firestore) Deprecated --region in gcloud firestore database create. Use --location to specify the database location. --region flag will be remove after version 427.0.0.

Anthos On-Prem

  • Promoted gcloud container vmware to beta.
  • Promoted gcloud container bare-metal to beta.

App Engine

Batch

  • Added no-external-ip-address flag to gcloud batch job submit.

BigQuery

  • Added warning when apilog flag is missing that the logging level is being lowered.

Cloud Bigtable

  • Clarified the functionality of --transactional-writes flag in gcloud bigtable app-profiles update.

Cloud Build

  • Hide --repository flag in gcloud builds triggers create manual, gcloud builds triggers create webhook and gcloud builds triggers create pubsub.

Cloud Dataflow

  • Added JAVA17 to gcloud dataflow flex-template command SDK Language options, allowing users to submit Flex Template jobs using Java 17.

Cloud Filestore

  • Added gcloud filestore instances revert command in GA to revert a filestore instance to specific snapshot.

Cloud Functions

  • Updated gcloud functions deploy to no longer require the flag --gen2 when updating an existing 2nd gen function. This aligns with the existing behavior of other commands. You can disable this behavior and only work with 1st gen functions by either adding --no-gen2 to a command or by setting the functions/gen2 config property to off.

Cloud Memorystore

  • Change to current default from latest for --maintenance-version flag in gcloud redis instances update to allow updating to the current default maintenance version.

Cloud Org Policy

  • Added --update-mask flag to gcloud org-policies reset command to support partial reset of policies (e.g, reset only dry-run policy spec or live policy spec).

Cloud Run

  • Promoted --cpu-boost to GA for --platform=managed for gcloud run deploy.

Cloud Workflows

  • Added the call-log-level flag to gcloud workflows deploy, and add the log-none value to the call-log-level flag for gcloud workflows <execute|run>, to specify no call logging even if logging was specified at the workflow level.

Compute Engine

  • Promoted --max-count-per-zone flag of gcloud compute instances bulk create to beta. Flag defines maximum number of instances that can be created per zone for regional bulk insert.
  • Added SEV_LIVE_MIGRATABLE to the list of guestOsFeatures.
  • Rearranged gcloud compute images import source flags by moving --source-file & --source-image to the beginning.

Network Connectivity

  • Added gcloud network-connectivity service-connection-policies create and gcloud network-connectivity service-connection-policies delete commands.
  • Added gcloud network-connectivity service-connection-policies list and gcloud network-connectivity service-connection-policies describe commands.

Security Command Center

  • Promoted gcloud scc custom-modules sha to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

425.0.0 (2023-04-04)

Breaking Changes

  • (Compute Engine) Migrate single request gcloud compute commands from the compute batch
  • (Compute Engine) endpoint to region-specific endpoints.

App Engine

  • Removed InvalidInstanceIpModeError exception from gcloud.app.instances.ssh because SSH is now supported for all Instance Ip Modes.

Artifact Registry

  • Added gcloud beta artifacts docker upgrade print-iam-policy.

Certificate Manager

  • Promoted gcloud certificate-manager trust-configs delete to beta.
  • Promoted gcloud certificate-manager trust-configs describe to beta.
  • Promoted gcloud certificate-manager trust-configs export to beta.
  • Promoted gcloud certificate-manager trust-configs import to beta.
  • Promoted gcloud certificate-manager trust-configs list to beta.

Cloud Access Context Manager

  • Added --dry-run-level flag to gcloud access-context-manager cloud-bindings to test cloud-binding before enforcing them.

Cloud Build

  • Update wait timeout for gcloud builds worker-pools create and gcloud builds worker-pools delete commands to 1h.

Cloud Functions

  • Updated gcloud functions add-iam-policy-binding, gcloud functions call, gcloud functions delete, gcloud functions get-iam-policy, gcloud functions remove-iam-policy-binding, and gcloud functions set-iam-policy to no longer require the flag --gen2 when operating on a 2nd gen function. This aligns with the existing behavior of gcloud functions describe. You can disable this behavior and only work with 1st gen functions by either adding --no-gen2 to a command or by setting the functions/gen2 config property to off.

Cloud IAM

  • Added gcloud iam workload-identity-pools providers keys commands to manage workload identity pool provider keys.

Cloud Workstations

  • Adding support for the customer managed encryption key and encryption key service account flags in the beta workstations config create command.

Compute Engine

  • Enable "Uniform Bucket Level Access" by default for the temporary Cloud Storage buckets created in gcloud compute images import and gcloud compute images export.
  • Promoted --source-ip-ranges flag of gcloud compute forwarding-rules [create|update] to GA.

Database Migration

  • Added --allocated-ip-range flag to gcloud database-migration connection-profiles create cloudsql to allow selecting an allocated IP range for VPC peering.
  • Added --alloydb-cluster flag to gcloud database-migration connection-profiles create to allow creating a connection profile with an existing AlloyDB cluster.
  • Added --alloydb-cluster flag to gcloud database-migration connection-profiles update to allow configuring a connection profile with an existing AlloyDB cluster.

Network Security

  • Promoted gcloud network-security tls-inspection-policies to beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

424.0.0 (2023-03-28)

Breaking Changes

  • (Artifact Registry) Fixed issue where the default table format was used when --show-occurrences flag was passed in, even though that format prevented occurrences from being displayed. Changed to use the default format when the flag is used. Use the same command without --show-occurrences to get the old behavior.

Artifact Registry

  • Allow using gcloud beta artifacts images describe with Artifact Registry repos that use gcr.io domain.
  • Promoted artifacts settings describe artifacts settings enable-upgrade-redirection, and artifacts settings disable-upgrade-redirection commands to GA.

BigQuery

  • Fixed issue storing --api flag in the .bigqueryrc file.
  • Added the option for three-year capacity commitment plans.
  • Updated wcwidth to version 0.2.6.

Certificate Manager

  • Promoted gcloud certificate-manager issuance-configs to GA.

Cloud Build

  • Added --default-buckets-behavior flag to gcloud builds submit.

Cloud Deploy

  • Added gcloud deploy rollouts advance to alpha and beta.
  • Added gcloud deploy rollouts cancel to alpha and beta.
  • Added gcloud deploy rollouts ignore-job to alpha and beta.
  • Added gcloud deploy job-runs terminate to alpha and beta.
  • Added starting-phase-id flag to gcloud deploy targets redeploy.
  • Added starting-phase-id flag to gcloud deploy targets rollback.
  • Added starting-phase-id flag to gcloud deploy releases promote.
  • Added initial-rollout-phase-id flag to gcloud deploy releases create.

Cloud Memorystore

  • Added --maintenance-version flag to gcloud redis instances update to allow updating a maintenance version when updating an instance.

Cloud Run

  • Promoted gcloud run jobs command group and its sub-commands to GA, except for the following commands:
    • gcloud beta run jobs deploy
    • gcloud beta run jobs logs
    • gcloud beta run jobs executions logs
  • Promoted --encryption-key-shutdown-hours and --clear-encryption-key-shutdown-hours flags of gcloud run deploy and gcloud run services update to GA for --platform=managed.

Cloud SQL

  • Added gcloud sql instances reencrypt, which re-encrypts a Cloud SQL CMEK instance with the current primary key version in alpha.

Cloud TPU

  • Update gcloud compute tpus tpu-vm create to allow configuration of TPUs with chip topology using --type and --topology flags.

Compute Engine

  • Promoted disk-consistency-group argument of gcloud compute resource-policies create to beta.
  • Promoted --primary-disk, --primary-disk-project, --primary-disk-region, and --primary-disk-zone of gcloud compute disks create to beta.
  • Promoted gcloud compute disks start-async-replication to beta.
  • Promoted gcloud compute disks stop-async-replication to beta.
  • Promoted gcloud compute disks stop-group-async-replication to beta.
  • Promoted gcloud compute disks bulk create to beta.
  • Fixed documentation for --update-policy-max-surge and --update-policy-replacement-method flags.
  • Promoted --queue-count flag in --network-interface of gcloud compute instance-templates create to GA.
  • Promoted --queue-count flag in --network-interface of gcloud compute instances bulk create to GA.

Database Migration

  • Added demote-destination request to gcloud database-migration migration-jobs to allow demoting the destination of a migration job.

Dataproc Metastore

  • Promoted the custom-routes-enabled boolean value to the network-config-from-file flag of gcloud metastore services create to v1alpha and v1beta.
  • Fixed issue where commands including an --instance-size flag would fail if the user specified an enum value of EXTRA_SMALL or EXTRA_LARGE.

Eventarc

  • Added --event-data-content-type flag to gcloud eventarc triggers create and gcloud eventarc triggers update to label the type of payload in MIME format that is expected from the CloudEvent data field.

Kpt

Kubernetes Engine

  • Updates default kubectl from 1.24.11 to 1.24.12.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.12)
    • kubectl.1.25 (1.25.8)
    • kubectl.1.26 (1.26.3)

Network Security

  • Promoted gcloud network-security url-lists to beta.
  • Promoted gcloud network-security gateway-security-policies to beta.
  • Promoted gcloud network-security gateway-security-policy-rules to beta.

Recaptcha

  • Added --support-non-google-app-store-distribution to recaptcha keys create that enables support for non-Google Play Store distributed applications for the key.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

423.0.0 (2023-03-21)

Google Cloud CLI

  • Added gcloud auth enterprise-certificate-config to create enterprise-certificate configurations.
  • Disabled mTLS during installation.
  • Fixed crash that occurred when parsing certain repeated dictionary-type flags if duplicate keys were provided or if invalid choices for another flag were specified afterwards.
  • Improved post-processing times during gcloud components update and gcloud components install on Windows.

App Engine

  • Updated the Java SDK to version 2.0.12 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v2.0.12.
  • Fixed a DevAppServer issue where in some scenarios, the class io.opencensus.trace.propagation.TextFormat could not be found.
  • Added --tunnel-through-iap flag to gcloud app instances ssh. Using this flag lets you use an Identity-Aware Proxy (IAP) tunnel when attempting to SSH into an App Engine flexible environment instance without an external IP address.
  • Updated the Go SDK to version 1.9.73. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/go/release-notes.
  • Added --tunnel-through-iap flag to gcloud app instances scp. Using this flag lets you use an Identity-Aware Proxy (IAP) tunnel when attempting to SCP to/from an App Engine flexible environment instance without an external IP address.

Artifact Registry

  • Updated gcloud artifacts docker images describe and gcloud artifacts docker images list to return occurrences when an occurrence filter is used, even if the user does not explicitly say to show occurrences.

  • Added --immutable-tags flag to gcloud artifacts repositories create and gcloud artifacts repositories update.

Bare Metal Solution

  • Promoted gcloud bms ssh-keys list to GA.
  • Promoted gcloud bms ssh-keys add to GA.
  • Promoted gcloud bms ssh-keys remove to GA.

Cloud Build

  • Added --repository flag to gcloud builds triggers create manual, gcloud builds triggers create webhook and gcloud builds triggers create pubsub.

Cloud Dataproc

  • Added --ttl flag to gcloud dataproc batches submit commands in GA. This sets a workload TTL when creating batches.

Cloud Firestore Emulator

  • Released Cloud Firestore emulator v1.16.1
    • Fixed: support read_time in ListCollectionIds

Cloud Healthcare

  • Added gcloud healthcare fhir-stores metrics which allows users to retrieve metrics associated with a FHIR store.

Cloud Key Management Service

  • Added --key-management-mode and --crypto-space-path to gcloud kms ekm-connections that is used when creating coordinated external keys.
  • Added gcloud kms ekm-config commands which enables setting configuration values for EKM users.

Compute Engine

  • Promoted --aws-* flags of gcloud compute images import to GA.
  • Promoted gcloud compute sole-tenancy node-groups simulate-maintenance-event to GA.

Database Migration

  • Added --availability-type flag to gcloud database-migration connection-profiles create to allow configuring the availability type on the destination Cloud SQL instance.
  • Added --secondary-zone flag to gcloud database-migration connection-profiles create to allow configuring the secondary zone of the destination Cloud SQL instance when regional availability type is used.

Kubernetes Engine

  • Added --enable-fleet flag to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in alpha, beta track.
  • Added --fleet-project flag to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update in alpha, beta track.
  • Added --clear-fleet-project flag to gcloud container clusters update in alpha, beta track.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

422.0.0 (2023-03-14)

Breaking Changes

  • (Cloud Pub/Sub) Fixed output format of gcloud schemas list and gcloud schemas list-revisions to remove the DEFINITION column if --view is not FULL.

Google Cloud CLI

  • Added gcloud auth enterprise-certificate-config to create enterprise-certificate configurations.

Anthos Multi-Cloud

  • Added --clear-client flag to gcloud container azure clusters update to clear the Azure client. This flag is required when updating to use Azure workload identity federation from Azure client to manage Azure resources.

App Engine

  • Updated the Python App Engine devappserver to support a new flag --python_virtualenv_path. It is an optional directory that will be used to setup a Python 3 virtual env for the local devappserver execution environment for Python 3 applications. If the path does not exist it will be created and it will not be cleanup at the end of the devappserver execution, allowing for caching between invocations. If not defined, a temporary directory will be used and cleaned up at the end of the execution.

Artifact Registry

  • gcloud beta artifacts settings enable-upgrade-redirection command no longer requires creating missing repos.

Bare Metal Solution

  • Promoted gcloud bms instances enable-serial-console to GA.
  • Promoted gcloud bms instances disable-serial-console to GA.

BigQuery

  • Updated the bundled google auth libraries.
  • Updated bundled libraries to use charset_normalizer with the request library.

Cloud Datastream

  • Added the max_concurrent_backfill_tasks support to --mysql-source-config, --oracle-source-config, --postgresql-source-config flags in gcloud datastream streams.

Cloud Functions

  • Preview of the CMEK support for Cloud Functions, 2nd Gen. In particular, promoted --docker-repository, --kms-key, --clear-docker-repository and --clear-kms-key flags of gcloud functions deploy --gen2 to beta.

Cloud Run

  • Removed --condition flag from gcloud run {services,jobs} {add,remove}-iam-policy-binding.

Cloud Workflows

  • Added --revision-id flag to gcloud workflows describe to allow retrieving the source code of a workflow at a specific revision.

Cloud Workstations

  • Added gcloud beta workstations configs update which updates a specified
  • Added gcloud beta workstations ssh which SSH's into a specified workstation. workstation configuration.

Compute Engine

  • Added --plan to gcloud compute commitments update to support commitment term upgrade.
  • Promoted gcloud compute security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion to GA.
  • Promoted --queue-count flag in --network-interface of gcloud compute instances create to GA.
  • Promoted --internal-ipv6-address flag of gcloud compute instances create to GA.
  • Promoted --internal-ipv6-prefix-length flag of gcloud compute instances create to GA.
  • Added new ADVANCED_PREVIEW enum option to --network-ddos-protection flag of gcloud compute security-policies update in alpha and beta.

GKE Hub

  • Changed gcloud container fleet memberships unregister command to assume membership region based on gke cluster region by default.

Network Connectivity

  • Fixed issue where sort-by arguments in list spoke command produced type validation errors.

Recaptcha

  • Support creating express enabled site keys using recaptcha keys create --waf-feature=express.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

421.0.0 (2023-03-07)

Artifact Registry

  • Fixed an issue where gcloud artifacts docker images list does not return nested images.

BigQuery

  • Extended third-party identity login to support a web-based 3-legged OAuth flow.
  • Extended ls -p to page through all projects.
  • Extended --format for load to support more formats.
  • Removes some unneeded shipped libraries.
  • Added logging support for all exceptions when --apilog is present.
  • Added --encoding for load to support csv encodings.
  • Updated the bundled cachetools library.

Cloud Filestore

  • Added --instance-location flag to gcloud filestore instances snapshots create, which accepts either a zone or region and allows clients to create Enterprise and HighScale snapshots.
  • Added --instance-location flag to gcloud filestore instances snapshots delete, which accepts either a zone or region and allows clients to delete Enterprise and HighScale snapshots.
  • Added --instance-location flag to gcloud filestore instances snapshots list, which accepts either a zone or region and allows clients to list Enterprise and HighScale snapshots.
  • Added --instance-location flag to gcloud filestore instances snapshots update, which accepts either a zone or region and allows clients to update Enterprise and HighScale snapshots.
  • Added --instance-location flag to gcloud filestore instances snapshots describe, which accepts either a zone or region and allows clients to describe Enterprise and HighScale snapshots.

Cloud Pub/Sub

  • Fixed gcloud schemas commit to raise an Invalid Argument error if --type is not equal to protocol-buffer, protocol_buffer, or avro.

Cloud Services

  • Added key-string support for undelete command for api_keys in beta.

Cloud Spanner

  • Promoted gcloud spanner databases roles list to GA.
  • Promoted --database-role flag in gcloud spanner databases execute-sql to GA.

Cloud Storage

  • Updated gsutil component to 5.21.

Cloud Workflows

  • Added --labels flag to gcloud workflows <execute|run> to allow adding execution specific labels.

Cloud Workstations

  • Fixed issue with the custom container image not being properly set in gcloud beta workstations configs create.

Compute Engine

  • Added --encryption to gcloud compute interconnects attachments dedicated create to add encryption option for dedicated interconnect attachment (VLAN attachment).
  • Added --encryption to gcloud compute interconnects attachments partner create to add encryption option for partner interconnect attachment (VLAN attachment).
  • Added --ipsec-internal-addresses to gcloud compute interconnects attachments dedicated create to add list of addresses that have been reserved for dedicated interconnect attachment (VLAN attachment).
  • Added --ipsec-internal-addresses to gcloud compute interconnects attachments partner create to add list of addresses that have been reserved for partner interconnect attachment (VLAN attachment).
  • Added --encrypted-interconnect-router to gcloud compute routers create to indicate that the router is dedicated for use with encrypted interconnect attachments (VLANs).
  • Added --interconnect-attachments to gcloud compute vpn-gateways create to add interconnect attachments (VLAN attachments) associated with the VPN gateway interfaces.
  • Added 9 to allowed list of values for --version of gcloud beta compute instances ops-agents policies [create|update].
  • Promoted --locality_lb_policy flag of gcloud compute backend-services create/update to GA.
  • Added --max-run-duration and --termination-time flags in gcloud compute instances set-scheduling to beta.
  • Added --clear-max-run-duration and --clear-termination-time flags in gcloud compute instances set-scheduling to beta.
  • Promoted --endpoint-types flag in gcloud compute routers nats create to GA.

Dataproc Metastore

  • Promoted --auxiliary-versions flag of gcloud metastore services create to GA. Modified flag to no longer be mutually exclusive with --consumer-subnetworks and --network-config-from-file.
  • Promoted --auxiliary-versions-from-file flag of gcloud metastore services create to GA. Modified flag to no longer be mutually exclusive with --consumer-subnetworks and --network-config-from-file.
  • Promoted --instance-size flag of gcloud metastore services create and gcloud metastore services update to GA.
  • Added --instance-size flag to gcloud metastore services create and gcloud metastore services update to specify a service instance size.
  • Promoted --scaling-factor flag of gcloud metastore services create and gcloud metastore services update to GA.
  • Added --scaling-factor flag to gcloud metastore services create and gcloud metastore services update to specify a service scaling factor.
  • Modified --tier flag of gcloud metastore services create and gcloud metastore services update to be mutually exclusive with --instance-size and --scaling-factor in all release tracks.

Identity and Access Management

  • Added support for credential sharing with bq and gsutil when using browser-based sign-in with Workforce identity federation to authenticate with the Google Cloud CLI via gcloud auth login.

Kpt

Kubernetes Engine

  • Prevent overwriting directory permission when KUBECONFIG contains empty entry or a directory. Instead, raise an error.
  • Updates default kubectl from 1.24.10 to 1.24.11.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.17)
    • kubectl.1.24 (1.24.11)
    • kubectl.1.25 (1.25.7)
    • kubectl.1.26 (1.26.2)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

420.0.0 (2023-02-28)

Breaking Changes

  • (Cloud Firestore) Switched firestore beta database create to use Firestore API.
  • (Cloud Firestore) Added --type, --location and --database to gcloud beta firestore database create.
  • (Cloud Firestore) Removed --region in gcloud beta firestore database create. Use --location instead.

App Engine

  • Added support for App Engine go runtime versions 116, 117, 118, 119, 120.

BigQuery

  • Updated messaging for the use_legacy_sql flag.
  • Added stack trace logging for errors when the apilog flag is used.
  • Removed unnecessary fetches for data transfer commands.

Certificate Authority Service

  • Added name constraints arguments to gcloud privateca roots create to allow configuring certificate authorities with name constraints.
  • Added name constraints arguments to gcloud privateca subordinates create to allow configuring certificate authorities with name constraints.
  • Added name constraints arguments to gcloud privateca certificates create to allow configuring certificate authorities with name constraints.

Cloud Composer

  • Update warning message when running commands that use the default Cloud Composer version, which was changed recently from 1 to 2.

Cloud Functions

  • Fixed issue where gcloud functions deploy would crash on updating an existing function with VPC Connector when --egress-settings flag was specified.
  • Added warning and prompting to gcloud functions add-iam-policy-binding about needing to bind the roles/run.invoker role for 2nd gen functions.

Cloud Key Management Service

  • Added gcloud beta kms inventory which allows viewing and tracking of keys across cloud resources.

Cloud Logging

  • Promoted buckets create --enable-analytics to GA.
  • Added buckets update --enable-analytics to GA track.
  • Removed deprecated buckets update --enable-loglink from ALPHA track.
  • Added --async option to the buckets create and buckets update commands.
  • Added links command group implementation.

Compute Engine

  • Promoted --queue-count flag in --network-interface of gcloud compute instances create to beta.
  • Promoted --stack-type flag of gcloud compute instances bulk create to GA.
  • Promoted gcloud compute disks update to GA.
  • Promoted --provisioned-iops flag of gcloud compute disks update to GA.

GKE Hub

  • Added gcloud container fleet scopes|namespaces which allows users to manage Fleet Tenancy.

Identity and Access Management

Pubsub Emulator

  • Added support for updating schemas.
  • Fixed the inability to create topics, subscriptions, and schemas when using the gcloud CLI.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

419.0.0 (2023-02-22)

App Engine

Artifact Registry

  • Fix issue where artifacts repositories create failed unconditionally.

Cloud Datastream

  • Added new --full-hierarchy and --hierarchy-depth flags for connection-profiles discover.
  • Deprecated --recursive and --recursive-depth flags for connection-profiles-discover.

Cloud Functions

  • Added support for Docker package format {location}-docker.pkg.dev/{project}/{repository} to --docker-repository flag of gcloud functions deploy.
  • Fixed issue where gcloud functions deploy fails if the user doesn't have the permission serviceusage.services.get.

Cloud Logging

  • Promote --logging-optional and --logging-optional-fields flags of gcloud compute backend-services create and gcloud compute backend-services update to GA.

Cloud Run

  • Promoted gcloud beta run jobs executions logs read to beta, which reads logs from a selected resource.
  • Promoted gcloud beta run jobs executions logs tail to beta, which tail logs from a selected resource.

Cloud Storage

  • gcloud storage cp will now silently ignore the Content-MD5 header for parallel composite uploads.
  • gcloud storage hash has been promoted to GA.

Firebase Test Lab

  • Promoted --client-details flag of gcloud firebase test [android|ios] run to GA. This flag can be used to provide additional details to attach to the test matrix, including a matrixLabel to help you identify and locate your test in the Firebase console.

Recaptcha

  • Support creating Fastly enabled site keys using recaptcha keys create --waf-service=fastly.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

418.0.0 (2023-02-14)

Breaking Changes

  • (Cloud Dataproc) Modified --job-id and --yarn_application_id flags to --job-ids and --yarn-application-ids respectively in gcloud dataproc clusters diagnose command. These flags can now accept a comma separated list of job ids and yarn app ids instead of a single value.

Google Cloud CLI

  • Defined "quota_project" in gcloud auth application-default set-quota-project command documentation.
  • Launched the enterprise-certificate-proxy component. See more at $ gcloud topic client-certificate.

AI

  • Added gcloud ai models copy which copies a model.

AlloyDB

  • Added --clear-continuous-backup-encryption-key flag to gcloud beta alloydb clusters update to support clearing a custom encryption configuration for Continuous Backups.
  • Added following flags of gcloud alloydb instances create and gcloud alloydb instances update to alpha, beta and GA:
    • --insights-config-query-string-length
    • --insights-config-query-plans-per-minute
    • --insights-config-record-application-tags
    • --insights-config-record-client-address

Artifact Registry

  • Adding new command gcloud artifacts vpcsc-config allow --project=my-proj --location=us-west1.
  • Adding new command gcloud artifacts vpcsc-config deny --project=my-proj --location=us-west1.
  • Adding new command gcloud artifacts vpcsc-config describe --project=my-proj --location=us-west1.
  • Adding new command gcloud artifacts repositories create my-repo --project=my-project --repository-format=maven --location=us-east1 --description="My test repo" --mode=virtual-repository --upstream-policy-file=policy.json.
  • Adding new command gcloud artifacts repositories create my-repo --project=my-project --repository-format=python --location=us-east1 --description="My python repo" --mode=remote-repository --remote-repo-config-desc="test python remote repo" --remote-python-repo=PYPI.
  • Adding new command gcloud artifacts repositories create my-repo --project=my-project --repository-format=npm --location=us-east1 --description="My npm repo" --mode=remote-repository --remote-repo-config-desc="test npm remote repo" --remote-npm-repo=NPMJS.
  • Adding new command gcloud artifacts repositories create my-repo --project=my-project --repository-format=maven --location=us-east1 --description="My test repo" --mode=remote-repository --remote-repo-config-desc="test maven remote repo" --remote-mvn-repo=MAVEN-CENTRAL.
  • Adding new command gcloud artifacts repositories create my-repo --project=my-project --repository-format=docker --location=us-east1 --description="no CRM permission" --mode=remote-repository --remote-repo-config-desc="test docker remote repo" --remote-docker-repo=DOCKER-HUB.

BigQuery

  • Added SPARK reservation assignment.
  • Added main class option for Spark procedures.
  • Added support for bi-engine reservation paths.

Cloud DNS

  • Fixed issue with gcloud dns response-policies being unable to update gkeclusters flag in GA.
  • Updated gcloud dns record-sets create and gcloud dns record-sets update to allow referencing forwarding rules by their full resource path.

Cloud Datastream

  • Modified Create/Update Stream flags that use a JSON/YAML file to use camelCase field naming instead of snake_case, to match the REST API. Old snake_case configuration files will still be supported.

Cloud Filestore

  • Added --location flag to gcloud filestore instances snapshots create, which accepts either a zone or region and allows clients to create Enterprise and HighScale snapshots.
  • Added --location flag to gcloud filestore instances snapshots delete, which accepts either a zone or region and allows clients to delete Enterprise and HighScale snapshots.
  • Added --location flag to gcloud filestore instances snapshots list, which accepts either a zone or region and allows clients to list Enterprise and HighScale snapshots.
  • Added --location flag to gcloud filestore instances snapshots update, which accepts either a zone or region and allows clients to update Enterprise and HighScale snapshots.
  • Added --location flag to gcloud filestore instances snapshots describe, which accepts either a zone or region and allows clients to describe Enterprise and HighScale snapshots.

Cloud Firestore

  • Added --api-scope and --query-scope support for Firestore Index Create.

Cloud Key Management Service

  • Set --location and --keyring as required flags for commands set-primary-version, set-rotation-schedule, get-rotation-schedule, set-iam-policy, get-iam-policy.

Cloud Logging

  • Allow for protocols TCP, UDP and UNSPECIFIED in gcloud compute backend-services create and gcloud compute backend-services update.
  • Added --logging-optional and --logging-optional-fields flags of gcloud compute backend-services create and gcloud compute backend-services update in beta to specify the optional fields to be added to the reported logs.

Cloud Run

  • Fixed an issue where gcloud run delete commands report error sometimes even though the deletion succeeded.

Cloud Storage

  • Updated gsutil component to 5.20.
  • All gcloud storage commands that accept JSON files now also support YAML.

Compute Engine

  • Promoted --resource-policies flag for glcloud compute reservations createto to GA.

Distributed Cloud Edge

  • Introduced the GDCE version for cluster, machine, and node-pool as output during list and describe operations.
  • Added gcloud edge-cloud networking which allows users to configure the networking configurations on the ToRs to support customer workloads which are running in Google Distributed Cloud Edge Clusters.

Stackdriver Debugger

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

417.0.1 (2023-02-08)

App Engine Flexible Environment

  • Fixing issue where App Engine Flex users cannot deploy their PHP, Java or Python applications via gcloud 417.0.0.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

417.0.0 (2023-02-07)

Breaking Changes

  • (Cloud IoT) Added --device-field-mask flag to gcloud iot devices list to have override possibility for device fieldMask. In case the API response does not include the blocked field for any of the devices, the BLOCKED column will disappear from the results table.

Google Cloud CLI

  • Defined "quota_project" in gcloud auth application-default set-quota-project command documentation.

Anthos Multi-Cloud

  • Modified gcloud container azure clients create to wait for the returned long-running operation. Use --async flag to get the old behavior.
  • Modified gcloud container azure clients delete to wait for the returned long-running operation. Use --async flag to get the old behavior.

Cloud Composer

  • Added warning message when running commands that use the default Cloud Composer version, which will be changed soon.

Cloud Logging

  • Updated gcloud logging buckets list command to include CMEK enabled or disabled setting.

Cloud Run

  • Promoted gcloud run jobs deploy to beta, which allows creating or updating a Cloud Run job from a container image or source to build.

Compute Engine

  • Added REGION column to default output of gcloud compute target-https-proxies list.
  • Promoted gcloud compute network-attachments to GA.

Distributed Cloud Edge

  • Promoted --vpc-project to gcloud edge-cloud container vpn-connections create to create resources in a different GCP project than the GDCE cluster project.

Firebase Test Lab

  • Promoted gcloud firebase test [android|ios] list-device-capacities to GA. This feature can inform your test decisions by letting you view the inventory level of device types in the Test Lab catalog. To access this information, run gcloud firebase test [android|ios] list-device-capacities, or gcloud firebase test [android|ios] models describe [MODEL_ID].

Identity and Access Management

  • Added gcloud iam workforce-pools commands for Workforce Identity Federation management.

Notebooks

  • Deprecate alpha and beta notebooks.

Security Command Center

  • Updated gcloud scc custom-modules sha command group to allow custom modules feature.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

416.0.0 (2023-01-31)

Breaking Changes

  • (Cloud Datalab) Removed gcloud datalab component (Originally removed in release 413.0.0).

AI

  • Fixed an issue in gcloud ai hp-tuning-jobs that the values of --max-trial-count and --max-parallel-trial-count are not passed in the config.yaml file.

AlloyDB

  • Updated gcloud beta alloydb clusters create and gcloud beta alloydb clusters update to support enabling continuous backups via new --enable-continuous-backup and --continuous-backup-recovery-window-days and --continuous-backup-encryption-key flags.

Anthos Identity Service

  • Added --fleet-default-member-config flag to the following commands:

    • gcloud beta container fleet identity-service enable

    • gcloud beta container fleet identity-service delete

      These will make it possible to configure and delete fleet default membership configurations.

App Engine

  • Added the --tunnel-through-iap flag to gcloud beta app instances scp. Using this flag lets you use an Identity-Aware Proxy (IAP) tunnel when attempting to SCP to/from an App Engine flexible environment instance without an external IP address.

Cloud Run

  • Promotes gcloud beta run jobs logs read to beta, which reads logs from a selected resource.
  • Promotes gcloud beta run jobs logs tail to beta, which tail logs from a selected resource.

Cloud SQL

  • Promoted gcloud sql users describe command to GA.

Cloud Storage

  • Updated gsutil component to 5.19.
    • Fixed an issue causing parallel transfer commands to require elevated permissions.

Compute Engine

  • Modified gcloud compute instance-groups managed update to support relative path for regional health check.
  • Added --allow-psc-global-access flag of gcloud compute forwarding-rules <create|update> to beta.
  • Promoted gcloud compute resource-policies update snapshot-schedule to beta.

Config Controller

  • Fixed issue where --full-management flag doesn't take effect.

Immersive Stream

  • Promoted gcloud immersive-stream xr to GA.

Kubernetes Engine

  • Updates default kubectl from 1.24.9 to 1.24.10.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.16)
    • kubectl.1.24 (1.24.10)
    • kubectl.1.25 (1.25.6)
    • kubectl.1.26 (1.26.1)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

415.0.0 (2023-01-24)

Google Cloud CLI

  • Global --format flag now respects the core/default_format property when --format=default. If core/default_format is not set, then default format is yaml.

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.
  • Added --enable-dashboard-access flag to gcloud ai custom-jobs create and gcloud ai hp-tuning-jobs create to allow the access to the dashboard specified in custom container.

BigQuery

  • Added support for using the auth/impersonate_service_account property in bq commands.

Cloud Build

  • Added command groups for managing connections and repositories: gcloud beta builds connections and gcloud beta builds repositories.

Cloud Dataproc

  • Added gcloud dataproc node-groups group with commands: describe and resize.
  • Added --driver-pool-${X} flags to gcloud dataproc clusters create.

Cloud Firestore

  • Added --database flag to gcloud firestore operations to add database support for Firestore operations.

Cloud On Demand Scanning

  • Fixed issue with extracting packages from Go binaries built with newer versions of to the Go toolchain.

Cloud Org Policy

  • Added --update-mask to gcloud org-policies set-policy to specify the fields to be overwritten in the policy.

Cloud Pub/Sub

  • Added gcloud pubsub schemas commit to commit a revision for a Pub/Sub schema.
  • Added gcloud pubsub schemas rollback to roll back a revision for a Pub/Sub schema.
  • Added gcloud pubsub schemas delete-revision to delete a revision for a Pub/Sub schema.
  • Added gcloud pubsub schemas list-revisions to list all revisions for a Pub/Sub schema.
  • Added --first-revision-id and --last-revision-id flags to gcloud pubsub topics create to create schema settings for Pub/Sub topics.
  • Added --clear-schema-settings, --schema, --message-encoding, --first-revision-id and --last-revision-id flags to gcloud pubsub topics update to update schema settings for a Pub/Sub topic.

Cloud SQL

  • Promoted gcloud sql users describe command to beta.

Compute Engine

  • Added --update-policy-<type|max-unavailable|max-surge|minimal-action|most-disrtuptive-action|replacement-method> flags of gcloud compute instance-groups managed <create|update> to GA.
  • Added --update-policy-min-ready flag of gcloud compute instance-groups managed <create|update> to beta.
  • Added --enforce-on-key-configs flag to gcloud beta compute security-policies rules create and gcloud beta compute security-policies rules update.

Dataproc Metastore

  • Promoted gcloud metastore services import flag --dump-type to GA.
  • Promoted gcloud metastore services export flag --dump-type to GA.

Declarative Workflows

  • Make --storage-path, --resource-types and --resource-types-file mutually exclusive in gcloud beta resource-config bulk-export.

Kpt

Recommender

  • Added support for gcloud recommender recommendations mark-dismissed.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

414.0.0 (2023-01-18)

Anthos Multi-Cloud

  • Added --azure-tenant-id and --azure-application-id flags to gcloud container azure clusters create and gcloud container azure clusters update to set authentication configuration for management of Azure resources. These flags replace --client flag.

Apigee

  • Fixed issue where gcloud apigee apis describe would demand a non-existent --revision argument.

Cloud API Gateway

  • Fixed issue where sort-by arguments in list commands produced type validation errors.

Cloud Build

  • Added --peered-network-ip-range flag to gcloud builds worker-pools create.

Cloud Firestore

  • Added database support for Firestore import/export.
  • Added namespace_ids support for Firestore import/export.
  • Added databaseId support for Firestore TTL.
  • Added databaseId support for Firestore SFI.

Cloud Storage

  • Add IAM and ACL-related flags.
  • Updated gsutil component to 5.18.

Compute Engine

  • Promoted --external-ipv6-address flag of gcloud compute instances network-interfaces update to GA.
  • Promoted --external-ipv6-prefix-length flag of gcloud compute instances network-interfaces update to GA.
  • Added keyword network-attachment for --network-interface in gcloud compute instance-templates create.
  • Promoted --external-ipv6-address flag of gcloud compute instances create to GA.
  • Promoted --external-ipv6-prefix-length flag of gcloud compute instances create to GA.
  • Promoted --source-instance-template flag of gcloud compute reservations create to GA.

Database Migration

  • Added gcloud database-migration conversion-workspaces seed which seeds from a connection profile for a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces delete which deletes a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces convert which converts source entities to draft entities in a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces apply which applies a database-migration conversion workspace onto the destination database.
  • Added gcloud database-migration conversion-workspaces list-background-jobs which lists the background jobs in a database-migration conversion workspaces.
  • Added gcloud database-migration conversion-workspaces describe-entities which describes the database entities in a database-migration conversion workspaces.

Dataproc Metastore

  • Promoted gcloud metastore services flag --database-type to GA.

Kubernetes Engine

  • Updates default kubectl from 1.23.15 to 1.24.9.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.15)
    • kubectl.1.24 (1.24.9)
    • kubectl.1.25 (1.25.5)
    • kubectl.1.26 (1.26.0)

Network Management

  • Added appEngineVersion and cloudRunRevision arguments for source in gcloud network-management connectivity-tests. This allows the user to run tests using App Engine version and Cloud Run revision endpoint types as source.

Security Command Center

  • Fixed gcloud scc findings create to require flag event-time.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

413.0.0 (2023-01-10)

Breaking Changes

  • (Cloud Storage) Added --fetch-encrypted-object-hashes flag to ls and objects list commands. API requests to the LIST endpoint do not fetch the hashes for encrypted objects by default. If this flag is set, a GET request is sent for each encrypted object in order to fetch hashes. This can significantly increase the cost of the commands.
    • Previously, the fallback to GET was implemented for CSEK-encrypted objects as the default behavior. With this flag, both CSEK and CMEK are handled, and gcloud CLI checks if it has the necessary CSEK key before sending a GET request.
  • (Kubernetes Engine) This change starts using the Client-Go Credential Plugin gke-gcloud-auth-plugin as noted in Client-go Credential Plugin changes.

Google Cloud CLI

  • Fixed a crash during reauth when Enterprise Certificate is used.
  • Fixed issue where the gcloud CLI would crash when invoked in PowerShell 7.3. This issue was reported at: https://issuetracker.google.com/issues/259295558.
  • Added core/default_format and core/format properties to config in order enable setting a default print format. Print format is first determined by global flag --format. If --format flag is not defined, then CLI defaults to core/format value. If core/format is not defined, then CLI defaults to command specific output. If command specific output is undefined, then format is determined by core/default_format. core/default_format defaults to yaml format.

AI

  • Modified --region flag of gcloud ai model-monitoring-jobs to include new model monitoring jobs regions.
  • Modified --explanation-metadata-file flag of gcloud ai models upload from required to optional.
  • Added optional output-image-uri field to --worker-pool-spec flag of gcloud ai custom-jobs create to name and store the custom image built with autopackaging in the specified Google Container Registry or Artifact Registry.

Anthos Multi-Cloud

  • Updated gcloud container aws operations list to show the underlying action (create, update, delete, etc) associated with AWS long-running operations.
  • Updated gcloud container azure operations list to show the underlying action (create, update, delete, etc) associated with Azure long-running operations.
  • Added gcloud container azure operations cancel to cancel an ongoing LRO operation on Azure resources.
  • Added gcloud container aws operations cancel to cancel an ongoing LRO operation on AWS resources.
  • Added --tags flag to gcloud container aws node-pools update to update the tags assigned to AWS node pool resources.
  • Added --clear-tags flag to gcloud container aws node-pools update to clear the tags assigned to AWS node pool resources.
  • Added --autoscaling-metrics-granularity flag to gcloud container aws node-pools create to set granularity when enabling CloudWatch metrics collection of the autoscaling group of AWS node pools.
  • Added --autoscaling-metrics flag to gcloud container aws node-pools create to enable collection of specific CloudWatch metrics of the autoscaling group of AWS node pools.
  • Added --autoscaling-metrics-granularity flag to gcloud container aws node-pools update to update the granularity of CloudWatch metrics collection for the autoscaling group of AWS node pools.
  • Added --autoscaling-metrics flag to gcloud container aws node-pools update to update the collection of specific CloudWatch metrics for the autoscaling group of AWS node pools.
  • Added --clear-autoscaling-metrics flag to gcloud container aws node-pools update to clear the CloudWatch metrics collection associated with the autoscaling group of AWS node pools.
  • Added gcloud container attached operations list to show the underlying action (create, update, delete, etc) associated with Attached clusters long-running operations.
  • Added gcloud container attached operations describe to show detailed status of a provided Attached clusters long-running operation.
  • Added gcloud container attached operations wait to wait for completion of a provided Attached clusters long-running operation.

BigQuery

  • Fixed issue with timestamp normalization in Windows.
  • Extended the insert flags to include a insert_id flag that's appended to the row number of the data to be inserted as the insertId field that's used for deduping newly inserted rows. This can be used to ensure repeat executions don't add unintended data.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager authorized-orgs to GA.

Cloud Build

  • Removed --subscription-filter flag of gcloud builds triggers create manual.

Cloud Composer

  • Added --enable-cloud-data-lineage-integration to gcloud composer environments create/update to enable Cloud Data Lineage integration.
  • Added --disable-cloud-data-lineage-integration to gcloud composer environments update to disable Cloud Data Lineage integration.
  • Enabled db check Airflow command executable via gcloud composer environments run for environments with Airflow 2.3 or newer.

Cloud Datalab

  • Removed gcloud datalab component.

Cloud Run

  • Added --env-vars-file to gcloud beta run jobs create to add environment variables to the job from a YAML file.
  • Removed the call to action from gcloud beta run integrations describe for Redis integrations that are not ready for use.

Cloud SQL

  • Added --striped and --stripe_count flags to gcloud sql import bak and added --striped flag to gcloud sql export bak to enable the striped import/export feature for SQL Server.
  • Promoted --restore-database-name flag for gcloud sql instance clone --point-in-time to support single database PITR restore for SQL Server to beta and GA.
  • Added gcloud sql users describe command, which describes a Cloud SQL user in an instance in alpha.

Cloud Services

  • Promoted gcloud services api-keys list in beta.
    • Promoted gcloud services api-keys describe in beta.
    • Promoted gcloud services api-keys get-key-string in beta.
    • Promoted gcloud services api-keys create in beta.
    • Promoted gcloud services api-keys update in beta.

Cloud Storage

  • Added gcloud storage buckets create --placement flag.
  • Promoted gcloud storage objects update retention flags to GA.
    • --event-based-hold
    • --temporary-hold
  • Removed gcloud storage buckets update --no-lock-retention-period flag.

Cloud Workstations

  • Added gcloud beta workstations clusters create which creates a cluster under a specified region.
  • Added gcloud beta workstations configs create which creates a workstation configuration under a specified cluster.
  • Added gcloud beta workstations create which creates a workstation under a specified config.
  • Added gcloud beta workstations delete which deletes the given workstation.
  • Added gcloud beta workstations configs delete which deletes the given config.
  • Added gcloud beta workstations clusters delete which deletes the given cluster.
  • Added gcloud beta workstations describe which displays all fields for a given workstation.
  • Added gcloud beta workstations configs describe which displays all fields for a given config.
  • Added gcloud beta workstations clusters describe which displays all fields for a given cluster.
  • Added gcloud beta workstations start which starts a specified workstation.
  • Added gcloud beta workstations stop which stops a specified workstation.

Compute Engine

  • Added -iam-policyand-iam-policy-bindingstogcloud beta compute backend-buckets`.
  • Promoted --endpoint-type flag of gcloud compute addresses create to GA.
  • Promoted gcloud compute sole-tenancy node-groups simulate-maintenance-event to beta.
  • Added --all-instances-config-effective flag of gcloud compute instance-groups managed wait-until to beta.
  • Modified gcloud compute forwarding-rules create to allow specifying --address and --ip-version at the same time.

Compute Firewall Policies

  • Fixed gcloud compute network-firewall-policies rules update not sending an empty list to the API if a field is specified as empty.

Database Migration

  • Added gcloud database-migration private-connections create which creates a database-migration private connection.
  • Added gcloud database-migration private-connections list which lists the database-migration private connections.
  • Added gcloud database-migration private-connections describe which describes a database-migration private connection.
  • Added gcloud database-migration private-connections delete which deletes a database-migration private connection.
  • Updated gcloud database-migration connection-profiles create to support creating Oracle connection profiles.
  • Updated gcloud database-migration connection-profiles create to support connectivity in creating Postgresql connection profiles.
  • Added gcloud database-migrate conversion-workspaces create which creates a database-migration conversion workspace.
  • Added gcloud database-migrate conversion-workspaces update which updates a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces list which lists the database-migration conversion workspaces.
  • Added gcloud database-migration conversion-workspaces describe which describes a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces commit which commits a database-migration conversion workspace.
  • Added gcloud database-migration conversion-workspaces rollback which rollbacks a database-migration conversion workspace.

Kubernetes Engine

  • Updates default kubectl from 1.23.14 to 1.23.15.
  • Removes kubectl.1.20, since it is no longer needed.
  • Additional kubectl versions:
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.17)
    • kubectl.1.23 (1.23.15)
    • kubectl.1.24 (1.24.9)
    • kubectl.1.25 (1.25.5)

Pubsub Emulator

  • Added support for Exactly-once Delivery.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

412.0.0 (2022-12-13)

Breaking Changes

  • (Compute Engine) Modified concurrent operation quota errors to show additional information to user instead of just error message.

Google Cloud CLI

  • Added property core/parse_error_details. If set, gcloud CLI will parse and display errors in a more human readable format, where available.

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.
  • Modified --region flag of gcloud ai custom-jobs to include new online training regions.
  • Modified --region flag of gcloud ai hp-tuning-jobs to include new online training regions.

AlloyDB

  • Introduced gcloud alloydb track.

Anthos Multi-Cloud

  • Promoted gcloud container attached to GA.

App Engine

  • Updated gcloud beta app instances ssh to use an IAP tunnel when attempting to SSH to an instance without an external IP.

Cloud Build

  • Modified one of gcloud builds triggers run --branch, gcloud builds triggers run --tag, and gcloud builds triggers run --sha flag to be required.
  • Make --region flag visible in builds triggers create command group. Set --dockerfile flag as required for builds triggers create command group.
  • Ungroup --build-config flag and --inline-config flag for builds triggers create command group.
  • Promoted gcloud builds triggers to GA.

Cloud Composer

  • Added gcloud composer environments snapshots load - to load a snapshot into the environment.
  • Added gcloud composer environments snapshots save - save a snapshot of the environment.
  • Added --enable-scheduled-snapshot-creation to gcloud composer environments create/update to enable snapshots of the environment creation according to a schedule. Can be specified for Composer 2.0.32 or greater.
  • Added --snapshot-creation-schedule to gcloud composer environments create/update to specify cron expression when snapshots of the environment should be created.
  • Added --snapshot-location to gcloud composer environments create/update to specify the Cloud Storage location for storing automatically created snapshots.
  • Added --snapshot-schedule-timezone to gcloud composer environments create/update to specify Timezone that sets the context to interpret snapshot_creation_schedule.
  • Added --disable-scheduled-snapshot-creation to gcloud composer environments update to disable the automatic snapshots creation.

Cloud Datastream

  • Fixed issue where gcloud datastream create failed for Postgresql source config.

Cloud Functions

  • Added --cpu flag to gcloud beta functions deploy for 2nd Gen functions to alpha and beta.
  • Added --concurrency flag to gcloud beta functions deploy for 2nd Gen functions to alpha and beta.

Cloud Pub/Sub

  • Added --event-time and --publish-time flags to gcloud pubsub lite-subscriptions create to create Pub/Sub Lite subscriptions from a nominated timestamp.
  • Added --export-pubsub-topic, --export-dead-letter-topic and --export-desired-state flags to gcloud pubsub lite-subscriptions create to create Pub/Sub Lite export subscriptions.
  • Added --export-pubsub-topic, --export-dead-letter-topic and --export-desired-state flags to gcloud pubsub lite-subscriptions update to update Pub/Sub Lite export subscriptions.

Cloud SQL

  • Added --enable-google-private-path flag to gcloud sql instances create and gcloud sql instances patch commands in Alpha, Beta, and GA. This field specifies whether the instance is accessible to internal Google Cloud services such as BigQuery. This is applicable only to MySQL and PostgreSQL instances that don't use public IP. Currently, SQL Server isn't supported.

Cloud Services

  • Promoted gcloud services api-keys delete to beta.
  • Promoted gcloud services api-keys undelete to beta.

Cloud Workstations

  • Added gcloud beta workstations configs list which lists workstation configs under a specified cluster.

Config Controller

  • Added --full-management flag to gcloud anthos config controller create to allow creating Config Controller on GKE Autopilot instances.

Database Migration

  • Updated gcloud database-migration connection-profiles create to support creating AlloyDB connection profiles.

Firebase Test Lab

  • Added --robo-script flag to gcloud firebase test ios run to customize an iOS Robo crawl with a Robo script.

Identity and Access Management

  • Added --executable-interactive-timeout-millis flag to gcloud iam workforce pools create-cred-config. This enables using executable-sourced credentials with user interactivity with gcloud auth login --cred-file=/path/to/interactive/executable/config.json when using Workforce Identity Federation.

Kubernetes Engine

  • Added --stack-type and --ipv6-access-type arguments to gcloud container clusters create command to support dual stack GKE clusters.
  • Added --stack-type argument to gcloud container clusters update command to support changing stack type between IPv4 and dual stack GKE clusters.
  • Added --ephemeral-storage-local-ssd to gcloud beta container clusters create, gcloud beta container node-pools create, gcloud container clusters create, gcloud container node-pools create. This flag is used to configure nodes' ephemeral storage to be backed by local SSDs.
  • Added --local-nvme-ssd-block to gcloud beta container clusters create, gcloud beta container node-pools create, gcloud container clusters create, gcloud container node-pools create. This flag is used to initialize nodes in node-pool with raw-block local NVMe SSDs attached.

Notebooks

  • Added support for Shielded VM configuration to gcloud notebooks instances create.
  • Added support for reservation configuration to gcloud notebooks instances create.

Terraform

  • Added zone and region option for gcloud beta terraform vet.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

411.0.0 (2022-12-06)

Breaking Changes

  • (Compute Engine) Added rhel-9 and rhel-9-byol options to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in GA

Google Cloud CLI

  • Added gcloud topic command group to alpha and beta.

App Engine

  • Add --service-account flag of gcloud app create to GA, which allows to create an app with a user-managed service account.
  • Add --service-account flag of gcloud app update to GA, which allows to update the app with a user-managed service account.

App Engine Flexible Environment

  • Add --service-account flag of gcloud app create to GA, which allows to create an app with a user-managed service account.
  • Add --service-account flag of gcloud app update to GA, which allows to update the app with a user-managed service account.

BigQuery

  • Expose enable_resumable_uploads flag in public bq.
  • Formatting fix for bigquery_client.py.
  • Changed "locking" Owned Test Accounts to "getting" to avoid overloading AccountProviderService.
  • Extended api logging to include URIs of requests.
  • Extends encodings supported during file upload.
  • Messages and fails early when the user tries to upload with an invalid schema.
  • Adds support for GOOGLE_CLOUD_QUOTA_PROJECT environment variable.
  • Adds configuration for external accounts using token_uri.
  • Dataset name validation and feedback.

Cloud Bigtable

  • Promoted gcloud bigtable instances tables create to beta and GA.
  • Promoted gcloud bigtable instances tables delete to beta and GA.
  • Promoted gcloud bigtable instances tables update to beta and GA.
  • Added include-stats option to cbt lookup and cbt read commands.
  • Added cbt notices command, which displays licenses covering all direct and indirect dependencies.

Cloud Build

  • Bugfix to enforce limits to be applied after filters.
  • Added --enterprise-config flag to builds triggers create github to support creating GitHub Enterprise trigger.

Cloud Composer

  • Added --enable-scheduled-snapshot-creation to gcloud beta composer environments create/update to enable snapshots of the environment creation according to a schedule. Can be specified for Composer 2.0.32 or greater.
  • Added --snapshot-creation-schedule to gcloud beta composer environments create/update to specify cron expression when snapshots of the environment should be created.
  • Added --snapshot-location to gcloud beta composer environments create/update to specify the Cloud Storage location for storing automatically created snapshots.
  • Added --snapshot-schedule-timezone to gcloud beta composer environments create/update to specify Timezone that sets the context to interpret snapshot_creation_schedule.
  • Added --disable-scheduled-snapshot-creation to gcloud beta composer environments update to disable the automatic snapshots creation.

Cloud Firestore

  • Add apiScope output for Firestore index. ApiScope can be viewed in gcloud firestore indexes composite list and gcloud firestore indexes composite describe.
  • Added databaseId support for Firestore index.

Cloud IDS

  • Added --threat_exceptions flag to exclude certain threat types from being reported.

Cloud Key Management Service

  • Modified gcloud kms import-jobs create to accept new SHA256 import methods rsa-oaep-3072-sha256, rsa-oaep-3072-sha256-aes-256, rsa-oaep-4096-sha256, and rsa-oaep-4096-sha256-aes-256.

Cloud Pub/Sub

  • Promoted --enable-exactly-once-delivery flag of gcloud pubsub subscriptions create to GA.
  • Promoted --enable-exactly-once-delivery flag of gcloud pubsub subscriptions update to GA.

Cloud Run

  • Promoted --execution-environment of gcloud run from beta to GA.
  • Fixed issue where gcloud beta run jobs execute with --wait flag, and other jobs commands to wait for an execution to complete, failed to wait more than 30 minutes.
  • Fixed issue where gcloud beta run integrations delete failed when the associated Cloud Run service is deleted.

Cloud SQL

  • Promoted --timeout flag for gcloud sql instances create to GA.
  • Added --restore-database-name flag to gcloud sql instance clone --point-in-time to support single database PITR restore for SQL Server.

Cloud Services

  • Updated gcloud services list to retry 429 errors.
  • Set the default page size for gcloud services list to 200.
  • Promoted gcloud services api-keys lookup to beta.

Cloud Spanner

  • Added --skip-init flag to gcloud spanner samples run.

Cloud Storage

  • Promoted gcloud storage buckets update retention flags to GA.
    • --default-event-based-hold
    • --retention-period
    • --clear-retention-period
    • --lock-retention-period
  • Promoted gcloud storage buckets update --uniform-bucket-level-access to GA.
  • Rebuilt gcloud-crc32c 1.0.0 on latest version of golang.
  • Updated gsutil component to 5.17.

Compute Engine

  • Added --merge-source-commitment to gcloud compute commitments create for beta and GA.
  • Fixed issue where gcloud compute instance-groups unmanaged list-instances would fail to fall back to the compute/zone property when --zone was missing.
  • Added customRequestHeaders and customResponseHeaders to modifiable fields list in gcloud compute backend-services edit.

Dataproc Metastore

  • Added support for querying and mutating Dataproc Metastore metadata. The following commands have been added to the alpha and beta release tracks:
    • metastore services queryMetadata
    • metastore services alterLocation
    • metastore services moveTableToDatabase

Distributed Cloud Edge

  • Added warning to long running operation metadata of gcloud edge-cloud container cluster create/update when the cluster has a maintenance window configuration that overlaps with other clusters' in the same project.

Firebase Test Lab

  • Added --type=robo flag to gcloud firebase test ios run to support running iOS Robo tests.

GKE Hub

  • Fixed bug in gcloud container fleet and gcloud container hub command groups where a membership with ambiguous location was not given default value global.

Kubernetes Engine

  • Promoted --cluster-dns-scope=cluster flag of gcloud container clusters create and gcloud container clusters update to GA.
  • Promoted --binauthz-evaluation-mode=MONITORING, binauthz-evaluation-mode=MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, and --binauthz-policy flags of gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update to beta.
  • Corrected outdated description help text of gcloud container node-pools delete.
  • Promoted --placement-type flag for gcloud container clusters create command to GA.
  • Promoted --placement-type flag for gcloud container node-pools create command to GA.
  • Added --async flag to gcloud container node-pools create/update to allow the in-progress operation to be returned, instead of the node pool.
  • Additionally, default formatting for gcloud container node-pools create/update/delete --async has been added to provide a more human-readable format of the operation; potentially impacting parsing of output. It is recommended to use --format when parsing gcloud CLI output.
  • Updates default kubectl from 1.22.14 to 1.23.14.

  • Additional kubectl versions:

    • kubectl.1.20 (1.20.15)
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.15)
    • kubectl.1.23 (1.23.14)
    • kubectl.1.24 (1.24.8)
    • kubectl.1.25 (1.25.4)

  • Added --windows-os-version flag to gcloud container node-pools create/update to allow create Windows node pools using Windows Server LTSC 2022 Containerd node image.

Media CDN

  • Added gcloud edge-cache command group to enable configuration of Media CDN.

Network Connectivity

  • Promoted gcloud network-connectivity internal-ranges command group to GA.

Network Security

  • Promoting networksecurity firewall API to v1beta1.
  • Promoted commands under gcloud network-security org-address-groups and gcloud network-security address-groups to beta.

Recommender

  • Added billing account scope support for gcloud recommender recommender-config describe.
  • Added billing account scope support for gcloud recommender recommender-config update.
  • Added billing account scope support for gcloud recommender insight-type-config describe.
  • Added billing account scope support for gcloud recommender insight-type-config update.

Terraform

  • Added support for environment variables GOOGLE_PROJECT, GOOGLE_CLOUD_PROJECT, GCLOUD_PROJECT in gcloud beta terraform vet.
  • Fixed an issue where gcloud beta terraform vet would fail while trying to format and output pre-formatted error strings.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

410.0.0 (2022-11-15)

Google Cloud CLI

  • Added gcloud topic endpoint-override for details on overriding the default api URL.

AI

  • Added asia-southeast2, europe-central2, and us-south1 options to --region flag of gcloud ai custom-jobs and gcloud ai hp-tuning-jobs.

AlloyDB

  • Introduced the following commands: gcloud beta alloydb clusters create-secondary, gcloud beta alloydb instances create-secondary, gcloud beta alloydb clusters promote.

App Engine

Artifact Registry

  • Update maven and gradle plugin versions to 2.2.0.

Assured Workloads

  • Added SOVEREIGN_CONTROLS_BY_T_SYSTEMS as an option for --partner flag of gcloud assured workloads create command (available for both beta and GA).

Cloud Asset Inventory

  • Promoted gcloud asset query command to GA.

Cloud Bigtable

  • Added stats option to --view flag for bigtable instances tables describe.

Cloud Composer

  • Added --enable-triggerer to gcloud beta composer environments create/update to allow usage of deferrable operators in dags.
  • Added --triggerer-cpu to gcloud beta composer environments create/update to specify CPU allocated to Airflow triggerer.
  • Added --triggerer-memory to gcloud beta composer environments create/update to specify memory allocated to Airflow triggerer.
  • Added --disable-triggerer to gcloud beta composer environments update to disable Airflow triggerer.

Cloud Dataproc

  • Added --async flag to gcloud dataproc jobs kill.

Cloud Datastream

  • Added the max_concurrent_cdc_tasks support to --mysql-source-config and --oracle-source-config flags in gcloud datastream streams.
  • Fixed issue where stream create using a mysql-source-config or oracle-source-config with column level filtering fails to create.

Cloud Functions

  • Fixed issue where gcloud functions list would crash when a 2nd Gen-only region was specified using --regions.
  • Updated gcloud function describe to look up both 1st Gen and 2nd Gen environments for the function. When --gen2 flag is specified, only 2nd Gen functions will be looked up.

Cloud Run

  • Promoted gcloud run services logs read and gcloud run revisions logs read to beta, which reads logs from a selected resource.
  • Promoted gcloud run services logs tail and gcloud run revisions logs tail to beta, which tail logs from a selected resource.
  • Added --execute-now and --wait flags to gcloud beta run job update to immediately execute the job after update and wait for completion.
  • Promoted gcloud beta run integrations command group and all sub-commands to beta.

Compute Engine

  • Promoted --list-managed-instances-results flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update to GA.
  • Fixed --network-interface to mark the public IP as None when --no-address is specified.

GKE Hub

  • Fixed issue where gcloud container fleet memberships commands did not output memberships with missing cluster.
  • Fixed bug in gcloud container fleet config-management version where memberships were stuck with version "NA".

Identity and Access Management

  • Added support for retrieving the token introspection endpoint through external account credentials.

Kubernetes Engine

  • Added --labels flag to gcloud container node-pools create/update to allow creating and updating node pools with GCP labels.

VPC Access

  • Promoted gcloud compute networks vpc-access connectors update to beta.
    • Enables updating of min-instances, max-instances and machine-type of already existing vpc-access connectors.

Vmware Engine

  • Added commands for managing resources:
    • Locations
    • Operations
    • VMwareEngine networks
    • Network policies
    • Node types
    • Private clouds
    • Clusters
    • HCX activation keys
    • NSX credentials
    • VCenter credentials
    • Subnets

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

409.0.0 (2022-11-08)

Breaking Changes

  • (Compute Engine) Modified stockout errors to show entire error object to user in yaml format instead of just error message.
  • (Compute Engine) Modified quota exceeded errors to show additional information to user instead of just error message.

Google Cloud CLI

  • Modified gcloud config list to accept both a section name and --all flag. The command will display all the set and unset properties when specifying both.

Anthos Multi-Cloud

  • Added --allow-missing flag to the following command groups: gcloud container aws clusters delete, gcloud container aws node-pools delete, gcloud container azure clients delete, gcloud container azure clusters delete, gcloud container azure node-pools delete, to allow the delete request to succeed, even if the cluster, node-pool or client resource does not exist.

Cloud Composer

  • Added --skip-airflow-overrides-setting to gcloud beta composer snapshots load to allow skipping setting Airflow overrides from the snapshot.
  • Added --skip-environment-variables-setting to gcloud beta composer snapshots load to allow skipping setting environment variables from the snapshot.
  • Added --skip-gcs-data-copying to gcloud beta composer snapshots load to allow skipping copying dags, plugins and data folders from the snapshot.

Cloud Datastream

  • Added the max_concurrent_cdc_tasks support to --mysql-source-config and --oracle-source-config flags in gcloud datastream streams.

Cloud Filestore

  • Fixed issue where --kms-key was being ignored in gcloud filestore backups create command.

Cloud Firestore Emulator

  • Promoted gcloud emulators firestore to GA.
  • Release Cloud Firestore emulator v1.15.1
    • feat: allow users to configure websocket port

Cloud Functions

  • Fixed issue where gcloud functions list would crash when a 2nd Gen-only region was specified using --regions.

Cloud Logging

  • Updated gcloud logging read to accept multiple resources to query using a new --resource-names flag.

Cloud SQL

  • Added the following flags to gcloud sql instances create in BETA:
    • --timeout

Compute Engine

  • Added --split-source-commitment to gcloud compute commitments create for beta and GA.
  • Promoted any-single-zone value support for the flag --target-distribution-shape of gcloud compute instance-groups managed create / update to beta.
  • Added keyword network-attachment for --network-interface in gcloud compute instances create.
  • Promoted --max-run-duration flag of gcloud compute instances create to beta.
    • Allows specifying the duration of time after which the instance will terminate.
  • Promoted --termination-time flag of gcloud compute instances create to beta.
    • Allows specifying the timestamp that the instance will terminate.
  • Added 3 additional accepted values to --enforce-on-key for gcloud compute security-policies rules create|update and promoted it to GA.
  • Promoted gcloud compute network-edge-security-services command group to GA.
  • Promoted --region and '--global' flags of gcloud compute security-policies to GA.
  • Promoted --network-ddos-protection flag of gcloud compute security-policies update to GA.

Distributed Cloud Edge

  • Removed unsupported GPU_TYPE field from gcloud edge-cloud container machines list. This field will be restored once the API provides accurate GPU information.

GKE Hub

  • Fixed a bug where gcloud container fleet memberships get-credentials and gcloud container hub memberships get-credentials would not return an error when the membership argument was left empty.

Kubernetes Engine

  • Corrected outdated description help text of gcloud container node-pools delete.
  • Added --private-endpoint-subnetwork and --enable-google-cloud-access flags to gcloud container clusters create and gcloud container clusters create-auto.
  • Added --enable-google-cloud-access and --enable-private-endpoint flags to gcloud container clusters update.
  • Added --enable-private-nodes flag to gcloud container node-pools create and gcloud container node-pools update.

Notebooks

  • Added gcloud notebooks instances diagnose and gcloud notebooks runtimes diagnose commands to GA. These commands provide access to the AI Platform Notebooks new Diagnose API.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

408.0.1 (2022-11-02)

BigQuery

  • Adds various fixes to PSC environments.
  • Adds support for random forest models as part of BQML.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

408.0.0 (2022-11-01)

Breaking Changes

AI

  • Added more available regions to gcloud ai model-monitoring-jobs.
  • Added --version-description flag to gcloud ai models upload to support setting model version description.

BigQuery

  • Add missing open source licenses.
  • Expose Iceberg for public preview.

Cloud Composer

  • Added --connection-type flag to gcloud beta composer environments create and gcloud composer environments create command to allow forcing the use of VPC peerings for internal communication.

Cloud Deploy

  • Added initial-rollout-labels and initial-rollout-annotations flags to gcloud deploy releases create command.

Cloud SQL

  • Promoted --connector_enforcement flag for gcloud sql instances create and gcloud sql instances patch to GA.

Cloud Storage

  • Updated gsutil component to 5.16.

Compute Engine

  • Promoted --discard-local-ssd flag of gcloud compute instances stop to beta.
  • Promoted --force-update-on-repair flag of gcloud compute instance-groups managed <create | update> to beta.
  • Fixed missing ephemeral IP when neither --address nor --no-address keys are provided with --network-interface flag during instance template creation.

GKE Hub

  • Changed membership-related flags in gcloud container fleet and gcloud container hub command groups to resource arguments, adding --location flag and LOCATION column in list commands.

Kubernetes Engine

  • Promoted --enable-managed-prometheus flag of gcloud container clusters create/update to GA.
  • Promoted --disable-managed-prometheus flag of gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

407.0.0 (2022-10-25)

Breaking Changes

  • (Cloud Run) Now gcloud beta run jobs update command removes existing Binary Authorization breakglass justification if --breakglass flag is not set.
  • (Cloud Run) In gcloud run deploy and gcloud run services update, --set-secrets, --remove-secrets, and --update-secrets flags now support mounting multiple versions of the same secret in the same directory.
  • (Cloud Run)
    • If multiple different secrets are requested to be mounted in the same directory, including for secrets already set on the service in the case of --update-secrets, the operation will now fail instead of silently overriding all secret versions with the last one specified.
  • (Compute Engine) Removed --csek-key-file flag of gcloud beta compute instances resume
    • Removing since instance suspend and resume do not support CSEK
    • If your instance with CSEK protection is suspended, please stop the instance then restart it and file a bug.

Assured Workloads

  • Added ASSURED_WORKLOADS_FOR_PARTNERS as an option for --compliance-regime flag of gcloud assured workloads create command.
  • Added --partner flag (optional) for gcloud assured workloads create command to enable creation of partner workload (workload managed by local trusted partners) through gcloud command.

Cloud DNS

  • Promoted gcloud dns managed-zones get-iam-policy and gcloud dns managed-zones set-iam-policy to GA.

Cloud Dataplex

  • Promoted Content command group to GA.
  • Promoted Environment command group to GA.

Cloud Datastream

  • Added postgresql type to --type flag of datastream connection-profiles <create/update>.
  • Added postgresql type to --postgresql-rdbms-file flag of datastream connection-profiles discover.
  • Added --postgresql-source-config flag to gcloud datastream streams <create/update>.
  • Added postgresql type to --type flag of datastream connection-profiles <create/update>.

Cloud Filestore

  • Added --kms-key flag to gcloud beta filestore backups create, which allows an Enterprise or High Scale backup to be created that is encrypted with a CMEK key." => "which creates a backup with an associated customer-managed encryption key (CMEK). Only available for Enterprise or High Scale tier instances.
  • Added --location flag to gcloud beta filestore instances restore, which restores Enterprise instances." => "restore Basic HDD, Basic SSD, and Enterprise tier instances.
  • Added --instance-location flag to gcloud beta filestore backups create, which accepts either a zone or region and allows clients to create Basic HDD, Basic SSD, and Enterprise tier backups.

Cloud SQL

  • Added the following flags to gcloud sql instances create and gcloud sql instances patch in BETA:
    • --connector_enforcement

Cloud Storage

  • Updated gsutil component to 5.15.

Cloud Workstations

  • Promoted gcloud beta workstations commands to beta for Preview.

Compute Engine

  • Promoted --source-machine-image, --source-machine-image-csek-key-file, and --erase-windows-vss-signature flags of compute instances create to GA.
  • Fixed an issue with --create-disk and --disk flags that causes gcloud compute instance-templates create or gcloud compute instance-templates create-with-container to fail when attaching a boot disk.
  • Promoted --region flag for compute target-tcp-proxies to GA.

Compute Firewall Policies

  • Fixed bug in gcloud compute network-firewall-policies rules update that would cause src-secure-tags to not be updated.

GKE Hub

  • Modified gcloud container fleet memberships register to skip Connect agent installation for GKE clusters by default. Use --install-connect-agent flag to get the old behavior.
  • Modified gcloud container fleet memberships unregister to skip Connect agent uninstallation for GKE clusters by default. Use --uninstall-connect-agent flag to get the old behavior.
  • Added --install-connect-agent flag to gcloud container fleet memberships register and gcloud container hub memberships register to install connect agent on GKE clusters.
  • Added --uninstall-connect-agent flag to gcloud container fleet memberships unregister and gcloud container hub memberships unregister to uninstall Connect agent on GKE clusters.

Identity and Access Management

  • Added gcloud iam policies create which creates a deny policy on the given attachment point with the given name.
  • Added gcloud iam policies delete which deletes a deny policy on the given attachment point with the given name.
  • Added gcloud iam policies get which gets a deny policy on the given attachment point with the given name.
  • Added gcloud iam policies list which lists the deny policies on the given attachment point.
  • Added gcloud iam policies update which updates the deny policy on the given attachment point with the given name.
  • Updated External Account URL validation to allow PSC endpoints.

Kubernetes Engine

  • Added --gateway-api flag to gcloud container clusters create and gcloud container clusters update which allows users to turn on the GKE Gateway controller for their cluster and to select the Gateway API release channel they want to use.

Security Command Center

  • Updated gcloud scc notifications update to allow for project and folder parents.
  • Updated gcloud scc notifications create to allow for project and folder parents.
  • Updated gcloud scc notifications delete to allow for project and folder parents.
  • Updated gcloud scc notifications list to allow for project and folder parents.
  • Updated gcloud scc notifications describe to allow for project and folder parents.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

406.0.0 (2022-10-17)

Breaking Changes

  • (Cloud Storage) Changed "Additional Properties" formatting for ls -L to print condensed JSON object instead of JSON list with key and value keys before every key and value.
  • (Kubernetes Engine) Remove deprecated --istio-config flag of gcloud beta container clusters create and gcloud beta container clusters update.

Anthos Multi-Cloud

  • Promoted --logging flag to gcloud container aws clusters create and gcloud container azure clusters create to update the logging config.
  • Promoted --logging flag to gcloud container aws clusters update and gcloud container azure clusters update to update the logging config.
  • Added --annotations flag to gcloud container azure node-pools create to set the annotations field when creating Azure node pools.
  • Added --annotations flag to gcloud container azure node-pools update to update the annotations of Azure node pools.
  • Added --clear-annotations flag to gcloud container azure node-pools update to clear the annotations of Azure node pools.

Bare Metal Solution

  • Promoted gcloud bms nfs-shares create to GA.
  • Promoted gcloud bms nfs-shares delete to GA.
  • Promoted gcloud bms volumes restore to GA.
  • Promoted gcloud bms volumes snapshot to GA.
  • Promoted gcloud bms volumes snapshots describe to GA.
  • Promoted gcloud bms volumes snapshots list to GA.
  • Promoted gcloud bms volumes snapshots delete to GA.
  • Promoted --add-allowed-client flag of gcloud bms nfs-shares update to GA.
  • Promoted --remove-allowed-client flag of gcloud bms nfs-shares update to GA.
  • Promoted --clear-allowed-clients flag of gcloud bms nfs-shares update to GA.
  • Promoted gcloud bms instances stop to GA.

BigQuery

  • Fixed issue with --api flag in external clients.
  • Added support for the target_job_concurrency flag and begins deprecating the concurrency flag.
  • Added the max_staleness flag for external tables.
  • Added support for SIMPLE with the object_metadata flag.
  • Added ZSTD as an extract option.

Certificate Manager

  • Added gcloud certificate-manager issuance-configs command group to beta. Commands in this group allow for configuring Private Trust certificate issuance.
  • Added --issuance-config flag for gcloud certificate-manager certificates create command to beta. The flag allows configuring managed certificates issuance with Private Trust.

Cloud Access Context Manager

  • Changed --level flag of gcloud access-context-manager cloud-bindings create and gcloud access-context-manager cloud-bindings update to take a string input instead of a resource:
    • No change is required on any previous configurations as a result of this change.

Cloud Datastream

  • Added BigQuery destination type support.

Cloud Firestore Emulator

  • Promoted gcloud emulators firestore to GA.

Cloud SQL

  • Added the following flags to gcloud sql instances create and gcloud sql instances patch for ALPHA:
    • --connector_enforcement

Cloud TPU

  • Promoted --shielded-secure-boot flag of gcloud compute tpus tpu-vm to GA.

Compute Firewall Policies

  • Updated gcloud compute firewall-policies rules create to include help text for src-threat-intelligence, src-fqdns, src-region-codes , src-address-groups, dest-threat-intelligence, dest-fqdns , dest-region-codes and dest-address-groups.
  • Updated gcloud compute firewall-policies rules update to include help text for src-threat-intelligence, src-fqdns, src-region-codes , src-address-groups, dest-threat-intelligence, dest-fqdns , dest-region-codes and dest-address-groups.
  • Updated gcloud compute network-firewall-policies rules create to include help text for src-threat-intelligence, src-fqdns, src-region-codes , src-address-groups, dest-threat-intelligence, dest-fqdns , dest-region-codes and dest-address-groups.
  • Updated gcloud compute network-firewall-policies rules update to include help text for src-threat-intelligence, src-fqdns, src-region-codes , src-address-groups, dest-threat-intelligence, dest-fqdns , dest-region-codes and dest-address-groups.
  • Promoted --src-address-groups and --dest-address-groups flags to beta in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.
  • Promoted --src-fqdns and --dest-fqdns flags to beta in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.

Kpt

Kubernetes Engine

  • Promoted the GKE add-on BackupRestore of gcloud container clusters <create|update> to GA. This add-on is disabled by default.
    • Use --addons=BackupRestore to enable the add-on during cluster creation.
    • Use --update-addons=BackupRestore=ENABLED|DISABLED to enable/disable the add-on for existing GKE clusters.

Managed Active Directory

  • Promoted gcloud active-directory domains extend-schema to GA.

Network Security

  • Updated gcloud network-security address-groups list to include the TYPE, CAPACITY and USAGE columns in the output.
  • Updated gcloud network-security org-address-groups list to include the TYPE, CAPACITY and USAGE columns in the output.

Security Command Center

  • Updated gcloud scc notifications update to allow for project and folder parents.
  • Updated gcloud scc notifications create to allow for project and folder parents.
  • Updated gcloud scc notifications delete to allow for project and folder parents.
  • Updated gcloud scc notifications list to allow for project and folder parents.

405.0.1 (2022-10-14)

GKE Hub

  • Updated gke-gcloud-auth-plugin to 0.4.0.

Cloud Bigtable

  • Updated the version of cbt to v1.12.1.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

405.0.0 (2022-10-04)

Google Cloud CLI

  • Fixed issue where revoking impersonated ADC credentials caused a crash.
  • Fixed issue where it was not possible to set a logging configuration when creating a regional backend service in alpha and beta.

Anthos Multi-Cloud

  • Added --tags flag to gcloud container aws clusters update to update the tags assigned to control plane replicas.
  • Added --clear-tags flag to gcloud container aws clusters update to clear the tags assigned to control plane replicas.

App Engine

Artifact Registry

  • Automatically creates missing repos for gcloud beta artifacts settings enable-upgrade-redirection command.

Batch

  • Promoted gcloud batch to GA track.

Cloud Dataplex

  • Updated gcloud dataplex tasks create to support scheduling notebooks.

Cloud Firestore

  • Promoted gcloud firestore fields ttls command group to GA.

Cloud Spanner

  • Promoted gcloud spanner instance-configs [create|update|delete] to GA.

Cloud SQL

  • Promoted --time-zone flag of gcloud sql instances create command to GA.
  • Provided a helpful error message when Cloud SQL Proxy fails to start during gcloud sql connect command.

Cloud Run

  • Added gcloud beta run jobs replace to deploy a job from yaml.

Compute Engine

  • Added ubuntu-2204 and windows-11-x64-byol options to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in GA
  • Updated gcloud compute instance-templates create not to crash if instantiate-from value is not specified in --configure-disk when using --source-instance flag.
  • Promoted --md5-authentication-key flag of gcloud compute routers add-bgp-peer to GA.
  • Promoted --md5-authentication-key and --clear-md5-authentication-key flags of gcloud compute routers update-bgp-peer to GA.

Firebase Test Lab

  • Delayed displaying information about the number of devices used until after all executions are created.

Identity and Access Management

  • Fixed an issue that would cause the Google Cloud CLI to crash when using invalid External Account Credentials.

Kubernetes Engine

  • Added a prompt when passing --enable-binauthz to gcloud container clusters update that acknowledges the current version of Binary Authorization will be downgraded.
  • Promoted --enable-cost-allocation flag of gcloud container clusters create to GA.
  • Promoted --enable-cost-allocation flag of gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

404.0.0 (2022-09-27)

App Engine

Assured Workloads

  • Promoted gcloud assured workloads violations commands to GA. This command provides the ability to create new Assured Workloads environment resources.

Batch

  • Improved error message formats for gcloud batch jobs submit unparsable json config file, gcloud batch jobs describe job and gcloud batch tasks describe task that does not exist.
  • Added new batch/location property that can be used to set a default location. To set the properties, run gcloud config set batch/location LOCATION.

BigQuery

  • Add support for storage_billing_model flag for datasets.
  • Allow users to log in with pluggable-auth based external account credentials.
  • Add support for configuring the access token lifetime for service account impersonation when using external account credentials.
  • Add session support for load jobs.

Cloud Asset Inventory

  • Added --saved-analysis-query option to gcloud asset analyze-iam-policy, which runs a saved analysis query when specified.
  • Added gcloud asset saved-queries commands, which creates, retrieves, updates and deletes saved queries in a specified project, folder or organization.

Cloud Memorystore

  • Added --maintenance-version flag to gcloud beta redis instances update to allow updating a maintenance version when updating an instance.

Cloud Storage

  • Added storage/key_store_path property for encryption/decryption keys.
  • Updated gsutil component to 5.14.

Compute Engine

  • Promoted --region for gcloud compute ssl-policies to GA.

Eventarc

  • Updated gcloud eventarc triggers list to return the locations of triggers.

Identity and Access Management

  • Fixed bug that occurs when switching external account credentials.

Kubernetes Engine

  • Adds new kubectl v1.25 for GKE rapid channel.
  • Removes old kubectl v1.19.
  • Updates default kubectl from 1.22.12 to 1.22.14.
  • Additional kubectl versions:
    • kubectl.1.20 (1.20.15)
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.14)
    • kubectl.1.23 (1.23.11)
    • kubectl.1.24 (1.24.5)
    • kubectl.1.25 (1.25.1)

Managed Active Directory

  • Added support for gcloud beta active-directory domains migration for enabling existing domain migration.

Policy Troubleshooter

  • Updated gcloud policy-troubleshoot iam beta and GA Command to use V2Alpha1 API.

Stackdriver Monitoring

  • Added --validate-only flag to gcloud monitoring dashboards create to allow validating dashboards without saving.

Terraform

  • Fixed issue where http proxy environment variables were not used in gcloud beta terraform vet.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

403.0.0 (2022-09-20)

Breaking Changes

  • (Assured Workloads) Removed AU_REGIONS_AND_US_SUPPORT as compliance regime options for gcloud assured workloads create command.
  • (Assured Workloads) Removed messages related to 'Versioning' as they should not be used externally.
  • (Assured Workloads) Removed v1beta1 messages from v1 api and vice-versa.
  • (Assured Workloads) Updated violation acknowledge api to POST Request.

Google Cloud CLI

  • Fixed issue where MTLS endpoints were not used when use_client_certificate was true.
  • Fixed issue where gcloud auth application-default set-quota-project would fail if serviceusage.services.use permission was revoked from the active project.
  • Added bundled Python 3 as a default component on x86_64 component-based Linux installs. The bundled Python 3 interpreter will be preferred over the system Python interpreter when invoking the gcloud command-line tool.
    • The bundled Python 3 interpreter should work on supported Linux systems, but a different interpreter can be specified by setting the CLOUDSDK_PYTHON environment variable. See gcloud topic startup and https://cloud.google.com/sdk/docs/install#linux for more information.

AI

  • Added gcloud beta api indexes remove-datapoints and gcloud beta api indexes upsert-datapoints to support Matching Engine steaming update.

AlloyDB

  • Added support to specify automated backup policy in gcloud beta alloydb clusters create.
  • Updated gcloud beta alloydb clusters create to support PITR (point in time recovery) configuration via new --disable-pitr and --pitr-log-retention-window flags.

Artifact Registry

  • Fixed a bug where the plus sign ("+") was not escaped properly, making it impossible to delete artifacts with a plus sign in their version.

Batch

  • Improved error message formats for gcloud batch jobs submit unparsable json config file, gcloud batch jobs describe job and gcloud batch tasks describe task that does not exist.

BigQuery

  • Expose object_metadata for private preview.
  • Improve error message for unparseable parameters.

Binauthz

  • Updated gcloud container binauthz attestations list to also return occurrences in cases where the artifact-url does not begin with https.

Cloud DNS

  • Added Location flag to Cloud DNS Managed Zones, Response Policies GA commands. This flag can be specified to target Cloud DNS Zonal Servers.

Cloud Dataproc

  • Fixed issue where gcloud beta dataproc sessions list would hang when large numbers of sessions are present.

Cloud Deploy

  • Added new --from-run-manifest to gcloud deploy releases create command. When used, a Skaffold file will be generated using the Cloud Run manifest.

Cloud Run

  • Added --encryption-key-shutdown-hours flag to gcloud beta run deploy and gcloud beta run services update to set the number of hours to wait before an automatic shutdown server after CMEK key revocation is detected.
  • Added --clear-encryption-key-shutdown-hours flag to gcloud beta run deploy and gcloud beta run services update to clear the CMEK key shutdown hours setting.

Compute Engine

  • Updated gcloud compute instance-templates create to throw error if --machine-type/--labels flags are used with --source-instance.
  • Promoted --compression-mode flag to gcloud compute backend-services <create | update> to GA.
  • Promoted --compression-mode flag to gcloud compute backend-buckets <create | update> to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

402.0.0 (2022-09-13)

Breaking Changes

  • (Google Cloud CLI) The gcloud command-line tool no longer overrides the scheme specified in the https_proxy environment variable. Previously, the scheme was silently ignored and the gcloud command-line tool would always attempt to connect to the proxy via HTTP, even if the proxy server URL specified HTTPS.
    • Note that the gcloud command-line tool does not currently support connecting to proxies via HTTPS (nor did it previously).
    • If attempting to connect to an HTTP proxy results in warnings or errors, ensure that the https_proxy environment variable looks like http://... as opposed to https://....
    • See https://cloud.google.com/sdk/docs/proxy-settings#proxy_configuration for more information.
  • (Batch) Deprecated positional argument TASK_GROUP of gcloud batch tasks list.
  • (Batch) Use --job as the required flag instead.

Anthos Multi-Cloud

  • Added --annotations flag to gcloud container aws node-pools create to set the annotations field when creating AWS node pools.
  • Added --annotations flag to gcloud container aws node-pools update to update the annotations of AWS node pools.
  • Added --clear-annotations flag to gcloud container aws node-pools update to clear the annotations of AWS node pools.

Batch

  • Updated --config flag to support job configs from Here Doc.

Cloud Dataproc

  • Fixed issue where gcloud dataproc batches list would hang when large numbers of batches are present.

Cloud Deploy

  • Added gcloud deploy targets redeploy command to redeploy a release to a given target.
  • Added gcloud deploy rollouts retry-job, gcloud deploy job-runs list, and gcloud deploy job-runs describe commands for Deployment Verification Public Preview.

Cloud Run

  • Fixed issue where job-level labels are not propagated to its execution.
  • Added last updated message to gcloud beta run jobs describe output.

Cloud Storage

  • Updated gsutil component to 5.13.
  • Promoted gcloud storage to GA.

Compute Engine

  • Added -iam-policyand-iam-policy-bindingstogcloud compute backend-services` for GA.
  • Added gcloud compute security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion in alpha and beta.

Config Connector

GKE Hub

  • Added new argument to the following commands:
    • gcloud container hub mesh update --management automatic.
    • gcloud container fleet mesh update --management automatic.

Identity and Access Management

  • Added support for executable-sourced external account credentials.
  • Added support for configuring the access token lifetime for service account impersonation when using external account credentials.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

401.0.0 (2022-09-07)

Google Cloud CLI

  • Added warning message to indicate support for Python 2 will soon be deprecated.

AlloyDB

  • Added --view flag to gcloud alpha alloydb instances describe to get the view of AlloyDB instance. --view=BASIC will be the same response as describe instance without this flag, and --view=FULL for read pool instance will list the details of each node in the pool.

Anthos Multi-Cloud

  • Added --description flag to gcloud container aws clusters update to update the description of AWS clusters.
  • Added --clear-description flag to gcloud container aws clusters update to clear the description of AWS clusters.
  • Added --annotations flag to gcloud container aws clusters update to update the annotations of AWS clusters.
  • Added --clear-annotations flag to gcloud container aws clusters update to clear the annotations of AWS clusters.
  • Added --description flag to gcloud container azure clusters create to set the description field when creating Azure clusters.
  • Added --annotations flag to gcloud container azure clusters create to set the annotations field when creating Azure clusters.
  • Added --description flag to gcloud container azure clusters update to update the description of Azure clusters.
  • Added --clear-description flag to gcloud container azure clusters update to clear the description of Azure clusters.
  • Added --annotations flag to gcloud container azure clusters update to update the annotations of Azure clusters.
  • Added --clear-annotations flag to gcloud container azure clusters update to clear the annotations of Azure clusters.

Cloud Run

  • Added execution log URI to gcloud beta run jobs executions describe output.

Compute Engine

  • Promoted --snapshot-type flag of gcloud compute snapshots create to GA.
  • Added --json-custom-content-types for gcloud compute security-policies update, and promoted it to beta and GA.
  • Promoted --guest-os-features flag of gcloud compute images import to GA.
  • Promoted gcloud compute firewall-rules migrate to beta.
  • Added --share-setting and --share-with flags to gcloud compute sole-tenancy node-groups create|update for GA.
  • Added --share-settings flag to gcloud compute sole-tenancy node-groups list for GA.
  • Added --node-project flag to gcloud compute instances create for GA.

Network Management

  • Added cloudFunction argument for source in gcloud network-management connectivity-tests. This allows the user to run tests using Cloud Function endpoint types as source.

Stackdriver Logging

  • Promoted the following commands to beta and GA:

    • gcloud logging copy
    • gcloud logging settings get
    • gcloud logging settings update
    • gcloud logging operations cancel
    • gcloud logging operations describe
    • gcloud logging operations list

  • Promoted --bucket-name flag of gcloud logging metrics to beta and GA.

  • Promoted --cmke-kms-key-name flag of gcloud logging buckets to beta and GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

400.0.0 (2022-08-30)

Breaking Changes

  • (Anthos Multi-Cloud) Removed aws/location property of gcloud container aws. Use container_aws/location to set the default Google Cloud location for gcloud container aws.
  • (Anthos Multi-Cloud) Removed azure/location property of gcloud container azure. Use container_azure/location to set the default Google Cloud location for gcloud container azure.

Anthos Multi-Cloud

  • Added --description flag to gcloud container aws clusters create to set the description field when creating AWS clusters.
  • Added --annotations flag to gcloud container aws clusters create to set the annotations field when creating AWS clusters.

App Engine

  • Use java17 as the default runtime for generated configuration. This is a behavior change with the command gcloud app deploy when there is no app.yaml configuration for Java projects (Maven, or Gradle, or simple jar). Instead of using a java11 runtime target, the application will be deployed now on a java17 runtime with a F2 instance class. If you want to stay on a java11 runtime, just create a simple app.yaml file with runtime: java11 in it.

Artifact Registry

  • Fixed issue where gcloud artifacts repositories create requires excessive permission when a kms key is supplied.

BigQuery

  • Add support for specifying vertex_ai_model_id when in the BigQuery ML update model AI.
  • Add support for preserving embedded Ascii Control characters in CSV External tables.
  • Add support for serving_default signature when exporting BigQuery trained Tensorflow models.
  • Add support for reference file schema for AVRO, PARQUET, and ORC formats.
  • Add support for BigSpark routines.
  • Fix bug when api flag is used within a restricted network.
  • Add support metadata_cache_mode and max_staleness for Query Acceleration on BigLake tables.
  • Add support for BigSpark connections.

Cloud Asset Inventory

  • Added gcloud beta asset query.
  • Added --read-time, --start-time, --end-time, --bigquery-dataset, --bigquery-table, and --write-disposition flags to support point-in-time/range queries and export to BigQuery.

Cloud Run

  • Changed the link in gcloud beta run jobs execute output to the UI of the resulted execution instead of its logging UI.
  • Added elapsed time to gcloud beta run jobs executions describe output. This is between execution creation timestamp and execution completion timestamp.

Cloud Spanner

  • Added --database-role flag to gcloud spanner databases to support role-based access control in Cloud Spanner.
  • Added gcloud beta spanner databases roles list to list all roles in Cloud Spanner database.

Config Connector

Kubernetes Engine

  • Added --logging-variant flag to gcloud container clusters create, gcloud container clusters update, gcloud container node-pools create and gcloud container node-pools update that allow users to set the logging variant used in the cluster or in the node pools. Selecting logging variant is available in clusters with version 1.24.2-gke.300+. --logging_variant is used to choose the desired logging agent that is deployed on GKE nodes. Valid options are MAX_THROUGHPUT and DEFAULT. For more details about configuring the logging agent to achieve desired throughput, see http://cloud/stackdriver/docs/solutions/gke/managing-logs#throughput.

Secret Manager

  • Added --update-annotations flag to gcloud secrets update and gcloud secrets beta update to enable the addition of new annotations to secret versions.
  • Added --remove-annotations flag to gcloud secrets update and gcloud secrets beta update to enable the removal of annotations to secret versions.
  • Added --clear-annotations flag to gcloud secrets update and gcloud secrets beta update to enable the clearing of all annotations from a secret.
  • Added --set-annotations flag to gcloud secrets create and gcloud secrets beta create to enable the setting of annotations on new secrets.
  • Added --out-file flag to gcloud secrets versions access and gcloud beta secrets versions access to directly get the output in file.

Terraform

  • Added support for the following resources in CAI-based policies:
    • google_cloudfunctions2_function_iam_binding
    • google_cloudfunctions2_function_iam_member
    • google_cloudfunctions2_function_iam_policy
    • google_gke_hub_membership_iam_binding
    • google_gke_hub_membership_iam_member
    • google_gke_hub_membership_iam_policy
  • TF -> CAI resource conversion compiled against google provider version 4.33.0.
  • Fixed asset names for the following resources:
    • google_compute_backend_service_iam
    • google_compute_instance_iam
    • google_compute_region_backend_service_iam
    • google_privateca_certificate_template_iam
  • Added support for organizations/unknown in CAI-based policy match parameters.
  • Enabled support for non-Google Terraform resources in TF-based policies.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

399.0.0 (2022-08-23)

AlloyDB

  • Added --cluster flag to gcloud beta alloydb operations list to enable listing of operations pertaining to a given cluster.
  • Updated gcloud beta alloydb clusters restore to support PITR (point in time recovery) via new --source-cluster and --point-in-time flags.

App Engine

Cloud Asset Inventory

  • Added gcloud asset get-effective-iam-policy command, which retrieves batch effective IAM policies for a specified list of resources within specified accessible scope.

Cloud Dataflow

  • Added GO to gcloud flex-template build command SDK Language options, allowing users to submit Go Flex Template jobs.

Cloud Functions

  • Move Python 3.10 for Cloud Functions to GA.

Cloud Org Policy

  • Added gcloud org-policies {custom constraint} commands that allow users to create, update, list, describe, and delete org policy custom constraints.
  • gcloud org-policies set-custom-constraint
  • gcloud org-policies describe-custom-constraint
  • gcloud org-policies delete-custom-constraint
  • gcloud org-policies list-custom-constraints.

Cloud SQL

  • Set the maximum allowed value for --storage-auto-increase-limit in gcloud beta sql instances create to the max value of int. This removes the hardcoded limit of 10230.

Cloud Spanner

  • Promoted gcloud spanner samples to beta and GA. Commands in this group support creating sample databases and running open source sample applications.
  • Added --instance-type, --expire-behavior flags to spanner instances create and spanner instances update to add ability to create free instances in GA.
  • Added instance_type column for spanner instances list and free_instance_availability column for spanner instance-configs list.

Compute Engine

  • Promoted --architecture flag of gcloud compute disks create to GA.
  • Promoted --update-architecture flags of gcloud compute disks update to GA.
  • Promoted --clear-architecture flags of gcloud compute disks update to GA.
  • Promoted --architecture flag of gcloud compute images create and gcloud compute disks update to GA.

Network Services

  • Promoted gcloud network-services tls-routes to GA.

Notebooks

  • Added notebooks runtimes command group which provides access to AI Platform Notebooks' runtimes.

Transfer

  • Added multipart copy feature to agent setup flags.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

398.0.0 (2022-08-16)

AI

  • Promoted --autoscaling-metric-specs flag of gcloud ai endpoints deploy-model to GA.
  • Added --encryption-kms-key-name flag to gcloud ai endpoints create and gcloud beta ai endpoints create.

Artifact Registry

  • Updated gcloud artifacts docker images describe and gcloud artifacts docker images list to return occurrences of any Grafeas kind.
  • Added gcloud artifacts repositories set-cleanup-policy to set a cleanup policy on a repository.
  • Added gcloud artifacts repositories list-cleanup-policy to list cleanup policies on a repository.
  • Added gcloud artifacts repositories delete-cleanup-policy to delete cleanup policies on a repository.

Cloud DNS

  • Added support for the ALIAS record set type to beta. ALIAS record sets can be created/modified using --type flag in gcloud beta dns record-sets command group.

Cloud Dataproc

  • Fixed issue where gcloud dataproc clusters enable-personal-auth-session-session did not successfully inject credentials.

Cloud Deploy

  • Added support for absolute paths for "--skaffold-file flag of gcloud deploy releases create command".

Cloud Memorystore

  • Promoted --customer-managed-key flags of gcloud redis instances create to GA.

Cloud Run

  • Promoted --cpu-boost flag to beta.

Cloud SQL

  • Added --deletion-protection flag to gcloud sql instances create and gcloud sql instances patch in alpha, beta and GA to provide Cloud SQL instances with protection against accidental deletion.

Cloud Spanner

  • Updated default timeout for gcloud spanner databases execute-sql to 10 minutes.

Cloud Storage

  • Updated gsutil component to 5.12.

Compute Engine

  • Deprecated --load-balancing-scheme, --network, --subnet, and --subnet-region arguments of gcloud compute forwarding-rules set-target.
  • Promoted --resource-policies flag for glcloud compute reservations createto beta.
  • Promoted --region and --global flags for gcloud compute url-maps invalidate-cdn-cache and gcloud compute url-maps list-cdn-cache-invalidations to GA.
  • Added region information to gcloud compute health-checks list output.
  • Deprecated --no-serve-while-stale argument of gcloud compute [backend-services|backend-buckets] [create|update].
  • Promoted --architecture flag of gcloud compute instances create and gcloud compute instanceTemplates create to GA.

Eventarc

  • Updated WARNING text for trigger creation from 10 minutes to 2 minutes.

Network Services

  • Promoted gcloud network-services gateways to GA.
    • Promoted gcloud network-services meshes to GA.
    • Promoted gcloud network-services tcp-routes to GA.
    • Promoted gcloud network-services grpc-routes to GA.
    • Promoted gcloud network-services http-routes to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

397.0.0 (2022-08-09)

Breaking Changes

  • (Cloud Datastore) Deprecated gcloud datastore database create. Use gcloud alpha firestore database update --type=datastore-mode instead.
  • (Cloud Firestore) The gcloud firestore database create will be required to administer your database. Please enable the API and ensure you have the required permissions. See https://cloud.google.com/firestore/docs/app-engine-requirement.
  • (Cloud Firestore) gcloud firestore database create will no longer support App Engine regions (us-central, europe-west). See https://cloud.google.com/firestore/docs/locations for available regions.

AI

  • Added --request-response-logging-table and --request-response-logging-rate flags to gcloud ai endpoints create|update to allow config prediction endpoint request-response logging.

Artifact Registry

  • Added gcloud artifacts versions describe command.
  • Added gcloud artifacts settings to describe/modify project settings.

Batch

  • Modified gcloud batch jobs list to use --location as an optional flag.

Cloud DNS

  • Update record-sets create and update methods for health checked routing policies.

Cloud Datastore Emulator

  • Release Cloud Datastore emulator v2.2.2
    • Fixed bug which caused failures when attempting to Export.

Cloud Identity-Aware Proxy

  • Promoted host based flags to GA for surfacesgcloud compute ssh,gcloud compute scp and gcloud compute start-iap-tunnel.

Cloud Run

  • Added Startup Probe and Liveness Probe fields to the output of gcloud run services describe [SERVICE].

Compute Engine

  • Added 'network-firewall-policyand 'network-regional-firewall-policy to TYPE column of 'compute instances network-interfaces get-effective-firewalls` output.

Config Connector

Terraform

  • Added support for the following resources in CAI-based policies:
    • google_artifact_registry_repository_iam_binding
    • google_artifact_registry_repository_iam_member
    • google_artifact_registry_repository_iam_policy
    • google_bigquery_connection_iam_binding
    • google_bigquery_connection_iam_member
    • google_bigquery_connection_iam_policy
    • google_cloud_tasks_queue_iam_binding
    • google_cloud_tasks_queue_iam_member
    • google_cloud_tasks_queue_iam_policy
    • google_cloudiot_registry_iam_binding
    • google_cloudiot_registry_iam_member
    • google_cloudiot_registry_iam_policy
    • google_compute_backend_bucket_iam_binding
    • google_compute_backend_bucket_iam_member
    • google_compute_backend_bucket_iam_policy
    • google_compute_snapshot_iam_binding
    • google_compute_snapshot_iam_member
    • google_compute_snapshot_iam_policy
    • google_dataproc_autoscaling_policy_iam_binding
    • google_dataproc_autoscaling_policy_iam_member
    • google_dataproc_autoscaling_policy_iam_policy
    • google_dataproc_metastore_service_iam_binding
    • google_dataproc_metastore_service_iam_member
    • google_dataproc_metastore_service_iam_policy
  • TF -> CAI resource conversion compiled against google provider version 4.30.0.
  • Resources without a known project, folder, or organization will have their ancestry set to organizations/unknown instead of throwing a 403 error that halts validation.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

396.0.0 (2022-08-02)

AI

  • Added --labels flag to gcloud ai models upload to support setting labels. Use --labels flag to set metadata to organize your models and model versions. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. See https://goo.gl/xmQnxf for more information and examples of labels.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap tcp dest-groups to GA.

Cloud Logging

  • Promoted --index flag of gcloud logging buckets create to GA.
  • Promoted --clear-indexes flag of gcloud logging buckets update to GA.
  • Promoted --remove-indexes flag of gcloud logging buckets update to GA.
  • Promoted --add-index flag of gcloud logging buckets update to GA.
  • Promoted --update-index flag of gcloud logging buckets update to GA.

Compute Engine

  • Promoted --maintenance-interval flag of gcloud compute commitments create to beta.

Compute OS Config

  • Promoted gcloud compute os-config troubleshoot to GA.
    • Troubleshoot common issues with VM Manager.

Config Connector

Database Migration

  • Fixed issue where creation of a migration job in a project inside a VPC-SC perimeter constantly failed.
  • Fixed issue where creation of a connection profile in a project inside a VPC-SC perimeter constantly failed.

Identity Groups

  • Fixed issue where gcloud identity groups create will fail when specifying --group-type=security.

Identity and Access Management

  • Added --service-account-token-lifetime-seconds flag to gcloud iam <workforce-pools|workload-identity-pools> create-cred-config command to allow configuring the access token lifespan for service account impersonation.

Recommender

  • Added support for gcloud recommender recommender-config describe.
  • Added support for gcloud recommender recommender-config update.
  • Added support for gcloud recommender insight-type-config describe.
  • Added support for gcloud recommender insight-type-config update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

395.0.0 (2022-07-26)

AI

  • Modified gcloud ai models upload to support model version aliases. Use --version-aliases flag to set version aliases so that a model version can be referenced via alias (i.e. projects/{project}/locations/{location}/models/{model_id}@{version_alias} instead of auto-generated version id (i.e. projects/{project}/locations/{location}/models/{model_id}@{version_id}). The format is [a-z][a-zA-Z0-9-]{0,126}[a-z0-9] to distinguish from version_id. The aliases set in the flag will replace the aliases set in the model.

App Engine

Artifact Registry

  • Added gcloud artifacts packages describe command.

Cloud Deploy

  • Added new --from-k8s-manifest to releases create command. When used, a Skaffold file will be generated.

Cloud Domains

  • Implemented the following commands for gcloud domains registrations in alpha and beta.
    • import
    • list-importable-domains

Cloud Functions

  • Updated gcloud functions list to return 2nd gen functions in addition to 1st gen functions.
  • Fixed crash in gcloud beta functions deploy --gen2 failures causing the error message "This stage does not belong to this progress tracker".
  • Promoted --gen2 flag of gcloud functions add-iam-policy-binding to GA.
  • Promoted --gen2 flag of gcloud functions call to GA.
  • Promoted --gen2 flag of gcloud functions delete to GA.
  • Promoted --gen2 flag of gcloud functions deploy to GA.
  • Promoted --gen2 flag of gcloud functions describe to GA.
  • Promoted --gen2 flag of gcloud functions get-iam-policy to GA.
  • Promoted --gen2 flag of gcloud functions remove-iam-policy-binding to GA.
  • Promoted --gen2 flag of gcloud functions set-iam-policy to GA.
  • Promoted --gen2 flag of gcloud functions event-types list to GA.
  • Promoted --gen2 flag of gcloud functions logs read to GA.
  • Promoted --gen2 flag of gcloud functions regions list to GA.
  • Promoted gcloud functions add-invoker-policy-binding to GA.
  • Promoted gcloud functions remove-invoker-policy-binding to GA.

Cloud Healthcare

  • Added --schema-type value analytics_v2 to gcloud healthcare fhir-stores export bq.

Cloud Identity-Aware Proxy

  • Renamed flag --group-name to --dest-group forgcloud iap tcp dest-groups IAM commands.

Cloud Pub/Sub

  • Fixed issue where gcloud pubsub subscriptions create and gcloud pubsub subscriptions update will crash when specifying --min-retry-delay=0 and/or --max-retry-delay=0.
  • Fixed issue where gcloud pubsub subscriptions create will crash when specifying --retention_duration=0.

Cloud Run

  • Added --description flag in gcloud run deploy, and description field in gcloud run services describe [SERVICE].
    • Description is an optional, human-readable string of up to 512 characters.
    • Using the flag is functionally equivalent to adding service annotation "run.googleapis.com/description".

Compute Engine

  • Added --update-user-licenses and --clear-user-licenses flags of gcloud compute images update to alpha and beta.
  • Made global scope the default for gcloud compute security-policies.

Config Controller

  • Added --man-blocks flag to gcloud anthos config controller create to allow specifying multiple master authorized network CIDR blocks for a CC instance.
  • Deprecated --man-block flag of gcloud anthos config controller create. Use --man-blocks to set master authorized network CIDR block.
  • Modified gcloud anthos config controller list to print out only the instance name instead of the fully specified name.
  • Added --full-name flag to gcloud anthos config controller list to allow users printing out the fully specified name in the NAME column when needed.

GKE Hub

  • Promote gcloud container hub memberships generate-gateway-rbac to GA.

Kubernetes Engine

  • Add cgroupMode node system config option to allow switching nodes to cgroupv1 or cgroupv2.
  • Updates default kubectl from 1.22.9 to 1.22.12
  • Additional kubectl versions:
    • kubectl.1.19 (1.19.16)
    • kubectl.1.20 (1.20.15)
    • kubectl.1.21 (1.21.14)
    • kubectl.1.22 (1.22.12)
    • kubectl.1.23 (1.23.9)
    • kubectl.1.24 (1.24.3)

Pubsub Emulator

  • Added support for creating BigQuery subscriptions.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

394.0.0 (2022-07-19)

AI

  • Modified gcloud ai models describe to support model versioning.
  • Added europe-west9 option to --region flag of gcloud ai custom-jobs and gcloud ai hp-tuning-jobs.
    • Provide the model version ID or version alias to retrieve a specific version of the model.
    • If no model version ID or alias is specified, the "default" model version will be used. The "default" version alias is created for the first version of the model, and can be moved to other versions later on. There will be exactly one default version.
  • Added gcloud ai models delete-version which deletes an existing Vertex AI model version.

Anthos Multi-Cloud

  • Added --ssh-public-key flag to gcloud container azure node-pools update to update the SSH public key for the Azure node pool nodes.

Artifact Registry

  • Fixed a bug where the plus sign ("+") was not escaped properly, making it impossible to delete artifacts with a plus sign in their name.

Bare Metal Solution

  • Started using v2.projects.locations.operations instead of v1.operations for the following commands:
    • gcloud bms instances start
    • gcloud bms instances reset
    • gcloud bms instances disable-serial-console
    • gcloud bms instances enable-serial-console
    • gcloud bms instances update
    • gcloud bms networks update
    • gcloud bms nfs-shares update
    • gcloud bms volumes update
    • gcloud bms volumes restore
    • gcloud bms operations describe
    • gcloud bms operations wait
  • Promoted --os-image flag of gcloud bms instances update to GA.
  • Promoted --[no-]enable-hyperthreading flag of gcloud bms instances update to GA.
  • Promoted --add-ip-range-reservation flag of gcloud bms networks update to GA.
  • Promoted --clear-ip-range-reservations flag of gcloud bms networks update to GA.
  • Promoted --remove-ip-range-reservation flag of gcloud bms networks update to GA.
  • Promoted gcloud bms networks list-ip-reservations to GA.

Batch

  • Promoted gcloud batch to alpha and beta which enables the CLI to use Batch APIs.

Cloud Deploy

  • Changed the default bucket name upload path on release create to use the pipeline UUID.
  • Added mutex flags --enable-initial-rollout and --disable-initial-rollout.

Cloud Key Management Service

  • Modified gcloud kms import-jobs create to accept new SHA-2 import methods rsa-oaep-3072-sha256, rsa-oaep-3072-sha256-aes-256, rsa-oaep-4096-sha256, and rsa-oaep-4096-sha256-aes-256 in beta.

Cloud SQL

  • Added support for incremental addition of user password policies.

Cloud Storage

  • Updated gsutil component to 5.11.

Compute Engine

  • Added --layer7-ddos-defense-auto-deploy-load-threshold, --layer7-ddos-defense-auto-deploy-confidence-threshold, --layer7-ddos-defense-auto-deploy-impacted-baseline-threshold, and --layer7-ddos-defense-auto-deploy-expiration-sec to gcloud compute security-policies update to gcloud beta compute security-policies update.
  • Promoted flags --enable-strong-affinity of gcloud compute backend-services create and gcloud compute backend-services update to GA.

Google Cloud CLI

  • Replaced the default login flow when a browser is not detected from --no-browser to --no-launch-browser.

Identity and Access Management

  • Removed etag flag from gcloud beta iam policies update command. The command will always use the etag in the policy file.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

393.0.0 (2022-07-12)

Breaking Changes

  • (AlloyDB) Updated gcloud beta alloydb instances create and gcloud beta alloydb instances update to remove the unused --zone flag.
  • (Cloud Datastore Emulator) Removed support for running the Datastore emulator (gcloud beta emulators datastore start) in environment with Java versions prior to 11. Users can upgrade to Java 11 or above to continue using the latest Datastore emulator. Alternatively, users can use gcloud command-line tool with version before 392.0.0 to continue using the previous Datastore emulator with Java 8 support.
  • (Cloud Firestore Emulator) Removed support for running the Firestore emulator (gcloud beta emulators firestore start) in environment with Java versions prior to 11. Users can upgrade to Java 11 or above to continue using the latest Firestore emulator. Alternatively, users can use gcloud command-line tool with version before 392.0.0 to continue using the previous Firestore emulator with Java 8 support.

AI

  • Added gcloud ai models delete-version which delete an existing Vertex AI model version.
  • Modified gcloud ai models upload to support model versioning. Use --parent-model flag to specify the parent model of the model version to be uploaded. When this flag is specified, a new version of the parent model will be uploaded. Use --model-id flag to specify the model ID for the uploaded model.
  • Fixed an issue for gcloud ai custom-jobs create that the value of the --args and --command flags are not passed when the --worker-pool-spec flag is left unspecified.

AlloyDB

  • Updated gcloud beta alloydb instances create and gcloud beta alloydb instances update to allow --cpu-count of 2.

Artifact Registry

  • Fixed issue where gcloud artifacts packages delete requires the package id unescaped.

Cloud Dataproc

  • Added bootDiskKmsKey key in --pools flag to gcloud dataproc clusters gke create to allow creating Dataproc on GKE cluster with CMEK protected node pool.

Cloud Datastream

  • Added --bigquery-destination-config flag to gcloud datastream streams <create/update>.
  • Added bigquery type to --type flag of datastream connection-profiles <create/update>.

Cloud Deploy

  • Added optional flags --labels and --annotations for users to add labels or annotations to apply to gcloud deploy targets rollback command.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.14.4
    • Fix: Condition Normalization now correctly handles cartesian products and flattening in certain edge cases.

Cloud Functions

  • Promoted --docker-registry flag of gcloud functions deploy to GA.
  • Move PHP 8.1 for Cloud Functions to GA.
  • Added gcloud functions runtimes list which displays the supported runtimes for both 1st & 2nd generation functions.

Cloud Key Management Service

  • Promoted --wrapped-key-file flag of gcloud kms keys versions import to GA.
  • Deprecated --rsa-aes-wrapped-key-file flag of gcloud kms keys versions import. Use --wrapped-key-file instead.

Cloud Memorystore

  • Promoted --persistence-mode, --rdb-snapshot-period and --rdb-snapshot-start-time flags of gcloud redis instances create to GA.
  • Promoted --persistence-mode, --rdb-snapshot-period and --rdb-snapshot-start-time flags of gcloud redis instances update to GA.

Cloud SQL

  • Added flag --password-policy-enable-password-verification to gcloud sql users create and gcloud sql users set-password-policy for MySQL password validation.
  • Added flags --discard-dual-password and --retain-password to gcloud sql users set-password to allow control over MySQL's dual password.

Cloud Speech API

  • Added latest_short and latest_long options for gcloud ml speech <recognize | recognize-long-running> --model flag.

Cloud TPU

  • Updated tpus tpu-vm ssh to return an error when users attempt to ssh into a TPU VM during a maintenance event.

Compute Engine

  • Promoted --target-distribution-shape flag of gcloud compute instances bulk create to GA.
  • Promoted --key-revocation-action-type flag to GA for gcloud compute instance-templates create.
  • Promoted explicit scope requirement for gcloud compute security-policies to beta.
  • Promoted --network-ddos-protection flag of gcloud compute security-policies create to beta.
  • Promoted gcloud compute network-edge-security-services to beta.
  • Promoted --key-reservation-action-type flag to GA for gcloud compute instances create.
  • Promoted keyRevocationActionType property of gcloud compute instances update-from-file to GA.

Compute Firewall Policies

  • Promoted --src-region-codes and --dest-region-codes flags to beta in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.
  • Promoted --src-threat-intelligence and --dest-threat-intelligence flags to beta in gcloud compute firewall-policies rules create , gcloud compute firewall-policies rules update , gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update commands.

Config Connector

Config Controller

  • Added --man-blocks flag to gcloud anthos config controller create to allow specifying multiple master authorized network CIDR blocks for a CC instance.
  • Deprecated --man-block flag of gcloud anthos config controller create. Use --man-blocks to set master authorized network CIDR block.

Kubernetes Engine

  • Added --binauthz-evaluation-mode flag to gcloud container clusters create command.
  • Added --binauthz-evaluation-mode flag to gcloud container clusters create-auto command.
  • Added --binauthz-evaluation-mode flag to gcloud container clusters update command.
  • Added --total-max-nodes and --total-min-nodes to gcloud container cluster/node-pools create/update that allow users to set total size limits for autoscaled nodepools. The limits are available in clusters with version 1.24+.
  • Added --location-policy to gcloud container cluster/node-pools create/update that allow users to set location policy for autoscaled nodepools. The location policy is available in clusters with version 1.24.1-gke.800+.

Transcoder

  • added support for --labels flag when creating a new job/job template.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

392.0.0 (2022-06-28)

Anthos Multi-Cloud

  • Added --iam-instance-profile flag to gcloud container aws clusters update and gcloud container aws node-pools update to update the name or ARN of the IAM instance profile associated with control plane or node pool.
  • Added --ssh-public-key flag to gcloud container azure clusters update to update the SSH public key for the Azure control plane.
  • Added --logging flag to gcloud container aws clusters update and gcloud container azure clusters update to update the logging config.

App Engine

Certificate Authority Service

  • Added --unconstrained-chain-length flag to gcloud privateca subordinates create to allow creation of a subordinate CA with unconstrained chain length.
  • Added --unconstrained-chain-length flag to gcloud privateca roots create to allow creation of a root CA with unconstrained chain length.
  • Added --unconstrained-chain-length flag to gcloud privateca certificates create to allow creation of a CA with unconstrained chain length.

Certificate Manager

  • Promoted gcloud certificate-manager to GA.
  • Allowed using project number in gcloud certificate-manager commands.

Cloud Bigtable

  • Promoted gcloud bigtable instances tables undelete to beta and GA.
  • Added --autoscaling-storage-target flags to gcloud bigtable clusters create for alpha, beta and GA to let users create autoscaling clusters with configurable storage target.
  • Added key autoscaling-storage-target to --cluster-config flag of gcloud bigtable instances create for alpha, beta and GA to let users create autoscaling clusters with configurable storage target.
  • Added --autoscaling-storage-target flag to gcloud bigtable clusters update for alpha, beta and GA to let users configure autoscaling storage target when updating clusters.

Cloud Deploy

  • Added new command gcloud deploy releases abandon to prevent new rollouts on a Cloud Deploy release.
  • Added suspended field to the Delivery Pipeline resource. If this field is set, activity on a pipeline is prevented. The field can be set or unset in the Delivery Pipeline definition, and then applied using gcloud deploy apply.

Cloud TPU

  • Fixed an issue with connection to TPU VMs when the 'compute.disableGuestAttributesAccess' Organization Policy Constraint is enforced.

Compute Engine

  • Added --list-managed-instances-results flag to gcloud beta compute instance-groups managed create and gcloud beta compute instance-groups managed update.
  • Promoted --certificate-map of 'compute target-https-proxies insert|update` to GA.
  • Promoted --certificate-map of 'compute target-ssl-proxies insert|update` to GA.

Dataproc Metastore

  • Promoted --network-config-from-file and --consumer-subnetworks flag to gcloud beta metastore services create to specify the subnetworks from which the Dataproc Metastore service can be accessed to GA.

Eventarc

  • Added gcloud eventarc google-channels command group.
  • Added gcloud eventarc channels update command to configure crypto keys on a channel.
  • Added --crypto-key flag to gcloud eventarc channels create to configure crypto keys on a new channel.

Google Cloud CLI

  • Updated login flow initiated by gcloud auth login --no-launch-browser and gcloud auth application-default login --no-launch-browser to address a security issue.

Kubernetes Engine

  • Promoted --enable-cost-allocation flag of gcloud container clusters create to beta.
  • Promoted --enable-cost-allocation flag of gcloud container clusters update to beta.
  • Renamed --enable-cost-management flag of gcloud container clusters create to --enable-cost-allocation.
  • Renamed --enable-cost-management flag of gcloud container clusters update to --enable-cost-allocation.
  • Added --stack-type and --ipv6-access-type arguments to gcloud container clusters create command to support dual stack GKE clusters.

Terraform

  • Added support for the following resources in CAI-based policies:
    • google_access_context_manager_access_policy
  • TF -> CAI resource conversion compiled against google provider version 4.24.0.
  • Fixed the ancestry used for resources that do not exist within a project. Users may need folders.get access to folders that have resources included in the plan.
  • Simplified converter error messages and added resource address.
  • Added support for ancestries/excludedAncestries match parameters for CAI-based constraints.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

391.0.0 (2022-06-22)

Breaking Changes

  • (Anthos Multi-Cloud) Removed --instance-type flag of gcloud container aws node-pools update to disable updating the EC2 instance type of node pool nodes.

Assured Workloads

  • Added ITAR as compliance regime options for gcloud assured workloads create command.

Cloud Dataflow

  • Added a --force flag to gcloud dataflow jobs cancel which forcibly cancels (leaking VMs) Dataflow jobs that are stuck on normal cancellation.

Cloud Filestore

  • Enable Filestore High-Scale tier for GA.

Cloud Identity-Aware Proxy

  • Promoted flags for host based connetion for command gcloud compute start-iap-tunnel to beta.
  • Promoted gcloud iap oauth-brands surface to GA.
  • Promoted gcloud iap oauth-clients surface to GA.

Cloud SQL

  • Promoted SQL Server Audit to GA.

Compute Engine

  • Updated gcloud compute networks subnets list-usable list format to include PSC and IPv6 fields.

Dataproc Metastore

  • Added support for managing Dataproc Metastore Federation. The following commands have been added to the alpha, beta and GA release tracks:

    • metastore federations create
    • metastore federations delete
    • metastore federations describe
    • metastore federations get
    • metastore federations list
    • metastore federations update

  • Added support for managing IAM policy for Dataproc Metastore Federation. The following commands have been added to the GA release track:

    • metastore federations get-iam-policy
    • metastore federations set-iam-policy
    • metastore federations add-iam-policy-binding
    • metastore federations remove-iam-policy-binding

Identity and Access Management

  • Added --executable-command flag to gcloud iam workload-identity-pools create-cred-config command to allow executable sourced credentials.

Managed Active Directory

  • Adding support for gcloud beta active-directory domains extend-schema for initiating schema extension on domain.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

390.0.0 (2022-06-14)

Access Approval

  • Added gcloud access-approval requests invalidate to invalidate an existing approval.

BigQuery

  • Add support for partitioning_type with --time_partitioning_type flag in Scheduled Queries when a schedule is specified by --schedule in bq query.
  • Added support for showing table clone info in bq show.
  • Added support for both Workload and Workforce identity federation.
  • Added --max_time_travel_hours flag to bq mk.
  • Added --autodetect_schema flag to bq update.
  • Added flag --preserve_ascii_control_characters to bq load to allow ASCII Control chars.
  • Updated the comment on --restore flag in bq cp to reflect that it's deprecated.
  • Added support for dataset tags.
  • Minor bug fixes and dependency updates.
  • Add --federated_app_client_id and --federated_azure flags to mk command.
  • Add --federated_app_client_id flag to update command.
  • Add support for LOAD DATA query.

Cloud Dataproc

  • Added --metric-sources, --metric-overrides and --metric-overrides-file flags to gcloud beta dataproc clusters create to allow clusters to be created with a metric sources specified, override specific set of metrics using a list or a file as an input.
  • Added --metric-sources, --metric-overrides and --metric-overrides-file flag to gcloud beta dataproc workflow-templates set-managed-cluster to allow managed clusters created with a metric sources specified, override specific set of metrics using a list or a file as an input.
  • Modified gcloud dataproc clusters export to remove un-importable fields on Dataproc on GKE clusters.

Cloud Firestore

  • Added gcloud beta firestore fields ttls command group.

Cloud Pub/Sub

  • Fixed issue where gcloud --format=json beta pubsub subscriptions pull --auto-ack and gcloud --format=json alpha pubsub subscriptions pull --auto-ack output was backwards incompatible. This issue can be tracked at https://issuetracker.google.com/issues/222551623.

Cloud Run

  • Added --description flag in gcloud beta run deploy, and description field in gcloud beta run services describe [SERVICE].
    • Description is an optional, human-readable string of up to 512 characters.
    • Using the flag is functionally equivalent to adding service annotation "run.googleapis.com/description".

Compute Engine

  • Promoted network-firewall-policies command group to GA.
  • Promoted gcloud compute instances create --visible_core_count to beta.

Config Connector

Kubernetes Engine

  • Added --enable-confidential-nodes to gcloud container cluster create to enable cluster creation with nodes on Confidential VM. Added --enable-confidential-nodes flag to gcloud container node-pools create/update to allow creating node-pools with confidential nodes, and updating existing node pools to confidential nodes.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

389.0.0 (2022-06-07)

Anthos Multi-Cloud

  • Added --instance-type flag to gcloud container aws node-pools update to update the EC2 instance type of node pool nodes.

Artifact Registry

  • Added new command gcloud artifacts files list to list files in a specific repository.

Cloud Composer

  • Added --enable-master-authorized-networks and --master-authorized-networks flags to gcloud composer environments create command.
  • Added --enable-master-authorized-networks and --disable-master-authorized-networks and --master-authorized-networks to gcloud composer environments update command.
  • Added --enable-ip-masq-agent flag to gcloud composer environments create command to enable IP address masquerading in the GKE cluster.

Cloud DNS

  • Add setIamPolicy and getIamPolicy commands in beta.

Cloud Filestore

  • Add support for Filestore's multi-share instances to gcloud beta filestore instances list. CAPACITY_GB will show the instance's capacity for multi-share instances instead of an empty string. FILE_SHARE_NAME will show "N/A" for multi-share instances instead of an empty string.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap tcp dest-groups command group to beta.

Cloud Run

  • Promoted --session-affinity of gcloud run to beta.

Cloud SQL

  • Add command gcloud sql generate-login-token to generate down-scoped OAuth2 access tokens for IAM database authentication.

Compute Engine

  • Modified --ssl-certificates flag to be optional in gcloud compute target-https-proxies create.
  • Updated the documentation for --mtu flag of compute networks create|update.
  • Updated the validation for --enable-logging and --logging-sample-rate flags of beta compute backend-services create|update.
  • Updated the documentation for --logging-sample-rate flag of compute backend-services create|update.

Config Connector

Database Migration

  • Renamed --sync flag to --no-async flag to gcloud database-migrate migration-jobs create command to wait for the migration job creation operation to be completed before proceeding.
  • Added --no-async flag to gcloud database-migrate migration-jobs update command to wait for the migration job updation operation to be completed before proceeding.
  • Updated gcloud database-migration connection-profiles create cloudsql to support the flag root-password.
  • Added --no-async flag to gcloud database-migrate migration-jobs create command to wait for the connection profile creation operation to be completed before proceeding.

Kpt

  • Updated kpt from v1.0.0-beta.13 to v1.0.0-beta.15. See https://github.com/GoogleContainerTools/kpt/releases/tag/v1.0.0-beta.15 for more details.
  • The kpt fn commands now includes Kptfile and functionConfig in the function input by default. Previously this behavior was controlled using --enable-meta-resources command-line flag. --enable-meta-resources flag is also deprecated. If this disrupts any of your config workflow, you can use exclude functionality to exclude resources from function inputs. This functionality was added in this release to minimize the disruption.
  • The kpt website is overhauled to reflect the new scope of kpt project. New components package orchestrator, Configuration as Data UI and Config Sync are added to the project.
  • Added package orchestrator (a.k.a. porch) CLI interface under alpha subgroup (kpt alpha rpkg, kpt alpha repo, kpt alpha sync).
  • Added command-line flag --save to kpt fn eval to save evaluated function to package's Kptfile.
  • Added capability to select resources using labelSelector and annotationSelector in kpt fn eval and kpt fn render.
  • Added capability to exclude resources in kpt fn eval and kpt fn render.
  • Added support for variant constructor pattern in kpt pkg init and kpt pkg get.
  • Added capability to execute functions in a kubernetes cluster using porch.

Kubernetes Engine

  • Added podPidLimits kubelet config option which controls per pod pid limits to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update.
  • Updates default kubectl from 1.21 to 1.22.
  • Additional kubectl versions:
    • kubectl.1.19 (1.19.16)
    • kubectl.1.20 (1.20.15)
    • kubectl.1.21 (1.21.13)
    • kubectl.1.22 (1.22.9)
    • kubectl.1.23 (1.23.6)
    • kubectl.1.24 (1.24.0)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

388.0.0 (2022-06-01)

Google Cloud CLI

  • Added Cloud SQL OAuth scope to Application Default Credential.

AI

  • Fixed issue where unspecified --network and --service-account flags of gcloud ai hp-tuning-jobs create mistakenly overrode the corresponding values set via --config flag.

Apigee

  • Promoted gcloud apigee operations to beta.

Bare Metal Solution

  • Updated gcloud bms instances list to also return the IP addresses of instances that do not use the default network template.

Cloud Bigtable

  • Removed NAME column output from bigtable hot-tablets list.

Cloud Datastore Emulator

  • Release Cloud Datastore Emulator version 2.2.1
    • Fixes --firestore_in_datastore_mode flag parsing.

Cloud Deploy

  • Fixed issue where gcloud deploy targets rollback redeployed to the current release instead of rolling back to the previous release. This occurred in cases where the name of the release to rollback to was not provided.

Cloud Functions

  • Added --gen2 support for --set-secrets, --update-secrets, --remove-secrets and --clear-secrets flags of gcloud functions deploy to beta, alpha.

Cloud On Demand Scanning

  • Fixed issue where scanning for Maven vulnerabilities would occasionally fail.

Compute Engine

  • Promoted network-firewall-policies command group to GA.

Config Connector

Database Migration

  • Added --sync- flag to gcloud database-migrate migration-jobs create command to wait for the migration job creation operation to be completed before proceeding.

Kubernetes Engine

  • Added podPidLimits kubelet config option which controls per pod pid limits to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update.
  • Updated the following GA commands to support IAM Conditions:
    • gcloud beta attestors get-iam-policy outputs conditions associated with each binding.
    • gcloud beta attestors set-iam-policy accepts policies with conditional bindings.
    • gcloud beta attestors <add|remove>-iam-policy-binding accepts conditional bindings via new --condition and --condition-from-file flags.
    • gcloud beta policy get-iam-policy outputs conditions associated with each binding.
    • gcloud beta policy set-iam-policy accepts policies with conditional bindings.
    • gcloud beta policy <add|remove>-iam-policy-binding accepts conditional bindings via new --condition and --condition-from-file flags.

Terraform

  • Added support for the following resources in CAI-based policies:
    • google_access_context_manager_access_policy_iam_binding
    • google_access_context_manager_access_policy_iam_member
    • google_access_context_manager_access_policy_iam_policy
    • google_endpoints_service_consumers_iam_binding
    • google_endpoints_service_consumers_iam_member
    • google_endpoints_service_consumers_iam_policy
    • google_privateca_certificate_template_iam_binding
    • google_privateca_certificate_template_iam_member
    • google_privateca_certificate_template_iam_policy
  • TF -> CAI resource conversion compiled against google provider version 4.20.0.
  • Added output of logs based on configuration of log level.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

387.0.0 (2022-05-24)

Anthos Multi-Cloud

  • Fixed issue where gcloud container aws clusters get-credentials --private-endpoint and gcloud container azure clusters get-credentials --private-endpoint commands do not work for clusters in a project different from the default project.

Cloud Composer

  • Added --enable-privately-used-public-ips flag to gcloud composer environments create command to enable using privately used public IP address ranges feature in the GKE cluster.

Cloud Dataproc

  • Added --properties-file flag to gcloud beta dataproc jobs submit.

Cloud Deploy

  • Fixed gcloud deploy releases <create|promote> and gcloud deploy targets rollback to support --format flag.

Cloud Functions

  • - Added --trigger-event-filters-path-pattern flag to gcloud beta functions deploy.

Cloud Pub/Sub

  • Added --bigquery-table, --write-metadata, --use-topic-schema, and --drop-unknown-fields flags to gcloud pubsub subscriptions create to set BigQuery configuration options in Cloud Pub/Sub subscriptions.
  • Added --bigquery-table, --write-metadata, --use-topic-schema, --drop-unknown-fields, and --clear-bigquery-config flags to gcloud pubsub subscriptions update to update BigQuery configuration options in Cloud Pub/Sub subscriptions.

Compute Engine

  • Added 22.04 to allowed list of values for --version of gcloud beta compute instances ops-agents policies [create|update].
  • Promoted delete command of gcloud compute instance-groups managed all-instances-config to beta.
  • Promoted update command of gcloud compute instance-groups managed all-instances-config to beta.
  • Promoted --region for gcloud compute ssl-policies to beta.
  • Promoted --region flag for gcloud compute target-tcp-proxies to beta.
  • Added --target-distribution-shape flag to gcloud compute instances bulk create to specify shape of distribution in regional bulk insert for alpha and beta.

Config Connector

Eventarc

  • Added gcloud eventarc audit-logs-provider command group.

Stackdriver Monitoring

  • Promoted gcloud monitoring metrics-scopes command group to beta.

Terraform

  • Added support for the following resources in CAI-based policies:
    • google_access_context_manager_access_policy_iam_binding
    • google_access_context_manager_access_policy_iam_member
    • google_access_context_manager_access_policy_iam_policy
    • google_endpoints_service_consumers_iam_binding
    • google_endpoints_service_consumers_iam_member
    • google_endpoints_service_consumers_iam_policy
    • google_privateca_certificate_template_iam_binding
    • google_privateca_certificate_template_iam_member
    • google_privateca_certificate_template_iam_policy
  • TF -> CAI resource conversion compiled against google provider version 4.20.0.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

386.0.0 (2022-05-17)

Google Cloud CLI

  • Added Cloud SQL OAuth scope to gcloud auth login.

Anthos Identity Service

  • Promoted gcloud container hub identity-service to GA.
  • Promoted gcloud container fleet identity-service to GA.

App Engine

  • Promoted --service-account flag of gcloud app deploy to GA.

App Engine Flexible Environment

  • Promoted --service-account flag of gcloud app deploy to GA.

Cloud Build

  • Add --include-logs-with-status flag to gcloud triggers create.

Cloud Composer

  • Improve error message in case of lacking permissions in gcloud composer environments storage * delete commands.

Cloud IAM

  • Added gcloud iam workload-identity-pools create-saml and gcloud iam workload-identity-pools update-saml commands to manage SAML workload identity pool providers.

Cloud Memorystore

  • Promoted support for maintenance windows in gcloud memcache to GA.
  • Promoted the command gcloud memcache reschedule-maintenance to GA.

Cloud Run

  • Modified gcloud run services describe to include session affinity configuration.

Cloud SQL

  • Changed the prompt generated by --prompt-for-password for gcloud sql users set-password from Instance Password: to New Password:, since set-password command changes a database user's password, not the instance's password.
  • Setting max-login-attempts will also set enable-password-verification to true.

Compute Engine

  • Promoted --service-bindings flag of gcloud compute backend-services create|update commands to GA.
  • Promoted gcloud compute backend-services add-service-bindings and gcloud compute backend-services remove-service-bindings commands to GA.
  • Promoted --provisioning-model and --instance-termination-action flags of gcloud compute instances set-scheduling to GA.
  • Promoted sole tenancy flags of gcloud compute instances update to GA.
  • Added --network-performance-configs flag to gcloud compute instances bulk create.
  • Promoted --disable-automate-dns-zone flag of gcloud compute forwarding-rules create to GA.
  • Promoted --stack-type flag to GA for gcloud compute networks peeerings <create|update>.
  • Added windows-2022 & windows-2022-byol options to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in GA

Config Connector

Database Migration

  • Updated gcloud database-migration migration-jobs create command to create a migration job without any connectivity method (if connectivity isn't specified).
  • Added gcloud database-migration migration-jobs create --static-ip command to create a migration job with static IP connectivity. This was the default behavior.
  • Added gcloud database-migration migration-jobs update --static-ip command to update a migration job with static IP connectivity.

Distributed Cloud Edge

  • Added --clear-maintenance-window flag to gcloud edge-cloud container clusters update which removes the maintenance window setting of a cluster.
  • Updated gcloud edge-cloud container clusters node-pools list to make specifying a parent cluster optional. When --cluster is not specified, all node pools are listed.

Managed Active Directory

  • Promoted gcloud active-directory domains backups and gcloud active-directory domains restore to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

385.0.0 (2022-05-10)

Google Cloud CLI

  • Updated bundled Python executable for Windows to Python 3.9.12.

AI

  • Added --anomaly-cloud-logging flag to gcloud ai model-monitoring-jobs create|update to allow logging anomaly to Cloud Logging.

Anthos Multi-Cloud

  • Added --ssh-ec2-key-pair flag to gcloud container aws clusters update and gcloud container aws node-pools update to update the name of the EC2 key pair to login into control plane or node pool nodes.
  • Added --clear-ssh-ec2-key-pair flag to gcloud container aws clusters update and gcloud container aws node-pools update to clear the EC2 key pair to login into control plane or node pool nodes.

Cloud Run

  • Fixed issue where some commands were missing from gcloud beta run jobs.

Cloud SQL

  • Added --enable-password-policy flag to gcloud sql instances create and gcloud sql instances patch for GA.

Compute Engine

  • Promoted --key-revocation-action-type flag to beta for gcloud compute instance-templates create.
  • Promoted keyRevocationActionType flag of gcloud compute instances update-from-file to beta.
  • Added FIXED_STANDARD to allowed list of values for --default-network-tier flag.

Config Controller

  • Updated output of gcloud anthos config controller create to not include the default Config Connector identity upon creation.

Eventarc

  • Added gcloud eventarc channels group to interact with third-party sources.
  • Added gcloud eventarc channel-connections for event providers to create association with the user channel.
  • Added --channel argument to gcloud eventarc triggers create to specify associated channel.

Network Services

  • Promoted gcloud network-services service-bindings to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

384.0.1 (2022-05-05)

Cloud Storage

  • Updated gsutil component to 5.10. Google Cloud CLI version 384.0.0 included an older gsutil component (version 5.6) in deb, rpm, and snap packages. Version 384.0.1 includes gsutil component version 5.10 in the deb, rpm, and snap packages.

384.0.0 (2022-05-03)

Cloud Datastore Emulator

  • Adds --use-firestore-in-datastore-mode flag to gcloud [alpha|beta] emulators datastore start command.

Cloud Resource Manager

  • Promoted --condition flag to GA for the following commands:
    • gcloud resources-manager tags keys <add_iam_policy_binding|create|delete|describe|get_iam_policy|list|remove_iam_policy_binding|set_iam_policy|update>
    • gcloud resources-manager tags values <add_iam_policy_binding|create|delete|describe|get_iam_policy|list|remove_iam_policy_binding|set_iam_policy|update>
    • gcloud resources-manager tags bindings <create|delete|list>
    • gcloud resources-manager tags holds <create|delete|list>

Cloud Run

  • Promoted gcloud beta run jobs command group and all sub-commands to beta.

Cloud Storage

  • Updated gsutil component to 5.10.

Compute Engine

  • Started showing error messages on use of gcloud compute ssl-certificates create with --domains and --region flags together. Previously --region flag was being ignored.
  • Promoted --md5-authentication-key flag of gcloud compute routers add-bgp-peer to beta.
  • Promoted --md5-authentication-key and --clear-md5-authentication-key flags of gcloud compute routers update-bgp-peer to beta.
  • Updated import and export schemas for gcloud compute backend-services.
  • Promoted --key-reservation-action-type flag to beta for gcloud compute instances create.

Config Connector

GKE Hub

  • Fix a bug that RBAC policy produced by generate-gateway-rbac command could be removed unexpectedly.
  • Promoted the following commands to GA:
    • gcloud container hub mesh update.
    • gcloud container fleet mesh update.

Kubernetes Engine

  • Promoted fields gpu-sharing-strategy and max-shared-clients-per-gpu within --accelerator flag to enable GPU sharing support.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

383.0.1 (2022-04-26)

Google Cloud CLI

  • Added back --[no-]launch-browser in gcloud auth login and gcloud auth application-default login. --no-browser is the preferred and more secure auth flow in comparison.
  • Added back --console-only and --no-launch-browser in gcloud init. Use --no-browser as the replacement.

383.0.0 (2022-04-26)

Breaking Changes

  • (Google Cloud CLI) Removed --[no-]launch-browser in gcloud auth login and gcloud auth application-default login. Use --no-browser as the replacement.
  • (Google Cloud CLI) Removed --console-only and --no-launch-browser in gcloud init. Use --no-browser as the replacement.
  • (Compute Engine) Removed --local-ssd=size=SIZE from gcloud beta compute instances create-with-container due to the parameter being nonfunctional.

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

Access Approval

  • Added gcloud access-approval service-account get which retrieves the service account that is used by Access Approval to access KMS keys for signing approved approval requests.

App Engine

  • Enables build environment variables to be set in app.yaml.

Artifact Registry

  • Added new command gcloud artifacts files list to list files from a specified project and repository.

Cloud DNS

  • Modified gcloud dns managed-zones update to allow detaching all networks from a private zone by setting --networks to an empty string.
  • Modified gcloud beta dns managed-zones update to allow detaching all GKE clusters from a private zone by setting --gkeclusters to an empty string.
  • Modified gcloud beta dns managed-zones update to allow updating the GKE clusters or networks bound to a private zone independently by setting only --gkeclusters or --networks.

Cloud Datastore Emulator

  • Release Cloud Datastore Emulator version 2.2.0
    • Adds a flag to support Cloud Firestore in Datastore mode product mode in the emulator.

Cloud Firestore Emulator

  • Released Cloud Firestore emulator v1.14.3.
    • Fixed exports throwing BufferOverflowException.

Cloud IAM

  • Service Accounts SignJwt promoted to GA command.

Compute Engine

  • Changed the default value of --image-family flag to debian-11 for gcloud compute instances create and gcloud compute instance-templates create commands.

Config Connector

Config Controller

  • Let gcloud anthos config controller create print the default Config Connector identity, to allow easier subsequent permission grant.
  • Added gcloud anthos config controller get-config-connector-identity which prints the default Config Connector identity, to allow easier subsequent permission grant.

Identity and Access Management

  • Added --enable-imdsv2 flag to gcloud iam workload-identity-pools create-cred-config command to include AWS token Url to the credential source while generating AWS credentials config file.

Kubernetes Engine

  • Added --node-labels, --node-taints and --tags flags to gcloud container node-pools update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

382.0.0 (2022-04-19)

Access Approval

  • Added --active_key_version flag to gcloud access-approval settings update to set the crypto key version to use for signing approval requests.

Anthos Multi-Cloud

  • Added --proxy-secret-arn flag to gcloud container aws node-pools update to update the Amazon Resource Name (ARN) of the AWS Secrets Manager secret containing a proxy configuration.
  • Added --proxy-secret-version-id flag to gcloud container aws node-pools update to update the version ID of the AWS Secrets Manager secret containing a proxy configuration.
  • Added --clear-proxy-config flag to gcloud container aws node-pools update to clear the proxy configuration associated with the node pool.

Apigee

  • Fixed issue where gcloud beta apigee archives list would only list the first 25 archive deployments, even if more existed in the environment.

Binauthz

  • Updated the following beta commands to better support IAM Conditions:
    • gcloud beta attestors get-iam-policy outputs conditions associated with each binding.
    • gcloud beta attestors set-iam-policy accepts policies with conditional bindings.
    • gcloud beta attestors <add|remove>-iam-policy-binding accepts conditional bindings via new --condition and --condition-from-file flags.
    • gcloud beta policy get-iam-policy outputs conditions associated with each binding.
    • gcloud beta policy set-iam-policy accepts policies with conditional bindings.
    • gcloud beta policy <add|remove>-iam-policy-binding accepts conditional bindings via new --condition and --condition-from-file flags.

Cloud Composer

  • Enabled nested Airflow commands for Airflow 1.10.14 and 1.10.15 in gcloud composer environments run.

Cloud Logging

  • Added --location, --bucket, and --view flags to gcloud logging logs list to add the ability to limit the results to a view.

Cloud TPU

  • Promoted gcloud compute tpus tpu-vm to GA. Commands in this group allow creation and management of Cloud TPU VMs.

Compute Engine

  • Added INTERNAL as a choice for --ipv6-access-type flag in compute networks subnets create and compute networks subnets update.
  • Promoted unspecified value for --protocol flag of gcloud compute backend-services <create|update> to GA.
  • Promoted l3_default value for --ip-protocol flag of gcloud compute forwarding-rules create to GA.

Config Connector

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

381.0.0 (2022-04-12)

App Engine

Artifact Registry

  • *Added repository size to gcloud artifacts repositories describe and gcloud artifacts repositories list responses to GA.

Cloud Bigtable

  • Added "pretty-print" formatting to cbt lookup and cbt read commands. Column encodings and types can be provided using a YAML file, which is passed to the commands using format-file argument.
  • Added "keys-only" filtering to cbt lookup and cbt read commands by providing keys-only=true argument.
  • Promoted gcloud bigtable hot-tablets list to beta and GA.

Cloud Dataflow

  • Added --image-repository-username-secret-id, --image-repository-password-secret-id and --image-repository-cert-path flags to gcloud dataflow flex-template build command to allow users to provide credentials to pull template images from private registries.

Cloud Dataproc

  • Promoted gcloud dataproc clusters gke create to GA.

Cloud Datastream

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.14.2
    • Fix: transaction expires after 270s or 60s window
    • Fix: dead transaction reused bug
    • Fix: deadlock for up to 30s. #2452

Cloud Healthcare

  • Added --schema-type value analytics_v2 to the following command gcloud beta healthcare fhir-stores export bq.
  • Added --resource-type flag to gcloud healthcare fhir-stores export bq and gcloud healthcare fhir-stores export gcs which limits the export to specific types of FHIR resources on export.
  • Added --since flag to gcloud healthcare fhir-stores export bq and gcloud healthcare fhir-stores export gcs which limits the export to FHIR resources that were updated since the value passed in.

Cloud Spanner

  • Added --processing-units flag to spanner instances create and spanner instances update to add ability to create granular instances in GA.

Cloud Storage

  • Updated gsutil component to 5.9.

Compute Engine

  • Added --region flag for updating Regional Target HTTPS Proxies via gcloud compute target-https-proxies import.
  • Changed the list format field label of gcloud compute networks subnets list to include updated IPv6 fields.
  • Added --provisioning-model and --instance-termination-action flags to gcloud compute instances set-scheduling surface for beta.
  • Updated gcloud compute instances set-scheduling documentation to include --no-preemptible flag.

Config Connector

Database Migration

  • Updated gcloud database-migration connection-profiles list to list all region connection profiles when region not specified.

GKE Hub

  • Added Kubernetes resource labels for RBAC policies produced by generate-gateway-rbac command.

Kubernetes Engine

  • Added --network-performance-configs flag to gcloud container node-pools create/update to allow node pools to enable higher performance bandwidth for VM to VM traffic.
  • Promoted maxSurge default to GA for node-pool upgrade settings.
  • Require values for both --shielded-secure-boot and --shielded-integrity-monitoring when either one is set.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

380.0.0 (2022-04-05)

Google Cloud CLI

  • Updated gcloud auth login --cred-file=external-account-creds.json to authorize bq with the External Account Credentials in the passed credential file.

Cloud Composer

  • Added support for 1 and 2 aliases in --airflow-version flag, and airflow-1 and airflow-2 aliases in Airflow part of --image-version flag, in gcloud composer environments create, gcloud beta composer environments update, gcloud beta composer environments check-upgrade.
  • Implemented gcloud beta composer environments snapshots command group.

Cloud Spanner

  • Promoted --condition flag on Cloud Spanner add-iam-policy-binding and remove-iam-policy-binding commands to GA. This allows setting conditional IAM policies on Cloud Spanner resources (instances, databases, and backups) via gcloud.
  • Promoted gcloud spanner backups copy to beta and GA.

Compute Engine

  • Promoted --certificate-map of 'compute target-ssl-proxies insert|update` to beta.

Distributed Cloud Edge

  • Added gcloud edge-cloud container which allows users to manage their Distributed Cloud Edge clusters.

Kubernetes Engine

  • Added --network-performance-configs flag to gcloud container node-pools create/update to allow node pools to enable higher performance bandwidth for VM to VM traffic.
  • Promoted maxSurge default to GA for node-pool upgrade settings.

Terraform

  • Added gcloud terraform vet to beta, which allows enforcing policy compliance as part of an infrastructure CI/CD pipeline.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

379.0.0 (2022-03-29)

Breaking Changes

  • (Cloud Services) Replace --deleted flag with --show-deleted flag to gcloud services api-keys list. With --show-deleted, keys soft-deleted within 30 days will be returned.
  • (Cloud Services) Change the default output format from tabular to row-based of gcloud services api-keys list.

Google Cloud CLI

  • Updated gcloud auth login --cred-file=external-account-creds.json to authorize gsutil with the External Account Credentials in the passed credential file.

AI

  • Added more choice options to --region flag of gcloud ai custom-jobs and gcloud ai hp-tunining-jobs, including: southamerica-east1 and us-west4.

Artifact Registry

  • Changed com.google.cloud.artifactregistry.gradle-plugin from 2.1.1 to 2.1.5 in gcloud print-settings.
  • Promoted gcloud artifacts apt and artifacts yum commands to GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.14.1
    • Chore: prepare for aggregate support.
    • Chore: add support of x-goog-request-params http header for routing.
    • Fix: change read-past-max-staleness error code to align with production implementation.
    • Fix: update readtime-in-the-future error message.
    • Fix: support importing exports from Windows on UNIX systems.

Cloud Functions

  • Promoted --docker-repository, --kms-key, --clear-docker-repository and --clear-kms-key flag of gcloud functions deploy to GA.
  • Promoted --docker-registry flag of gcloud functions deploy to beta.

Cloud On Demand Scanning

  • Added ARM support for local-extract on Linux.

Cloud Run

  • Promoted gcloud run services proxy to beta. This command allows you to proxy a service or revision to localhost. Requests will be authenticated as the current SDK account, or with a provided token.

Compute Engine

  • Fixed an issue with --create-disk and --disk flags that causes gcloud compute instances create to fail when attaching a boot disk.
  • Promoted --enable-ula-internal-ipv6 and --internal-ipv6-range flags to GA for gcloud compute networks <create|update>.
  • Updated --protocol flag to permit values of TCP or SSL when --enable-logging or --logging-sample-rate flags are set for gcloud compute backend-services create and gcloud compute backend-services update for beta.

Config Connector

Database Migration

  • Updated gcloud database-migration connection-profiles list --region=us-central1 to return correct structure for connection profiles based on format.
  • Updated gcloud database-migration connection-profiles create mysql to return error on invalid hostname.
  • Updated gcloud database-migration connection-profiles create postgresql to return error on invalid hostname.

Eventarc

  • Added gcloud eventarc providers which allows for the discovery of event providers.

Kubernetes Engine

  • Deprecated --autoprovisioning-min-cpu-platform flag from gcloud container clusters create/update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

378.0.0 (2022-03-22)

Breaking Changes

  • (Bare Metal Solution) Modified gcloud bms volumes update, gcloud bms instances update, gcloud bms networks update, and gcloud bms nfs-shares update to be synchronous by default. Use --async flag to get the old behavior.

Google Cloud CLI

  • Updated --scopes flag in gcloud auth application-default print-access-token to support print down-scoped access token for user accounts.

Anthos Multi-Cloud

  • Added --root-volume-type flag to gcloud container aws node-pools update to update the type of the root volume.
  • Added --root-volume-size flag to gcloud container aws node-pools update to update the size of the root volume.
  • Added --root-volume-iops flag to gcloud container aws node-pools update to update the number of I/O operations per second (IOPS) to provision for the root volume.
  • Added --root-volume-kms-key-arn flag to gcloud container aws node-pools update to update the Amazon Resource Name (ARN) of the AWS KMS key to encrypt the root volume.
  • Added --config-encryption-kms-key-arn flag to gcloud container aws node-pools update to update the Amazon Resource Name (ARN) of the AWS KMS key to encrypt the user data.
  • Added --clear-proxy-config flag to gcloud container aws clusters update to clear the proxy configuration associated with the cluster.
  • Added --clear-security-group-ids flag to gcloud container aws clusters update to clear the additional security groups associated with the control plane replicas.
  • Added --root-volume-type flag to gcloud container aws clusters update to update the type of the root control plane volume.
  • Added --root-volume-size flag to gcloud container aws clusters update to update the size of the root control plane volume.
  • Added --root-volume-iops flag to gcloud container aws clusters update to update the number of I/O operations per second (IOPS) to provision for the root control plane volume.
  • Added --root-volume-kms-key-arn flag to gcloud container aws clusters update to update the Amazon Resource Name (ARN) of the AWS KMS key to encrypt the root control plane volume.
  • Added --clear-security-group-ids flag to gcloud container aws node-pools update to clear the additional security groups associated with the node pool nodes.

Bare Metal Solution

  • Added --async flag to gcloud bms volumes update, gcloud bms instances update, gcloud bms networks update, and gcloud bms nfs-shares update.

Certificate Authority Service

  • Enabled --sort-by flag for gcloud privateca templates list.

Cloud Memorystore

  • Promoted --maintenance-window-day and --maintenance-window-hour flags of gcloud redis instances create to GA.
  • Promoted --maintenance-window-day, --maintenance-window-hour, and --maintenance-window-any flags of gcloud redis instances update to GA.
  • Promoted gcloud redis instances reschedule-maintenance to GA.
  • Promoted support for maintenance windows in gcloud memcache to beta.
    • Added maintenance window flags to create and update commands.
    • --maintenance-window-day
    • --maintenance-window-start-time
    • --maintenance-window-duration
    • Added the flag --maintenance-window-any to update to remove a previously selected maintenance window.
  • Promoted the command gcloud beta memcache reschedule-maintenance.

Cloud On Demand Scanning

  • Fixed an issue where extraction would occasionally fail while scanning Maven packages.

Cloud SQL

  • Expanded --database-version flag choices to gcloud beta sql instance patch to enable major version upgrade on Cloud SQL instances.

Compute Engine

  • Added --load-balancing-scheme flag to gcloud compute url-maps validate for alpha, beta and v1.
  • Updated import and export schemas for:
    • gcloud compute forwarding-rules.
    • gcloud compute backend-services.
  • Promoted locality_lb_policy flag of gcloud compute backend-services create/update to beta.
  • Added --share-setting and --share-with flags to gcloud beta compute sole-tenancy node-groups create|update for beta.
  • Added --share-settings flag to gcloud beta compute sole-tenancy node-groups list for beta.
  • Added --node-project flag to gcloud beta compute instances create for beta.
  • Promoted gcloud compute instances suspend and gcloud compute instances resume to v1.

Config Connector

Config Controller

  • Added --use-private-endpoint flag to gcloud anthos config controller create to restrict access to the master's private endpoint IP of a config controller instance.

GKE Hub

  • Promote gcloud container hub memberships generate-gateway-rbac command from alpha to beta.

Secret Manager

  • Added --update-version-aliases flag to gcloud secrets update and gcloud secrets beta update to enable the addition of new aliases to secret versions.
  • Added --remove-version-aliases flag to gcloud secrets update and gcloud secrets beta update to enable the removal of aliases to secret versions.
  • Added --clear-version-aliases flag to gcloud secrets update and gcloud secrets beta update to enable the clearing of all aliases from a secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

377.0.0 (2022-03-15)

Google Cloud CLI

  • Promoted --no-browser in gcloud auth login and gcloud auth application-default login to be the default flow if gcloud cannot launch a web browser. You can still use --no-launch-browser flow by explicitly specifying it. Note that --no-launch-browser will be removed in version 383.0.0 on April 26, 2022.

Anthos Multi-Cloud

  • Added --security-group-ids flag to gcloud container aws node-pools update to update the IDs of additional security groups to add to node pool nodes.

Artifact Registry

  • Fixed issue where gcloud artifacts repositories create requires exessive permission when a kms key is supplied.

Bare Metal Solution

  • Promoted gcloud bms instances start to GA.
  • Promoted gcloud bms instances update to GA.
  • Promoted gcloud bms networks update to GA.
  • Promoted gcloud bms nfs-shares describe to GA.
  • Promoted gcloud bms nfs-shares list to GA.
  • Promoted gcloud bms nfs-shares update to GA.
  • Promoted gcloud bms volumes update to GA.
  • Added --filter flag to gcloud bms instances list.
  • Added --filter flag to gcloud bms volumes list.

Certificate Manager

  • Improved output of gcloud beta certificate-manager dns-authorizations create command. The output does not contain details of a created resource anymore.

Cloud Composer

  • Added support for composer-1 and composer-2 aliases in Composer part of --image-version flag in gcloud beta composer environments create, gcloud beta composer environments update, gcloud beta composer environments check-upgrade.
  • Fixed support for X.Y aliases in --airflow-version flag and airflow-X.Y aliases in Airflow part of --image-version flag in gcloud beta composer environments update and gcloud beta composer environments check-upgrade.

Cloud DNS

  • Add setIampolicy and getIamPolicy Alpha commands.

Cloud Dataproc

  • Added support for Clusters without cluster.config to gcloud dataproc jobs submit.

Cloud Domains

  • Allow specifying Project numbers in gcloud domains methods.

Cloud IAM

  • Service Accounts Undelete promoted to GA command.

Cloud Memorystore

  • Promoted --read-replicas-mode and --replica-count flags of gcloud redis instances create to GA.
  • Promoted --read-replicas-mode, --replica-count, and --secondary-ip-range flags of gcloud redis instances update to GA.

Cloud Storage

  • Updated gsutil component to 5.8.

Config Connector

Kubernetes Engine

  • Added --disable-pod-cidr-overprovision flag to gcloud beta container clusters/node-pools create to allow disabling overprovisioning of pod IPs during clusters and node-pools create.

Network Connectivity

  • Added gcloud network-connectivity locations describe and gcloud network-connectivity locations list. These commands return information about locations that support site-to-site data transfer.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

376.0.0 (2022-03-08)

Certificate Authority Service

  • Added --skip-grace-period flag to gcloud privateca roots delete and gcloud privateca subordinates delete to delete a certificate authority without waiting for the 30-day grace period that allows undeletion.

Cloud Build

  • Modified gcloud builds submit --pack to pass --network=cloudbuild to pack.

Cloud Identity-Aware Proxy

  • Add warning message to gcloud compute start-iap-tunnel telling users about installing NumPy.

Cloud Run

  • Added --env-vars-file to gcloud beta run deploy and gcloud run deploy to specify environment variables for Cloud Run deployments.
  • Added --env-vars-file to gcloud beta run services update and gcloud run services update to update environment variables for Cloud Run deployments.

Compute Engine

  • Added --split-source-commitment flag to gcloud compute commitments create for alpha.

Database Migration

  • Some changes in gcloud connection profile create cloudsql:
    • Fixed boolean flags to support --flag for setting it to true and --no-flag for false.

Firebase Test Lab

  • Promoted --app flag of gcloud firebase test ios run to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

375.0.0 (2022-03-01)

Breaking Changes

  • (Miscellaneous) Updated .gcloudignore pattern matching to ensure that a leading wildcard does not match multiple path parts, for improved consistency with .gitignore.
    • For example, */baz will no longer match foo/bar/baz. Use **/baz for the previous behavior.

App Engine

Cloud Key Management Service

  • Add gcloud kms ekm-connections commands to GA.

Cloud Pub/Sub

  • Added --enable-exactly-once-delivery flag to gcloud pubsub subscriptions create to beta to set exactly once delivery preference in Cloud Pub/Sub subscriptions.
  • Added --enable-exactly-once-delivery flag to gcloud pubsub subscriptions update to beta to update exactly once delivery preference for Cloud Pub/Sub subscriptions.

Cloud Security Command Center

  • Added gcloud scc bqexports command group to support BigQueryExport features.

Cloud Speech API

  • Added medical_conversation and medical_dictation options for gcloud ml speech <recognize | recognize-long-running> --model flag.

Compute Engine

  • Modified --filter to add support for server-side zone and region filtering to gcloud compute list commands.
    • Filtering will only be applied server-side if an exact match (=) is used in the filter expression (e.g. --filter="zone=us-central1-a"). Otherwise, the existing client-side filtering will be applied.

Identity and Access Management

  • Added gcloud beta iam policies create which creates a policy on the given attachment point with the given name.
  • Added gcloud beta iam policies delete which deletes a policy on the given attachment point with the given name.
  • Added gcloud beta iam policies get which gets a policy on the given attachment point with the given name.
  • Added gcloud beta iam policies listwhich lists the policies on the given attachment point.
  • Added gcloud beta iam policies update which updates the policy on the given attachment point with the given name.

Kubernetes Engine

  • Promoted --enable-identity-service flag to GA for gcloud container cluster create|update.
  • Added --enable-confidential-nodes flag to gcloud beta container node-pools create/update to allow creating node-pools with confidential nodes, and updating existing node pools to confidential nodes.

Miscellaneous

  • Updated gcloud info to display the source for each property value in parenthesis after the value, to help understand if the property is set by a command-line flag, an environment variable, the properties file, etc.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

374.0.0 (2022-02-23)

Breaking Changes

  • (Google Cloud CLI) Updated gcloud auth application-default login to use --no-browser in place of --no-launch-browser when using --client-id-file.

Google Cloud CLI

  • Added gcloud config configurations rename which allows for renaming of existing configurations.

Anthos Multi-Cloud

  • Added --security-group-ids flag to gcloud container aws clusters update to update the IDs of additional security groups to add to control plane replicas.
  • Added --proxy-secret-arn flag to gcloud container aws clusters update to update the Amazon Resource Name (ARN) of the AWS Secrets Manager secret containing a proxy configuration.
  • Added --proxy-secret-version-id flag to gcloud container aws clusters update to update the version ID of the AWS Secrets Manager secret containing a proxy configuration.
  • Deprecated aws/location property of gcloud container aws. Use container_aws/location to set the default Google Cloud location for gcloud container aws.
  • Deprecated azure/location property of gcloud container azure. Use container_azure/location to set the default Google Cloud location for gcloud container azure.

App Engine

  • Fixed bug in devappserver causing "ImportError: cannot import name apiproxy" errors.

BigQuery

  • Fix 'collections' error for Python 3.10.
  • Add --concurrency flag for reservations. Mark --max_concurrency as deprecated.
  • Minor bug fixes and dependency updates.

Cloud DNS

  • Added Location flag to Cloud DNS Managed Zones, Response Policies beta commands. This flag can be specified to target Cloud DNS Zonal Servers.

Compute Engine

  • Added --compression-mode flag to gcloud beta compute backend-services <create | update>.
  • Added --compression-mode flag to gcloud beta compute backend-buckets <create | update>.
  • Promoted --resource-manager-tags flag of gcloud compute instances create, gcloud compute instance-templates create and gcloud compute instances bulk create to GA.
  • Added project-number as an option for --service-proxy of gcloud beta compute instance-templates create.
  • Promoted enum CLIENT_IP_NO_DESTINATION of --session-affinity of gcloud backend-services <create | update> to Beta and GA.
  • Modified --load-balancing-scheme flag of gcloud compute backend-services create and gcloud compute forwarding-rules create to accept choice 'EXTERNAL_MANAGED' in GA.

Compute OS Config

  • Added gcloud compute osconfig pause and gcloud compute os-config resume` commands.

Config Connector

Eventarc

  • Added --event-filters-path-pattern flag to gcloud eventarc triggers create and gcloud eventarc triggers update to allow path pattern matching in Cloud Audit Log resource name filter.

Kubernetes Engine

  • Added --autoprovisioning-network-tags flag of gcloud container clusters create, gcloud container clusters create-autoand gcloud container clusters update to beta, GA.

Miscellaneous

  • Updated gcloud config get-value to gcloud config get per user feedback. The get-value command will remain as a hidden alias for get.
  • Updated gcloud config set to prompt when attempting to set a project, zone, or region to an invalid value. If --quiet is provided, or the command is not run interactively, the warning is still printed and the specified value is set.
  • Updated gcloud init to allow selection of an unverified project ID.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

373.0.0 (2022-02-15)

Breaking Changes

  • (Cloud Filestore) Undeprecate --locations flag to gcloud filestore.
  • (Cloud Pubsub Emulator) Changed the default hostname to IPv6 localhost [::1] for all environments.
    • For IPv4-only environments, pass a IPv4 address to --host:port.
  • (Cloud Pubsublite Emulator) Changed the default hostname to IPv6 localhost [::1] for all environments.
    • For IPv4-only environments, pass a IPv4 address to --host:port.
  • (Transcoder) Removed support for gcloud beta transcoder command group.

Google Cloud CLI

  • Added --scopes flag to gcloud auth application-default print-access-token command to print an access token with the given scopes.

AI Platform

  • Fixed issue where gcloud ai-platform local train mistakenly overrode it to the default value when the flag --worker-count or --parameter-server-count is specified to be 0.

Anthos Multi-Cloud

  • Added --config-encryption-kms-key-arn flag to gcloud container aws clusters update to update the Amazon Resource Name (ARN) of the AWS KMS key to encrypt user data.

Bare Metal Solution

  • Removed gcloud bms volumes snapshot and gcloud bms volumes restore from GA.

Cloud Dataplex

  • Promoted lakes command group to GA.
  • Promoted zones command group to GA.
  • Promoted assets command group to GA.
  • Promoted tasks command group to GA.

Cloud Datastream

  • Fix bug with gcloud datastream connection-profiles create command when specify --private-connection flag.

Cloud Memorystore

  • Added --read-replica-mode and --secondary-ip-range to gcloud beta redis instances update.
  • Updated gcloud beta redis instances describe to include secondary-ip-range.

Cloud On Demand Scanning

  • Added GO option to --additional-package-types flag for gcloud artifacts docker images scan to enable scanning of Go third-party and standard library packages in Go binaries.

Cloud SQL

  • Added --maintenance-version flag to gcloud sql instances patch.

Cloud Spanner

  • Promoted the database dialect flag to beta and GA in gcloud spanner databases create command.

Cloud Speech API

  • Added --min-diarization-speaker-count and --max-diarization-speaker-count to gcloud beta ml speech command, replacing --diarization-speaker-count which used to set both of the new flags to same value.

Compute Engine

  • Added --provisioning-model and --instance-termination-action flags for gcloud compute create-with-container command.
  • Modified the API calls to use correct (RFC7396) null semantics in Patch for removing stateful IPs that were made by using the following flags of gcloud beta compute instance-groups managed update and gcloud beta compute instance-groups managed instance-configs update:
    • --remove-stateful-internal-ips,
    • --remove-stateful-external-ips.
  • Promoted --provisioning-model and --instance-termination-action flags for gcloud compute <instances|instance-templates|instances bulk> create commands.

Config Connector

Dataproc Metastore

  • Added the following alpha and beta commands to work with Dataproc Metastore service databases and tables:
    • metastore services databases get-iam-policy
    • metastore services databases set-iam-policy
    • metastore services databases add-iam-policy-binding
    • metastore services databases remove-iam-policy-binding
    • metastore services databases tables get-iam-policy
    • metastore services databases tables set-iam-policy
    • metastore services databases tables add-iam-policy-binding
    • metastore services databases tables remove-iam-policy-binding

Identity and Access Management

  • Added --include-aws-session-token-url flag to gcloud iam workload-identity-pools create-cred-config command to include AWS token url to the credential source while generating AWS credentials config file.
  • Added --include-deny flag to gcloud beta projects get-ancestors-iam-policy and gcloud beta resource-manager folders get-ancestors-iam-policy to specify if it should return deny policies on the hierarchy.

Kubernetes Engine

  • Added --spot flag to gcloud container clusters/node-pools create to allow creating spot VM for node pools.
  • Adds support for linux/arm version of kubectl.
  • Additional kubectl versions:
    • kubectl.1.18 (1.18.20)
    • kubectl.1.19 (1.19.14)
    • kubectl.1.20 (1.20.15)
    • kubectl.1.21 (1.21.9)
    • kubectl.1.22 (1.22.6)
    • kubectl.1.23 (1.23.3)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

372.0.0 (2022-02-08)

Breaking Changes

  • (Kpt) The kpt live apply and kpt live destroy default behavior changed to wait forever
  • (Kpt) for reconciliation if no timeouts are specified.
  • (Kpt) The kpt live output for events and json printer is changed to omit resource-specific
  • (Kpt) health information by default.
  • (Kpt) The default image-pull-policy for kpt fn render and kpt fn eval changed
  • (Kpt) from AlwaysPull to IfNotPresent.

Cloud SDK

  • Deprecated --[no-]launch-browser flags and added --no-browser to gcloud auth login and gcloud auth application-default login commands. Use --no-browser to authorize gcloud on machines which cannot launch a web browser.
  • Deprecated --no-launch-browser and --console-only flags and added --no-browser flag to gcloud init. Use --no-browser to initialize gcloud command-line tool on machines which cannot launch a web browser.

Anthos Multi-Cloud

  • Added --role-arn flag to gcloud container aws clusters update command to update the IAM role to assume when managing AWS resources.
  • Added --role-session-name flag to gcloud container aws clusters update command to update the identifier for the assumed role session.
  • Added --instance-type flag to gcloud container aws clusters update command to update the AWS ec2 instance type for the control plane.
  • Added --admin-users flag to gcloud container aws clusters update and gcloud container azure clusters update to update the users that can perform operations as a cluster administrator.
  • Added --vm-size flag to gcloud container azure clusters update to update the Azure Virtual Machine size for the control plane.

Certificate Manager

  • Unified usage of --location flag in gcloud certificate-manager subcommands.

Cloud Composer

  • Added --connection-subnetwork flag to gcloud composer environments create command to enable using Private Service Connect for internal communication.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap oauth-clients from alpha to beta.
  • Promoted gcloud iap oauth-brands from alpha to beta.

Cloud Key Management Service

  • Add kms ekm-connections commands to alpha, beta.
  • Add support for external-vpc crypto keys.
  • Added support for the following "raw" PKCS#1 signing algorithms to gcloud kms keys create|update and gcloud kms keys versions import:
    • rsa-sign-raw-pkcs1-2048
    • rsa-sign-raw-pkcs1-3072
    • rsa-sign-raw-pkcs1-4096

Cloud On Demand Scanning

  • Upgrade local-extract to version 1.4.0 to improve the stability and quality of extraction.

Cloud SQL

  • Promoted --network flag of gcloud sql instances create to GA.
  • Promoted --network flag of gcloud sql instances patch to GA.

Config Connector

Dataproc Metastore

  • Added --update-auxiliary-versions-from-file, --add-auxiliary-versions and --clear-auxiliary-versions flags to gcloud metastore services update beta release track to allow updating a Dataproc Metastore with auxiliary versions.

Kpt

  • Updated kpt from v1.0.0-beta.9 to v1.0.0-beta.13. Refer to OSS releases page https://github.com/GoogleContainerTools/kpt/releases for detailed release notes.
  • Improved the merge handling for pipeline section of the Kptfile.
  • Added exec support for running functions in kpt fn render.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

371.0.0 (2022-02-01)

Cloud SDK

  • Added support for specifying an OAuth 2.0 access token via the environment variable CLOUDSDK_AUTH_ACCESS_TOKEN.

Anthos Multi-Cloud

  • Added --admin-users flag to gcloud container aws clusters create and gcloud container azure clusters create to add users that can perform operations as a cluster administrator.

App Engine

Cloud DataPipelines

  • Added gcloud beta datapipelines pipeline job list which lists all jobs for a given pipeline in a specific project and region.

Cloud Deploy

  • Add --description flag to gcloud deploy targets rollback.
  • Modified gcloud deploy targets describe to make --delivery-pipeline an optional flag.
    • When --delivery-pipeline is not specified, displays deployment information of the associated pipeline with the most recent successful rollout.
    • Added --list-all-pipelines to list deployment information of all associated pipelines.

Cloud Speech API

  • Added --enable-automatic-punctuation to gcloud ml speech recognize commands.

Compute Engine

  • Added --guest-os-features (only UEFI_COMPATIBLE is supported) for:
    • gcloud compute images import in beta;
    • gcloud compute instances import in beta;
    • gcloud compute machine_images import in beta.
  • Added a new key type http-cookie to --enforce-on-key in gcloud compute security-policies rules.
  • Added --recaptcha-redirect-site-key for gcloud compute security-policies update, and promoted it to beta and GA.
  • Added --exceed-redirect-type and --exceed-redirect-target for gcloud compute security-policies rules create|update, and promoted them to beta and GA.
  • Added support for version=8 and short-name=rocky in --os-types for gcloud beta compute instances ops-agents policies [create|update].

Config Connector

Dataproc Metastore

  • Added --auxiliary-versions and --auxiliary-versions-from-file flags to gcloud metastore services create beta release track to allow creating a Dataproc Metastore with auxiliary versions.
  • Added --endpoint-protocol flag to gcloud beta metastore services create and gcloud beta metastore services update to specify the protocol to use for the metastore service endpoint.

Kubernetes Engine

  • Updates default kubectl from 1.20 to 1.21.
  • Adds support for Mac M1 (darwin/arm64) version of kubectl (version 1.21 and greater).
  • Additional kubectl versions:
    • kubectl.1.18 (1.18.20)
    • kubectl.1.19 (1.19.14)
    • kubectl.1.20 (1.20.14)
    • kubectl.1.21 (1.21.9)
    • kubectl.1.22 (1.22.5)
    • kubectl.1.23 (1.23.1)

Miscellaneous

  • Added configuration property core/console_log_format to support alternative logging formats. Use gcloud config set core/console_log_format detailed to include timestamps in messages logged to the console.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

370.0.0 (2022-01-25)

AI

  • Added more choice options to --region flag of gcloud ai custom-jobs and gcloud ai hp-tunining-jobs, including: asia-east2, asia-south1, europe-west3, europe-west6, northamerica-northeast2 and us-west2.

Bare Metal Solution

  • Added gcloud bms instances reset which hard resets Bare Metal Solution instances.

BigQuery

  • Add support for --clone flag for table clones.
  • Add support for --multi_region_auxiliary flag for reservations.
  • Fix 'bq show -d' to support authorized routines.
  • Minor bug fixes and dependency updates.

Cloud Composer

  • Fixed issues in creation of Cloud Composer 2 environments that didn't properly pass on the secondary range names/CIDRs.

Cloud Functions

  • Promoted --set-secrets, --update-secrets, --remove-secrets and --clear-secrets flags of gcloud functions deploy to GA.

Compute Engine

  • Promoted --enable-ipv6, --ipv6-nexthop-address, and --peer-ipv6-nexthop-address flags of gcloud compute router update-bgp-peer to GA.
  • Promoted --enable-ipv6, --ipv6-nexthop-address, and --peer-ipv6-nexthop-address flags of gcloud compute router add-bgp-peer to GA.
  • Promoted --stack-type, --candidate-ipv6-subnet, --cloud-router-ipv6-interface-id, and --customer-router-ipv6-interface-id flags of gcloud compute interconnects attachments dedicated create to GA.
  • Promoted --stack-type, --candidate-ipv6-subnet, --cloud-router-ipv6-interface-id, and --customer-router-ipv6-interface-id flags of gcloud compute interconnects attachments dedicated update to GA.
  • Promoted --enable-uefi-networking flag of gcloud compute instances create, gcloud compute instance-templates create and gcloud compute instances bulk create to GA.
  • Added mesh as an option for --service-proxy of gcloud beta compute instance-templates create.

Compute OS Config

  • Add --mig-instances-allowed flag to gcloud compute os-config patch-jobs execute.

Config Connector

Dataproc Metastore

  • Added --database-type flag to metastore services create alpha and beta release tracks to allow specifying the backing store in Dataproc Metastore.

Recommender

  • Added annotations support for gcloud beta recommender insight-type-config update and gcloud beta recommender recommender-config update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

369.0.0 (2022-01-19)

AI

  • Added --labels flag to gcloud ai custom-jobs create and gcloud ai hp-tuning-jobs create to support setting labels on the resources.

Artifact Registry

  • Removed deprecated repository format 'PYPI' from commands gcloud artifacts repositories create and gcloud artifacts print-settings.

Bare Metal Solution

  • Updated gcloud bms instances list to return the resource identifier.
  • Added gcloud bms operations describe and gcloud bms operations wait which checks the status or waits for completion of long-running operations in Bare Metal Solution.

Certificate Manager

  • Promoted gcloud certificate-manager to beta.

Cloud Dataproc

  • Added gcloud dataproc batches to submit and manage Dataproc batch jobs.
  • Added --master-local-ssd-interface, --worker-local-ssd-interface and --secondary-worker-local-ssd-interface to gcloud dataproc clusters create to allow users to specify interface (SCSI/NVME) while attaching local SSDs.
  • Enabled Cloud Storage file location for dataproc workflow-templates instantiate-from-file --file.

Cloud Deploy

  • Promoted gcloud deploy to GA.

Cloud Functions

  • Promote gcloud functions --gen2 commands to beta.

Cloud IDS

  • Updated ids endpoints create to pass in user-defined labels to the Endpoint resource.
  • ids endpoints list now returns the correct list of endpoints when --uri is passed in.

Cloud Speech API

  • Added --model flag to gcloud ml speech recognize to specify ml model to use for audio recognition.
  • Added --output-uri flag to gcloud ml speech recognize-long-running allowing users to specify output transcript file on Google Cloud Storage.

Compute Engine

  • Promoted --auto-renew flag of gcloud compute commitments create and gcloud compute commitments update to GA.
  • Added FIXED_STANDARD to allowed list of values for --network-tier flag.
  • Promoted flags --cache-key-include-http-header and --cache-key-include-named-cookie of gcloud compute backend-services create and gcloud compute backend-services update to GA.
  • Promoted flags --cache-key-include-http-header and --cache-key-query-string-whitelist of gcloud compute backend-buckets create and gcloud compute backend-buckets update to GA.
  • Promoted --certificate-map of 'compute target-https-proxies insert|update` to beta.
  • Added --domain-names for gcloud compute service-attachments create.
  • Promoted --troubleshoot flag of gcloud compute ssh to GA.
  • Added 21.04 and 21.10 to allowed list of values for --version of gcloud beta compute instances ops-agents policies [create|update].

Config Connector

GKE Hub

  • Added --internal-ip flag to gcloud container fleet memberships register for version beta to maintain consistency with gcloud beta container clusters get-credentials.

Recaptcha

  • Added --waf-feature, and --waf-service options to recaptcha keys create command, supporting creation of WAF-enabled keys.

Recommender

  • Added support for gcloud beta recommender insight-type-config describe.
  • Added support for gcloud beta recommender insight-type-config update.

Service Directory

  • Added --network flag to gcloud service-directory endpoints create command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

368.0.0 (2022-01-11)

Breaking Changes

  • (Anthos Multi-Cloud) Required --fleet-project flag of gcloud container aws clusters create and gcloud container azure clusters create.
  • (Anthos Multi-Cloud) Required --config-encryption-kms-key-arn flag of gcloud container aws clusters create.
  • (Firebase Test Lab) Updated minimum version for AndroidJUnitRunner in combination with Android Test Orchestrator from 1.0 to 1.1, deprecating support for the Test Orchestrator from the legacy Android Test Support libraries.

AI

  • Updated gcloud ai custom-jobs create to allow worker pools with container-image-uri when python-package-uris is also specified.

Anthos Multi-Cloud

  • Replaced auth-provider auth plugin with exec auth plugin when generating kubeconfig in gcloud container aws clusters get-credentials and gcloud container azure clusters get-credentials.

Bare Metal Solution

  • Removed gcloud bms snapshot-schedule-policies from GA.
    • Removed gcloud bms volumes snapshots from GA.
    • Removed gcloud bms volumes update from GA.

Cloud Bigtable

  • Added cbt import [TABLE_ID] [INPUT_FILE] which allows the contents of a properly formatted .csv file to be written to an existing table.

Cloud Composer

  • Added gcloud composer state store for State Store operation of State/Disaster recovery to Alpha.
  • Added gcloud composer state load for State Load operation of State recovery to Alpha.

Cloud DNS

  • Added DNS Routing Policies support for gcloud dns record-sets.

Cloud Data Fusion

  • Added --options optional argument to
    gcloud beta data-fusion instances update for instance to update
    options field, specified as KEY1=VALUE1,KEY2=VALUE2.

Cloud Datastream

Cloud Deploy

  • When creating a release with gcloud releases create, can include the date and time of release creation by adding keywords $DATE and $TIME to release name.

Cloud IDS

  • Updated ids endpoints create to pass in user-defined labels to the Endpoint resource.

Cloud On Demand Scanning

  • Updated local-extract to version 1.3.2 to fix an issue with extraction of invalid zip archives.

Cloud SQL

  • Added --insights-config-query-plans-per-minute to
  • gcloud sql instances create and gcloud sql instances patch.

Cloud Storage

  • Updated gsutil component to 5.6.

Compute Engine

  • Promoted compute machine-images command group to GA.
  • Promoted gcloud compute backend-services add-service-bindings and gcloud compute backend-services remove-service-bindings commands to beta.
  • Promoted --request-headers-to-add for gcloud compute security-policies rules create|update to GA.
  • Promoted --enable-dynamic-port-allocation and --max-ports-per-vm flags of gcloud compute routers nats create and gcloud compute routers nats update to GA.
  • Promoted --clear-max-ports-per-vm flag of gcloud compute routers nats update to GA.
  • Promoted REGIONAL_MANAGED_PROXY option for --purpose flag of gcloud compute networks subnets create to GA.
  • Added --zypper-excludes flag to gcloud compute os-config patch-jobs execute to allow specifying patches to be excluded from update.

GKE Hub

  • Added gcloud container fleet memberships command group identical to existing gcloud container hub memberships.
  • Promoted the following commands to GA:
    • gcloud container hub mesh describe.
    • gcloud container hub mesh disable.
    • gcloud container hub mesh enable.

Kubernetes Engine

  • Added --enable-service-externalips flag to gcloud container clusters create | update to allow or deny services to set the ExternalIPs field.
  • Added --add-maintenance-exclusion-scope flag to gcloud container clusters update to specify the maintenance exclusion scope as no_upgrades, no_minor_upgrades, or no_minor_or_node_upgrades.
  • Demoted many gcloud container clusters warning-level logs to informational.
    • Changed warnings were those that do not indicate issues with your Kubernetes Engine resources, such as upcoming default changes and feature usage notes.
    • Intent was to ensure warnings are genuine indications that something is wrong.
    • Outdated warnings have been removed.
  • Added Compact Placement support to the command gcloud container clusters create. A --placement-type flag can be specified to specify a requirement of nodes collocation.
  • Added Compact Placement support to the command gcloud container node-pools create. A --placement-type flag can be specified to specify a requirement of nodes collocation.

Miscellaneous

  • Updated console handling code to assume non-interactive mode if stdin, stdout, or stderr is not open, rather than exit with an error.

Recommender

  • Added support for gcloud beta recommender recommender-config describe.
  • Added support for gcloud beta recommender recommender-config update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

367.0.0 (2021-12-14)

Breaking Changes

  • (Cloud Datastream) Modified gcloud beta datastream streams create and gcloud beta datastream streams update --force & --validate-only flags to be mutually exclusive.

App Engine

Assured Workloads

  • Added --enable-sovereign-controls flag to gcloud assured workloads create command.

Bare Metal Solution

  • Promoted gcloud bms networks to GA.
  • Promoted gcloud bms snapshot-schedule-policies to GA.
  • Promoted gcloud bms volumes to GA.

Cloud Bigtable Emulator

  • Added ARM64 support for Linux and macOS.

Cloud Composer

  • Added --enable-master-authorized-networks and --master-authorized-networks flags to gcloud beta composer environments create command.
  • Added --enable-master-authorized-networks and --disable-master-authorized-networks and --master-authorized-networks to gcloud beta composer environments update command.

Cloud Datastream

  • Modified gcloud beta datastream stream create and gcloud beta datastream stream update validation flags (--validate-only, --force) to be mutually exclusive.
  • Promoted gcloud datastream connection-profiles to GA.
    • RDBMS files now use the v1 API field names (e.g. 'schema' instead of 'schema_name', etc..).
    • Renamed --bucket-name flag to bucket.
    • Renamed --private-connection-name flag to --private-connection.
    • Removed --no-connectivity flag.
    • Added --force validation flag.
  • Promoted gcloud datastream streams to GA.
    • For create and update --force & --validate-only flags are now mutually exclusive.
    • Renamed --source-name flag to --source.
    • Renamed -destination-name flag to --destination.
  • Promoted gcloud datastream private-connections to GA.
    • Renamed --vpc-name flag to --vpc.
  • Promoted gcloud datastream routes to GA.
  • Promoted gcloud datastream locations to GA.
  • Promoted gcloud datastream operations to GA.

Cloud Deploy

  • When using gcloud deploy apply, manifest files support apiVersion 'deploy.cloud.google.com/v1'.

Cloud Filestore

  • Added gcloud beta filestore instances revert command to revert a filestore instance to specific snapshot.

Cloud Healthcare

  • Added --resource-type flag to gcloud beta healthcare fhir-stores export bq and gcloud beta healthcare fhir-stores export gcs which limits the export to specific types of FHIR resources on export.
  • Added --since flag to gcloud beta healthcare fhir-stores export bq and gcloud beta healthcare fhir-stores export gcs which limits the export to FHIR resources that were updated since the value passed in.

Cloud Run

  • Promoted --cpu-throttling of gcloud run from beta to GA.

Cloud Security Command Center

  • Added gcloud findings bulk-mute command to support mute features.

Compute Engine

  • Fixed a bug in gcloud compute start-iap-tunnel that was causing remote connections to be delayed up to 5 seconds. Link to bug: https://issuetracker.google.com/issues/199408959.
  • Promoted --subsetting-subset-size flag of gcloud compute backend-services create|update commands to beta.
  • Promoted the following --service-proxy flag parameters of gcloud compute instance-templates create to beta:
    • intercept-all-outbound-traffic,
    • exclude-outbound-ip-ranges,
    • exclude-outbound-port-ranges,
    • scope.
  • Promoted gcloud compute instances|instance-templates create --network-performance-configs flag to GA.
  • Added the following flags to gcloud beta compute instance-groups managed create, gcloud beta compute instance-groups managed create-instance, and gcloud beta compute instance-groups managed instance-configs create:
    • --stateful-internal-ip,
    • --stateful-external-ip.
  • Add the following flags to gcloud beta compute instance-groups managed update and gcloud beta compute instance-groups managed instance-configs update:
    • --stateful-internal-ip,
    • --remove-stateful-internal-ips,
    • --stateful-external-ip,
    • --remove-stateful-external-ips.

Kpt

  • Updated kpt update to no longer require users to check in changes before invoking kpt pkg update.
  • Updated kpt update to accepts empty path with version.
  • Updated kpt fn to check presence of function images in local cache only when relevant.
  • Fixed the property names casing issue in the Kptfile schema.
  • Fixed issue where kpt pkg get returns an error while adding merge comment.

Network Connectivity

  • Added gcloud network-connectivity operations describe and gcloud network-connectivity operations list which return information about long-running operations.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

366.0.0 (2021-12-07)

Breaking Changes

  • (Cloud Composer) Added requirement to provide one of --web-server-allow-ip, --web-server-allow-all, --web-server-deny-all flags in gcloud composer environments create when creating a private IP Cloud Composer 2 environment.
  • (Cloud Datastore) Modified gcloud beta datastream to use Datastream v1 API, which effects the client structured output.
  • (Cloud Functions) Modified gcloud functions deploy flag --security-level to default to SECURE_ALWAYS instead of SECURE_OPTIONAL. SECURE_ALWAYS enforces the created function to support HTTPS only, instead of both HTTPS and HTTP.
    • To override this behavior, use --security-level=SECURE_OPTIONAL.

Cloud SDK

  • Added support for environment variable completion to the "gcloud command-line tool".

AI

  • Added --endpoint-id flag to gcloud ai endpoints create and gcloud beta ai endpoints create.
  • Added --deployed-model-id flag to gcloud ai endpoints deploy-model and gcloud beta ai endpoints deploy-model.
  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

App Engine

BigQuery

  • Added support for CLOUD_RESOURCE as a connection_type.
  • Added --trial_id flag to extract to support exporting an individual trial of an ML model trained with Hyperparameter Tuning.
  • Added support for Device Certificate Authentication via Mutual TLS. See gcloud topic client-certificate.
  • Added support for creating a linked dataset.
  • Minor bug fixes.

Certificate Authority Service

  • Added --kms-key-version to gcloud privateca certificates, which allows creating certificates backed by a KMS key version.

Cloud Access Context Manager

  • Promoted --scopes flag of gcloud access-context-manager policies to GA.
  • Promoted gcloud access-context-manager policies add-iam-policy-binding to GA.
  • Promoted gcloud access-context-manager policiesremove iam-policy-binding to GA.
  • Promoted gcloud access-context-manager policies set-iam-policy to GA.
  • Promoted gcloud access-context-manager policies get-iam-policy to GA.

Cloud Bigtable

  • Added --autoscaling-min-nodes, --autoscaling-max-nodes, and --autoscaling-cpu-target flags to gcloud bigtable clusters create for alpha, beta and GA to let users create autoscaling clusters.
  • Added key autoscaling-min-nodes, autoscaling-max-nodes and autoscaling-cpu-target to --cluster-config flag of gcloud bigtable instances create for alpha, beta and GA to let users create autoscaling clusters.
  • Added --autoscaling-min-nodes, --autoscaling-max-nodes, --autoscaling-cpu-target and disable-autoscaling flags to gcloud bigtable clusters update for alpha, beta and GA to let users configure autoscaling when updating clusters.

Cloud Composer

  • Allowed --web-server-allow-ip, --web-server-deny-all, --web-server-allow-all flags in gcloud composer environments create to be used with Cloud Composer 2.
  • Added support for kubernetes Airflow CLI commands to gcloud composer environments run for Cloud Composer environments that use Airflow 2.1.4+.
  • Added --connection-subnetwork flag to gcloud beta composer environments create command to enable using Private Service Connect for internal communication.
  • Promoted --maintenance-window-start, --maintenance-window-end and --maintenance-window-recurrence flags of gcloud composer environments create to GA.
  • Added support for --kms-key flag in gcloud composer environments create command when creating Cloud Composer 2 environments.
  • Added --environment-size and composer-network-ipv4-cidr flags in gcloud composer environments create and gcloud composer environments update to be used with Cloud Composer 2.
  • Added --scheduler-cpu, --scheduler-memory, --scheduler-storage, --scheduler-count, --worker-cpu, --worker-memory, --worker-storage, --min-workers, --max-workers, --web-server-cpu, --web-server-memory, --web-server-storage flags in gcloud composer environments create and gcloud composer environments update to be used with Cloud Composer 2.

Cloud DNS

  • Promoted gcloud dns response-policies command group to GA.

Cloud Data Catalog

  • Added gcloud data-catalog entries star and gcloud data-catalog entries unstar which allows users to star and unstar their favorite Data Catalog entries respectively.

Cloud DataPipelines

  • Added gcloud beta datapipelines pipeline command with support for create, list, update, describe, delete, run and stop.

Cloud Datastream

  • Modified gcloud beta datastream stream create and gcloud beta datastream stream update validation flags (--validate-only, --force) to be mutually exclusive.
  • Promoted gcloud datastream connection-profiles to GA.
    • RDBMS files now use the v1 API field names (e.g. 'schema' instead of 'schema_name', etc..).
    • Renamed --bucket-name flag to bucket.
    • Renamed --private-connection-name flag to --private-connection.
    • Removed --no-connectivity flag.
    • Added --force validation flag.

Cloud Filestore

  • Added --force flag to gcloud filestore instances delete command to allow users to delete Filestore instances with child resources.
  • Added gcloud filestore instances snapshots command group, which is used to create and manage Filestore snapshots.
  • Added connect-mode param to --network flag of gcloud filestore instances create for GA.
  • Added --kms-key flag to gcloud filestore instances create command to specify the customer-managed KMS key name to use for encrypting the filestore instance.

Cloud Functions

  • Promoted --min-instances and --clear-min-instances flags of gcloud functions to GA.

Cloud Pub/Sub

  • Increased upper bound for --message-retention-duration flag of gcloud pubsub topics create from 7 days to 31 days.
  • Increased upper bound for --message-retention-duration flag of gcloud pubsub topics update from 7 days to 31 days.

Cloud SQL

  • Added --database-version flag to gcloud sql instance patch enable minor version upgrade for cloud sql instances.
  • Modified gcloud sql instances clone to support --point-in-time flag for MySQL too.

Compute Engine

  • Added update command to gcloud compute os-config patch-deployments on alpha, beta and GA tracks.
  • Promoted gcloud compute snapshots create command to GA.
  • Promoted flags --connection-persistence-on-unhealthy-backends, --idle-timeout-sec, and --tracking-mode of gcloud compute backend-services create and gcloud compute backend-services update to GA.
  • Promoted --service-bindings flag of gcloud compute backend-services create|update commands to beta.

Compute OS Config

  • Added log to remind user how to check operation status for gcloud compute os-config os-policy-assignment create in --async mode.

Config Connector

Declarative Workflows

  • Promoted gcloud beta resource-config bulk-export to beta with improved support for export to Terraform HCL format (via. --resource-format=terraform).
  • Added config export commands for the following command surfaces to alpha, enabling export of the related Google Cloud resources to KRM and Terraform HCL:
    • memcache instances
    • access-context-manager policies
    • access-context-manager perimeters
    • access-context-manager levels
    • secrets
    • secrets versions
    • iam service-accounts
    • iam service-accounts keys
    • transfer jobs
    • dns managed-zones
    • dns policies
    • spanner databases
    • spanner instances
    • artifacts repositories
    • bq jobs
    • bq datasets
    • bq tables
    • pubsub topics
    • pubsub subscriptions
    • source repos
    • kms keys
    • kms keyrings
    • builds triggers
    • dataflow jobs
    • monitoring channels
    • monitoring policies
    • redis instances
    • sql instances
    • sql databases
    • identity groups*
    • storage buckets
    • bigtable app-profiles
    • bigtable instances tables
    • bigtable instances
    • resource-manager liens
    • container node-pools
    • container clusters
    • compute url-maps
    • compute target-grpc-proxies
    • compute instances
    • compute target-instances
    • compute target-ssl-proxies
    • compute target-pools
    • compute disks
    • compute target-http-proxies
    • compute target-https-proxies
    • compute ssl-policies
    • compute addresses
    • compute backend-buckets
    • compute firewall-rules
    • compute target-tcp-proxies
    • compute target-vpn-gateways
    • compute networks subnets
    • compute vpn-tunnels
    • compute vpn-gateways
    • compute forwarding-rules
  • Added gcloud beta resource-config terraform generate-import to beta, adding support for generating a shell script to adopt exported Terraform HCL files into Terraform state.
  • Added gcloud beta resource-config terraform init-provider to beta, adding support for initializing the Google Cloud Platform Terraform provider from the gcloud command-line tool.

Kubernetes Engine

  • Added filter option to notification-config flag on gcloud container clusters create and gcloud container clusters update commands to specify specific pubsub message types to receive.
  • Added --enable-managed-prometheus flag to gcloud beta container clusters create and gcloud beta container clusters update to deploy Google Cloud Managed Service for Prometheus managed collection to a Kubernetes cluster.
  • Added --disable-managed-prometheus flag to gcloud beta container clusters update to tear down Google Cloud Managed Service for Prometheus managed collection on a Kubernetes cluster with managed collection already deployed.
  • Added a deprecation warning on --enable-pod-security-policy flag to create and update commands of gcloud beta container clusters.

Network Services

  • Promoted gcloud network-services service-bindings to beta.

Transcoder

  • Promoted gcloud transcoder command group to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

365.0.1 (2021-11-22)

BigQuery

365.0.0 (2021-11-16)

Breaking Changes

  • (AI) Removed --base-image flag of gcloud beta ai custom-jobs local-run. Use --executor-image-uri flag instead.
  • (AI) Removed --work-dir flag of gcloud beta ai custom-jobs local-run. Use --local-package-path flag instead.
  • (Anthos Multi-Cloud) Removed --service-load-balancer-subnet-ids flag of gcloud container aws clusters create.

Cloud SDK

  • Updated Windows PuTTY executables to version 0.76.

AI

  • Promoted gcloud ai custom-jobs local-run to GA.
  • Promoted 'local-package-path', 'script', 'requirements', 'extra-packages' and 'extra-dir' fields in --worker-pool-spec flag of gcloud ai custom-jobs create to GA, to support automatically building custom training image from a local package.
  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

Cloud Build

  • Deprecated --no-external-ip in gcloud builds worker-pools create. --no-external-ip will be removed in an upcoming release. Please use --no-public-egress so that workers in the worker pool are created without an external IP address.
  • Deprecated --no-external-ip in gcloud builds worker-pools update. --no-external-ip will be removed in an upcoming release. Please use --no-public-egress so that workers in the worker pool are created without an external IP address or --public-egress so that workers in the worker pool are created with an external IP address.
  • Removed--no-external-ip flag in gcloud beta builds worker-pools create. Please use --no-public-egress so that workers in the worker pool are created without an external IP address.
  • Removed --no-external-ip flag in gcloud beta builds worker-pools update. Please use --no-public-egress so that workers in the worker pool are created without an external IP address or --public-egress so that workers in the worker pool are created with an external IP address.

Cloud Deploy

  • Added --skaffold-version flag.

Cloud Functions

  • Promoted --kms-key, --docker-registry, '--clear-kms-key' and '--clear-docker-registry' flags of gcloud functions deploy to beta.

Cloud Healthcare

  • Promoted --write-disposition flag of gcloud healthcare dicom-stores export bq to GA.

Cloud IDS

  • Promoted gcloud ids endpoints to GA.
    • Create, delete and inspect Cloud IDS endpoints in your project.

Cloud SQL

  • Added PostgreSQL 14 to database versions.

Cloud Storage

  • Updated gsutil component to 5.5.

Compute Engine

  • Promoted gcloud compute routers nats rules command group to GA.
  • Promoted --rules flag of gcloud compute routers nats create and gcloud compute routers nats update to GA.
  • Promoted --tcp-time-wait-timeout flag of gcloud compute routers nats create and gcloud compute routers nats update to GA.
  • Promoted --clear-tcp-time-wait-timeout flag of gcloud compute routers nats update to GA.
  • Added --minimal-action and --most-disruptive-allowed-action flags to gcloud compute instance-groups managed rolling-action start-update.
  • Promoted --edge-security-policy flag of gcloud compute backend-services update and gcloud compute backend-buckets update commands to GA.
  • Promoted --type flag of gcloud compute security-policies create command to GA.

Config Connector

Dataproc Metastore

  • Added --network-config-from-file and --consumer-subnetworks flag to gcloud beta metastore services create to specify the subnetworks from which the Dataproc Metastore service can be accessed.

Kpt

  • Updated kpt from v1.0.0-beta.6 to v1.0.0-beta.7.
    • Added support for ARM-based machines.
    • Added support for selecting resources for function execution.
    • Added support for depends-on annotation for actuation.
    • Added support for apply-time mutations for actuation.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

364.0.0 (2021-11-09)

Cloud SDK

  • Updated bundled Python executable for windows to 3.8.10.

AI

  • Added --kms-key flag to gcloud beta ai tensorboards create to support configuring customer-managed encryption key spec.
  • Promoted gcloud ai tensorboards to GA.
  • Modified --worker-pool-spec flag of gcloud beta ai custom-jobs create to support auto training image building for distributed training.
    • If a local-package-path is specified in the first --worker-pool-spec flag, other --worker-pool-spec flags just have to specify the hardware related fields and they will use the same container image built for the first one.
    • Added requirements field to support installing extra public PyPI dependencies when building the image.
    • Added extra-packages field to support installing extra custom dependencies when building the image.
    • Added extra-dirs field to support copies more directories under local-package-path to the training image.

Anthos Multicloud

  • Promoted gcloud container aws to GA.
  • Promoted gcloud container azure to GA.

App Engine

Artifact Registry

  • Updated gcloud artifacts docker images describe, when used with --show-provenance flag, to support returning provenances in the SLSA provenance format. See https://slsa.dev/ for more information.

Cloud DNS

  • Added cloud logging support for gcloud dns managed-zones.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.13.1
    • Fix request timestamps in WebSocket messages.

Cloud Key Management Service

  • Added support for signing directly on input-file in gcloud kms asymmetric-sign without specifying a digest-algorithm.

Cloud Memorystore

  • Added --read-replicas-mode flag to gcloud beta redis instances create to support the multiple read replicas feature.
  • Added --replica-count flag to gcloud beta redis instances create and gcloud beta redis instances update to support replica nodes scaling when multiple read replicas are enabled.

Cloud Run

  • --[clear|set|update|remove]-secrets flags are now supported for --platform=managed in GA for deployments and service updates.

Cloud Security Command Center

  • Added gcloud findings set-mute command and gcloud muteconfigs command group to support mute features.

Compute Engine

  • Promoted --enable-dynamic-port-allocation and --max-ports-per-vm flags of gcloud compute routers nats create and gcloud compute routers nats update to beta.
  • Promoted --clear-max-ports-per-vm flag of gcloud compute routers nats update to beta.
  • Promoted --troubleshoot flag of gcloud compute ssh to beta.
  • Added --enable-uefi-networking flag to gcloud compute instances create, gcloud compute instance-templates create and gcloud compute instances bulk create to support UEFI networking when creating instances.
  • Updated import and export schemas for:
    • gcloud beta compute forwarding-rules.
    • gcloud beta compute backend-services.

Compute OS Config

  • Promoted gcloud compute os-config os-policy-assignment-reports commands to GA.
  • compute os-config os-policy-assignment-reports command accepts user's compute/zone property when --location is not set.

Config Connector

Kubernetes Engine

  • Promoted --cluster-dns, --cluster-dns-domain and --cluster-dns-scope=vpc flags of gcloud container clusters create and gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

363.0.0 (2021-11-02)

Cloud SDK

  • gcloud command-line tool supports authentication using workload identity federation via gcloud auth login --cred-file=/path/to/workload/identity/config/file.
  • Client certificate authorization is enabled for more services when setting context_aware/use_client_certificate. Run gcloud topic client-certificate to see the list of disallowed services.

AI

  • Fixed crashing on beta ai tensorboard-experiments delete.

Cloud SQL

  • Added the following flags to gcloud sql user create and created gcloud sql user set-password-policy for GA:
    • --password-policy-allowed-failed-attempts
    • --password-policy-password-expiration-duration
    • --password-policy-enable-failed-attempts-check
    • --clear-password-policy

Compute Engine

  • Promoted --zone flag of gcloud compute images describe-from-family to GA.
  • Added support for version value 11 for short-name value debian in --os-types for gcloud beta compute instances ops-agents policies [create|update].

Config Connector

Eventarc

  • Added the following flags to gcloud eventarc triggers create to support creating a trigger with Cloud Run for Anthos service destination:

    • --destination-gke-cluster
    • --destination-gke-service
    • --destination-gke-location
    • --destination-gke-namespace
    • --destination-gke-path

  • Added the following flags to gcloud eventarc triggers update to support updating a trigger with Cloud Run for Anthos service destination:

    • --destination-gke-path
    • --destination-gke-namespace
    • --destination-gke-service
    • --clear-destination-gke-path

GKE Hub

  • Promoted the following commands to beta and GA:
    • gcloud container hub cloudrun describe.
    • gcloud container hub cloudrun disable.
    • gcloud container hub cloudrun enable.
    • gcloud container hub cloudrun apply.

Kubernetes Engine

  • Added --enable-image-streaming flag to gcloud container clusters/node-pools create/update to allow creating clusters/node-pools with image streaming enabled, and enabling image streaming on existing clusters/node-pools.

Secret Manager

  • Updated --filter flag to be passed to the backend in
    • gcloud secrets list
    • gcloud secrets versions list

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

362.0.0 (2021-10-26)

Breaking Changes

  • (Cloud SQL) Backups are disabled by default when creating new database instances. This was enabled by default in the previous release.
  • (Cloud SQL) Backup start time will not be randomly selected. This was enabled in the previous release. Use --backup-start-time to specify the start time for backups.

Cloud Build

  • gcloud builds submit --tag fails early if a Dockerfile is not found when source is not a directory.

Cloud DNS

  • Added support for the SVCB and HTTPS record types.

Cloud Dataflow

  • Added --gcs-log-dir flag to gcloud dataflow flex-template build command to allow users the ability to specify path to a Google Cloud Storage directory for their build log.

Cloud On Demand Scanning

  • Add ARM64 support for local-extract.

Cloud Run

  • Promoted --execution-environment of gcloud run from alpha to beta.

Compute Engine

  • Promoted --add-share-with and --remove-share-with flags of glcloud compute reservations update to GA.

Managed Active Directory

  • Adding support for gcloud beta active-directory domains backups and gcloud beta active-directory domains restore for domain backup and restore.

Miscellaneous

  • Fixed an issue where non-interactive commands could exit with the error 'ValueError: invalid width 0'.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

361.0.0 (2021-10-19)

Breaking Changes

  • (Cloud SQL) Enable backups by default when creating new database instances. Use --no-backup to disable backups.
  • (Cloud SQL) Backup start time will be randomly select if not specified. Use --backup-start-time to specify the start time for backups.

Cloud SDK

  • gcloud command-line tool supports authentication using an access token from a file which can be specified in the global flag --access-token-file or the property auth/access_token_file.

AI

  • Added --analysis-instance-schema flag in gcloud beta ai model-monitoring-jobs update.
  • Renamed --work-dir flag of gcloud beta ai custom-jobs local-run as --local-package-path. Deprecated --work-dir flag.
  • Renamed --base-image flag of gcloud beta ai custom-jobs local-run as --executor-image-uri. Deprecated --base-image flag.

Artifact Registry

  • Added --show-provenance flag in gcloud artifacts docker images describe command to show build provenance.
  • Removed the auth token placeholder from the output of gcloud artifacts print-settings npm.
  • Fixed issue where gcloud artifacts tags list errors when the package name has slashes.

Cloud Code

  • Support specifying a service yaml file in gcloud beta code dev.
  • Support building with a Buildpack instead of a Dockerfile in gcloud beta code dev.

Cloud Domains

  • Promoted gcloud domains registrations to GA. Cloud Domains enables registering new domain names, transferring already registered domains from 3rd-party domains registrars and managing the domains.

Cloud Healthcare

  • Promoted gcloud healthcare hl7v2-stores <import|export> command groups to GA.

Cloud Key Management Service

  • Added support for the following RSA OAEP+SHA1 algorithms to gcloud kms keys create|update and gcloud kms keys versions import:
    • rsa-decrypt-oaep-2048-sha1
    • rsa-decrypt-oaep-3072-sha1
    • rsa-decrypt-oaep-4096-sha1

Cloud SQL

  • Added the following flags to gcloud sql instances create and gcloud sql instances patch for GA:
    • --password-policy-min-length
    • --password-policy-complexity
    • --password-policy-reuse-interval
    • --password-policy-disallow-username-substring
    • --password-policy-password-change-interval
    • --clear-password-policy

Cloud Scheduler

  • Updated gcloud scheduler jobs commands to accept a location flag to manually specify a Cloud region.

Cloud Storage

  • Updated gsutil component to 5.4.

Cloud Tasks

  • Added --location flag for gcloud tasks and gcloud tasks queues in beta & GA to enable users to specify a GCP location when managing queues and tasks.

Compute Engine

  • Promoted --network flag of gcloud compute target-instances create to GA.
  • Promoted --subsetting-policy of gcloud compute backend-services create and gcloud compute backend-services update to GA.
  • Added --description flag to compute service-attachments update.
  • Add --add-share-with and --remove-share-with flags to reservations update to make it easier to add and remove items in the share-with list without having to specify existing items.
  • Promoted --type flag of gcloud compute commitments create to GA.
  • Promoted --share-setting and --share-with flags of glcloud compute reservations create to GA.
  • Promoted compute routers nats rules command group to beta.
  • Promoted --rules flag of compute routers nats create and compute routers nats update to beta.
  • Promoted --tcp-time-wait-timeout flag of compute routers nats create and compute routers nats update to beta.
  • Promoted --clear-tcp-time-wait-timeout flag of compute routers nats update to beta.

Compute OS Config

  • Allow instance name in gcloud compute os-config vulnerability-reports describe and gcloud compute os-config inventories describe.
  • Promoted gcloud compute os-config os-policy-assignments to GA.

Config Connector

Config Controller

  • Promoted gcloud anthos config controller to GA.

Container Registry

  • Added support for pulling results with image names that use tags instead of sha256.
  • Added warning in a case where a user pulls results with tags instead of sha256.

Kpt

  • Updated kpt from v1.0.0-beta.5 to v1.0.0-beta.6.
    • Fixed yaml schema and added json schema for Kptfile.
    • Added support for .krmignore files in subpackages in kpt fn commands.
    • Added support for updating subpackages in kpt pkg update.
    • Added support to show pipeline execution duration in kpt fn render.
    • Fixed issue when parsing bare sequence nodes in yaml.
    • kpt fn render executes pipeline even when there are no input resources.
    • kpt pkg get no longer copies the entire repo if path is specified.

Pubsub Emulator

  • Added support for topic retention.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

360.0.0 (2021-10-05)

Artifact Registry

  • Updated gcloud beta artifacts print-settings mvn|gradle to add release and snapshot details for maven and gradle surfaces.
  • Promoted gcloud artifacts create repository to GA.
  • Updated gcloud artifacts print-settings mvn|gradle with release and snapshot policies for maven and gradle to GA.

Bare Metal Solution

  • Fixed issue where gcloud bms instances list would not show permissions errors properly.

Cloud Composer

  • Added --enable-privately-used-public-ips flag to gcloud beta composer environments command to enable using privately used public IP address ranges feature in the GKE cluster.
  • Added --enable-ip-masq-agent flag to gcloud beta composer environments command to enable IP address masquerading in the GKE cluster.
  • Added --scheduler-count flag to gcloud composer environments create and gcloud composer environments update commands.

Cloud Data Fusion

  • Added --enable_rbac optional argument to
    gcloud beta data-fusion instances update to toggle granular
    role-based access control in enterprise instances with version >= 6.5.0.

Cloud SQL

  • Added support for users to select minor versions for MySQL 8.0 instances, when they are available in the API.

Cloud Storage

  • Updated gsutil component to 5.3.

Compute Engine

  • Added debian-11 and rocky-8 options to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in beta
  • Added --service-directory-registration flag to compute forwarding-rules create NAME --target-service-attachment to support Service Directory integration with PSC ILB.
  • Promoted --redundant-interface, --subnetwork and --subnetwork-region flags of gcloud compute routers add-interface to GA.
  • Promoted --instance and --instance-zone flags of gcloud compute routers add-bgp-peer to GA.
  • Promoted --interface-names of gcloud compute routers remove-interface to GA.
  • Promoted --peer-names of gcloud compute routers remove-bgp-peer to GA.
  • Promoted --provisioning-model and --instance-termination-action flags for gcloud beta compute <instances|instances bulk|instance-templates> create commands.

Dataproc Metastore

  • Promoted --encryption-kms-key flag of gcloud metastore services create to GA.

Kubernetes Engine

  • Added --database-encryption-key flag to gcloud container clusters create-auto to allow enabling Database Encryption on Autopilot clusters at creation time.
  • Added --boot-disk-kms-key flag to gcloud container clusters create-auto to allow enabling CMEK protected boot disk on Autopilot clusters at creation time.
  • Added --spot flag to gcloud beta container clusters/node-pools create to allow creating spot VM for node pools.

Managed Active Directory

  • Adding gcloud active-directory peerings for Multi Project Support v1 release. Currently supporting up to 10 domain peerings per domain.

Network Connectivity

  • Promoted gcloud network-connectivity hubs command group to GA.
  • Promoted gcloud network-connectivity spokes command group to GA. Added gcloud network-connectivity spokes linked-vpn-tunnels, gcloud network-connectivity spokes linked-interconnect-attachments, and gcloud network-connectivity spokes linked-router-appliances command groups. Moved create and update commands to these command groups.

Network Security

  • Promoted gcloud network-security client-tls-policies to GA.
  • Promoted gcloud network-security authorization-policies to GA.

Network Services

  • Promoted gcloud network-services endpoint-policies to GA.

Secret Manager

  • Added support in gcloud secrets command group for specifying projects by project number, rather than project id.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

359.0.0 (2021-09-28)

Breaking Changes

  • (AI) Removed 'python-image-uri' field from --work-pool-spec flag of gcloud beta ai custom-jobs create. Use 'executor-image-uri' field instead.

Cloud SDK

  • Use pyca/cryptography to decode p12 service account keys if available. Otherwise, fall back to using PyOpenSSL.

AI

  • Fixed issue where gcloud ai custom-jobs list and gcloud ai hp-tuning-jobs list didn't show results with --uri flag.
  • Promoted gcloud ai endpoints raw-predict to beta and GA.

Artifact Registry

  • Fixed typos for gcloud beta artifacts repositories create help text.

Bare Metal Solution

  • Promoted gcloud bms instances list and gcloud bms instances describe to GA.

Cloud Bigtable

  • Added --restrict-to flags to gcloud bigtable app-profiles create and gcloud bigtable app-profiles update, which restricts multi-cluster routing to a specified list of cluster ids.

Cloud Data Fusion

  • Added --enable_rbac optional argument to
    gcloud beta data-fusion instances create to enable granular
    role-based access control in enterprise instances with version >= 6.5.0.

Cloud Dataflow

  • Corrected --snapshot-ttl lower/upper bound of gcloud dataflow snapshots create command.

Cloud Pub/Sub

  • Added --event-time flag to gcloud beta pubsub lite-topics publish to allow users to specify an event time when publishing a message.

Cloud Run

  • Promoted --key, --clear-key, --post-key-revocation-action-type and --clear-post-key-revocation-action-type flags of gcloud run deploy and gcloud run services update to GA for --platform=managed.
  • Deployments that change only the service metadata will no longer create new revisions. For example, gcloud run services my-service update --ingress=all.

Cloud Scheduler

  • Promoted gcloud scheduler locations command group to GA. Commands in this group provide information for locations where Cloud Scheduler is available.

Cloud Storage

  • Updated gsutil component to 5.2.

Compute Engine

  • Added --network-performance-configs flag to gcloud compute instance-templates create to both alpha and beta.
  • Modified --load-balancing-scheme flag of gcloud compute backend-services create and gcloud compute forwarding-rules create to accept choice 'EXTERNAL_MANAGED' in beta.
  • Modified --purpose flag of gcloud compute networks subnets create to accept choice REGIONAL_MANAGED_PROXY in beta.
  • Added new --share-setting=local to compute commitments create, compute future-reservations create, and compute reservations create.

Config Connector

Identity and Access Management

  • Added command gcloud iam workforce-pools create-cred-config to enable Workforce Pools configuration creation.

Kpt

  • Updated kpt from v1.0.0-beta.4 to v1.0.0-beta.5.
    • Added support for resolving top level pkg symlink.
    • Added support for preserving the ordering of fields with null values.
    • Improved the parsing logic for GitHub http package URL in kpt pkg get.

Kubernetes Engine

  • Hid --disable-autopilot flag from gcloud container clusters update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

358.0.0 (2021-09-21)

Breaking Changes

  • (Compute Engine) Deprecated redirect-to-recaptcha choice of --action flag under gcloud compute security-policies rules.

AI

  • Added --enable-web-access flag to gcloud ai custom-jobs create and gcloud ai hp-tuning-jobs create to allow enabling interactive shell terminal access.

Apigee

  • Promoted gcloud apigee archives command group to beta.

Artifact Registry

  • Added --version-policy and --allow-snapshot-overwrites flags to gcloud beta artifacts repositories create to add version policy and snapshot overwrites to maven repositories.

Cloud Composer

  • Added gcloud composer environments run my-environment upgrade_check to run upgrade check to Airflow 2.0 for Composer environments with Airflow 1.10.15+.
  • Added support of CLI commands for Airflow 2.0 to gcloud composer environments run.

Cloud Dataproc

  • Fixed bug in gcloud dataproc clusters enable-personal-auth-session where the command would fail if the flag --access-boundary was provided.

Cloud Filestore

  • Added gcloud beta filestore instances snapshots command group, which is used to create and manage Filestore snapshots.
  • Added --force flag to gcloud beta filestore instances delete, which forces the deletion of an instance and its child resources, such as snapshots.
  • Added --kms-key flag to gcloud beta filestore instances create command to specify the customer-managed KMS key name to use for encrypting the filestore instance.

Cloud Run

  • Promoted --binary-authorization and --breakglass flags to GA. These commands may now be used with gcloud run deploy and gcloud run update.

Cloud SQL

  • Add --allocated-ip-range-name flag of gcloud sql instances patch in beta.

Cloud Storage

  • Updated gsutil component to 4.68.

Compute Engine

  • Added --clear-scale-down-control flag to gcloud alpha|beta compute instance-groups managed update-autoscaling.
  • Promoted --share-setting and --share-with of 'gcloud compute commitments create` to beta.
  • Promoted the following flags of gcloud compute routers add-bgp-peer and gcloud compute routers update-bgp-peer to GA:
    • --bfd-min-receive-interval
    • --bfd-min-transmit-interval
    • --bfd-multiplier
    • --bfd-session-initialization-mode
  • Promoted --enable-layer7-ddos-defense and --layer7-ddos-defense-rule-visibility of 'gcloud compute security-policies update` to GA.

Compute OS Config

  • Promoted gcloud compute os-config vulnerability-reports describe and gcloud compute os-config vulnerability-reports list to GA.
  • Promoted gcloud compute os-config inventories commands describe and list to GA.

Config Connector

Config Controller

  • The create command will automatically update the kubeconfig to point to the newly created config controller cluster.

Kubernetes Engine

  • Updates default kubectl from 1.18 to 1.20.
  • Additional kubectl versions:
    • kubectl.1.17 (1.17.17)
    • kubectl.1.18 (1.18.20)
    • kubectl.1.19 (1.19.14)
    • kubectl.1.20 (1.20.10)
    • kubectl.1.21 (1.21.4)
    • kubectl.1.22 (1.22.1)
  • darwin/386 version of kubectl is no longer supported.
  • Deprecated and hid --logging and --monitoring flags from gcloud container clusters create-auto.

Recaptcha

  • Added --allowAllPackageNames and --allowAllBundleIds flags to gcloud recaptcha keys <create|update> to create/modify keys without specifying package names.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

357.0.0 (2021-09-14)

AI

  • Added --kms-key flag to gcloud beta ai model-monitoring-jobs create to support configuring Customer-managed encryption key spec.
  • Fixed issue where gcloud beta ai custom-jobs local-run unexpectedly used python2 with Vertex AI pre-built training images.

AI Platform

  • Added --enable-web-access to gcloud ai-platform jobs submit training to allow enabling interactive shell terminal access for a training job.

App Engine Flexible Environment

  • Added support for specifying the instance IP mode for each App Engine Flexible version during deployment. This can be done by adding 'instance_ip_mode: INTERNAL|EXTERNAL' in the Network field of the app.yaml file.

Cloud Dataflow

  • Added runtime environment parameter temp-location support in gcloud dataflow flex-template run/build. When this parameter is not set, defaults to value of staging-location.
  • Updated --additional-experiments parser used by run command gcloud dataflow flex-template run so the option can be specified multiple times and their values are concatenated.

Cloud Dataproc

  • Added --action-on-failed-primary-workers enum flag to gcloud dataproc clusters create to allow users to delete the failed primary workers during cluster creation.

Cloud Key Management Service

  • Added gcloud kms mac-sign and gcloud kms mac-verify which allow users to perform MAC signing and verification.
  • Added --import-only and --destroy-scheduled-duration to gcloud kms keys create to support import-only keys and user-specified variable key destruction.
  • Added --version to gcloud kms keys versions import to add key reimport functionality.

Cloud Pub/Sub

  • Promoted gcloud pubsub lite-reservations to GA.

Cloud Run

  • Promoted gcloud run replace to GA. This command supports deploying from a yaml file.

Cloud SQL

  • Promoted --allocated-ip-range-name flag of gcloud sql instances create to beta.

Cloud Services

  • Added support for additional services in services identity create.

Cloud Workflows

  • Added --call-log-level flag to gcloud workflows <execute|run> to enable automatic call logging.

Compute Engine

  • Changed the behavior of gcloud compute target-http-proxy import and gcloud compute target-https-proxy import to wait for the import operation to finish.
  • Updated --set-filter-protocols, --add-filter-protocols and --remove-filter-protocols to accept numeric protocols for all packet-mirrorings update commands.
  • Added --service-project flag to gcloud beta compute networks subnets list-usable.

Eventarc

  • Modified gcloud beta eventarc attributes types list to include Google Cloud Storage CloudEvent types and updated the descriptions for the existing event types.

Kpt

  • Added autocomplete image completion support in kpt fn eval.
  • Relaxed KRM check for kustomization files.
  • Added json output format for kpt live status command.
  • Added support for preserving field order/indendation kpt fn eval and kpt fn render.
  • Added support for referring SHA in image tags in kpt fn eval and kpt fn render.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

356.0.0 (2021-09-08)

Assured Workloads

  • Added CA_REGIONS_AND_SUPPORT as compliance regime options for gcloud assured workloads create command.
  • ResourceType CONSUMER_PROJECT is deprecated.
  • ResourceType CONSUMER_FOLDER and KEYRING are added.
  • display_name is added to ResourceSettings.
  • billing_account is now optional in Workload.
  • resource_settings is added to CreateWorkloadOperationMetadata.

Cloud API Gateway

Cloud Composer

  • Added --composer-network-ipv4-cidr to gcloud beta composer create to be used with Cloud Composer 2.
  • Added the following flags to gcloud beta composer create and gcloud beta composer update to be used with Cloud Composer 2:
    • --environment-size
    • --min-workers
    • --max-workers
    • --scheduler-cpu
    • --scheduler-memory
    • --scheduler-storage
    • --web-server-cpu
    • --web-server-memory
    • --web-server-storage
    • --worker-cpu
    • --worker-memory
    • --worker-storage

Cloud Run

  • Updated gcloud run deploy to include Cloud Run for Anthos enabled clusters on cluster suggestions.
  • Promoted --no-cpu-throttling flag of gcloud run to beta.

Compute Engine

  • Promoted --source-ip-ranges flag of gcloud compute forwarding-rules create and gcloud compute forwarding-rules update to beta.

Config Connector

GKE Hub

  • Running gcloud container hub memberships get-credentials with connectgateway.googleapis.com disabled now prompts the user to enable the API, and throws an error if the user declines to enable the API.

Kubernetes Engine

  • Added --addons=GcpFilestoreCsiDriver to gcloud container clusters create and --update-addons=GcpFilestoreCsiDriver to gcloud container clusters update to enable/disable the GCP Filestore Container Storage Interface (CSI) Driver.
  • Deprecated --enable-stackdriver-kubernetes, --enable-logging-monitoring-system-only, --monitoring-service, --logging-service, --master-logs, --no-master-logs, and --enable-master-metrics flags from gcloud container clusters create/update.

Network Security

  • Promoted gcloud network-security client-tls-policies to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

355.0.0 (2021-08-31)

Anthos Identity Service

  • Promoted gcloud container hub identity-service to beta.

Artifact Registry

  • Added gcloud beta artifacts settings for enabling/disabling/finalizing redirection.

Cloud Deploy

  • Promoted gcloud deploy to beta.

Cloud Pub/Sub

  • Promoted --message-retention-duration flag of gcloud pubsub topics create to GA.
  • Promoted --message-retention-duration flag of gcloud pubsub topics update to GA.
  • Promoted --clear-message-retention-duration flag of gcloud pubsub topics update to GA.

Compute Engine

  • Promoted skip-instances-on-validation-error in gcloud compute instance-groups managed delete-instances to GA.
  • Promoted --image-family-scope flag to GA for gcloud compute instances create and gcloud compute disks create.

Config Connector

GKE Hub

  • Promoted the following commands to beta:
    • gcloud container hub mesh describe.
    • gcloud container hub mesh disable.
    • gcloud container hub mesh enable.

Game Servers

  • Added --view=(basic|full) arg (default to basic) to game servers clusters get and game servers clusters list commands to optionally turn off/on Agones and Kubernetes version reporting.

Kubernetes Engine

  • Added --security-group flag to gcloud container clusters create-auto to allow enabling Google Groups for RBAC on Autopilot clusters at creation time.

  • Promoted gpu-partition-size field within --accelerator flag to enable partitioning of A100 GPUs to GA.

Network Security

  • Promoted gcloud network-security server-tls-policies to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

354.0.0 (2021-08-24)

Breaking Changes

  • (AI) Disable --analysis-instance-schema flag in gcloud beta ai model-monitoring-jobs update.

App Engine

Artifact Registry

  • Fixed print-settings command for Python repositories.

Cloud Asset Inventory

  • Added --relationship-type flag to gcloud asset get-history to enable getting relationship history.

Cloud Bigtable

  • Updated cbt_linux_arm name to cbt_linux_aarch64-x.x.x.tar.

Cloud Build

  • Added --require-approval flag to the following commands:
    • gcloud beta builds triggers create cloud-source-repositories
    • gcloud beta builds triggers create github
  • Added require-approval flag to gcloud builds triggers create.
  • Promoted gcloud builds approve and gcloud builds reject commands to beta.
  • Added the flag --suppress-logs to the command gcloud builds submit.

Cloud IAM

  • Promoted gcloud iam service-accounts keys disable|enable to beta and GA.

Cloud Run

  • Promoted --source flag of gcloud run deploy to GA. This flag supports deploying from source code through integration with Cloud Build.

Cloud Storage

  • Updated gsutil component to 4.67.

Compute Engine

  • Added --auto-renew flag to gcloud compute commitments create and gcloud compute commitments update for alpha.
  • Added the following flags to gcloud beta compute instances update:
    • --clear-node-affinities
    • --node-affinity-file
    • --node-group
    • --node
  • Promoted gcloud compute instances send-diagnostic-interrupt to beta and GA.
  • Added --host-error-timeout-seconds to specify the timeout in seconds for host error detection to both alpha and beta for:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
    • gcloud compute instances bulk create
    • gcloud compute instances set-scheduling
    • gcloud compute instances update-from-file

Config Connector

Essential Contacts

  • Promoted gcloud essential-contacts to GA.

Managed Active Directory

  • Promoted --enable-audit-logs flag in gcloud active-directory domains create and gcloud active-directory domains update to GA.
  • Promoted AUDIT_LOGS_ENABLED parameter to gcloud active-directory domains list to GA.
  • Updated gcloud active-directory domains list to include value for auditLogsEnabled in output.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

353.0.0 (2021-08-17)

Breaking Changes

  • (Compute Engine) Update gcloud compute instance-groups managed create to throw an error when creating a stateful regional managed instance group, if --instance-redistribution-type=NONE is not specified.

AI

  • Added more available regions to gcloud ai hp-tuning-jobs.

BigQuery

  • Added autoscale_preview as a new api_version for autoscaler.
  • Added support for creating an external dataset.
  • Minor bug fixes.

Cloud Asset Inventory

  • Added --relationship-type flag to the following commands:
    • gcloud asset list
    • gcloud asset feed create
    • gcloud asset feed update
  • Promoted --relationship-type flag to GA:
    • gcloud asset export
  • Added new content type RELATIONSHIP to:
    • gcloud asset get-history

Cloud Build

  • Fixed bug breaking gcloud beta builds triggers commands.

Cloud DNS

  • Update output format for gcloud dns record-sets.

Cloud Functions

  • Promoted --min-instances and --clear-min-instances flags of gcloud functions to beta.

Cloud Logging

  • Updated gcloud logging buckets create, gcloud logging buckets list, and gcloud logging buckets update to support restricted fields.

Cloud Pub/Sub

  • Renamed --zone flag as --location. Deprecated zone variants.
  • Added gcloud pubsub lite-subscriptions seek which initiates a seek operation for a Pub/Sub Lite subscription.
  • Added gcloud pubsub lite-operations command group which allows describing and listing Pub/Sub Lite long-running operations.

Cloud Services

  • Promoted gcloud services api-keys describe to GA.

Compute Engine

  • Added targetService to the output of gcloud compute service-attachments commands.

Database Migration

  • Fixed autocomplete issues in database migration commands.
  • Added "REGION" column in the output of gcloud database-migration connection-profiles list and gcloud database-migration migration-jobs list.
  • Added separate fields to display both the id and display name.
    • Added "CONNECTION_PROFILE_ID" in the output of gcloud database-migration connection-profiles list.
    • Added "MIGRATION_JOB_ID" and renamed "NAME" to "DISPLAY_NAME" in the output of gcloud database-migration migration-jobs list.
  • Some changes in gcloud connection profile list:
    • Fixed the value presented in ENGINE field to always display the DB engine.
    • Added a separate field for (cloud) PROVIDER to be distinguished from ENGINE.

Kubernetes Engine

  • Added --enable-gvnic flag of gcloud container clusters create, gcloud container nodepools create and gcloud container nodepools update to alpha, beta, GA.
  • Remove --enable-gvnic flag of gcloud container clusters update in alpha, beta.
  • Promoted --create-pod-ipv4-range and --pod-ipv4-range flags of gcloud container node-pools create for configuring pod ranges for node pools to GA.
  • Added --logging and --monitoring flags to gcloud container clusters create, gcloud container clusters update, and gcloud container clusters create-auto for users to configure the components that should have logging and/or monitoring turned on.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

352.0.0 (2021-08-10)

Access Approval

  • Promoted gcloud access-appoval command group to GA.

Apigee

  • Add archive deployment status column to archives list and archives describe commands.

Cloud Build

  • Added --region flag to gcloud beta builds triggers commands.

Cloud Composer

  • Removed Composer image versions with different major version of Airflow from list of suggested image versions of gcloud beta composer environments list-upgrades command.

Cloud On Demand Scanning

  • Updated local-extract to version 1.3.1 to fix various bugs.

Compute Engine

  • Added two new key types http-header and xff-ip to --enforce-on-key in 'gcloud compute security-policies rules'
  • Added --enforce-on-key-name to 'gcloud compute security-policies rules' in order to be able to specify the HTTP header name whose value becomes the rate limiting key forhttp-header` key type.
  • Modified gcloud compute ssh to also use IPv6 addresses if IPv4 addresses are unavailable.

Config Connector

Dataproc Metastore

  • Added --encryption-kms-key flag to gcloud beta metastore services create to specify the Customer-managed KMS key name to use for encrypting the Dataproc Metastore service.

GKE Hub

  • Removed the hidden label for --has-private-issuer flag in alpha and beta.
  • Promoted gcloud container hub memberships register --enable-workload-identity --has-private-issuer to GA.

Kubernetes Engine

  • Promoted --autoscaling-profile flag of gcloud container clusters create and gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

351.0.0 (2021-08-03)

AI

  • Promoted the GPU configuration fields in --worker-pool-spec flag of gcloud ai custom-jobs create to GA.

Artifact Registry

  • Promoted gcloud artifacts apt to beta.
  • Promoted gcloud artifacts yum to beta.
  • Promoted gcloud artifacts print-settings apt and gcloud artifacts print-settings yum to beta.
  • Changed com.google.cloud.artifactregistry.gradle-plugin from 2.1.0 to 2.1.1 in gcloud print-settings.

Assured Workloads

  • Added EU_REGIONS_AND_SUPPORT as compliance regime options for gcloud assured workloads create command.

Cloud Functions

  • Promoted --build-worker-pool and --clear-build-worker-pool flag of gcloud functions deploy to GA.

Cloud Healthcare

  • Added --send-for-bulk-import flag to the following commands:
    • gcloud beta healthcare dicom-stores create
    • gcloud beta healthcare dicom-stores update

Cloud Storage

  • Updated gsutil component to 4.66.

Compute Engine

  • Modified --network-interface flag of gcloud compute instances create and gcloud compute instance-templates create command to support IPv6 fields.
  • Promoted user_license flag of gcloud compute disks insert to beta.

Config Connector

GKE Hub

  • Promoted gcloud container hub memberships get-credentials to GA.

Miscellaneous

  • Binary Size input can contain decimal digits, provided the amount is a whole multiple of a Byte.

Policy Analyzer

  • Added gcloud policy-intelligence query-activity which queries activities. Supported activity types are service account last authentication and service account key last authentication.

Recaptcha

  • Promoted gcloud recaptcha keys to GA.

Secret Manager

  • Added --etag flag to the following commands:
    • gcloud secrets delete
    • gcloud secrets update
    • gcloud secrets versions destroy
    • gcloud secrets versions disable
    • gcloud secrets versions enable

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

350.0.0 (2021-07-27)

Cloud SDK

  • Fixed issue where the gcloud command-line tool would fail to tab complete flags specified after positional arguments.

Cloud Build

  • Added --service-account flag to gcloud beta builds triggers create command.

Cloud Filestore

  • Added connect-mode param to --network flag of gcloud filestore instances create for alpha and beta.

Cloud Services

  • Promoted gcloud services api-keys list to GA.

Compute Engine

  • Modified --source-ranges and --destination-ranges for gcloud compute firewall-rules create and gcloud compute firewall-rules update to accept IPv6 address ranges in addition to IPv4 address ranges.
  • Promoted rsa_encrypted_key in gcloud compute disks snapshot to GA.
  • Promoted rsa_encrypted_key in gcloud compute disks create and gcloud compute images create to GA.
  • Promoted type flag of gcloud compute security-policies create to beta.

Firebase Test Lab

  • Added --resign flag to gcloud beta firebase test android run. This flag allows clients to specify if Robo should re-sign the app-under-test APK.

Network Management

  • Added gkeMasterCluster and cloudSqlInstance arguments for source and destination in gcloud network-management connectivity-tests. This allows the user to run tests using Google Managed Services (GKE and Cloud SQL) endpoint types as source or destination.

Secret Manager

  • Updated --filter flag to be passed to the backend in
    • gcloud beta secrets list
    • gcloud secrets versions list

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

349.0.0 (2021-07-20)

Breaking Changes

AI

  • Added --network flag to gcloud beta ai endpoints create.

Certificate Authority Service

  • Changed certificate chain output format to remove extra newline between -----END CERTIFICATE----- and -----BEGIN CERTIFICATE-----. This affects certificate outputs of gcloud privateca certificates create, gcloud privateca certificates export and gcloud privateca pools get-ca-certs.

Cloud Asset Inventory

  • Promote gcloud asset list CLI to GA.

Cloud Build

  • Add --no-public-egress to gcloud builds worker-pools create.
  • Add --public-egress and a hidden --no-public-egress flags to gcloud builds worker-pools update.

Cloud Composer

  • Added support of --scheduler-count flag for gcloud beta composer environments {create,update} commands.

Cloud DNS

  • Added DNS Routing Policies support for gcloud beta dns record-sets.

Cloud Dataflow

  • Added Google Artifact Registry support in build command gcloud beta dataflow flex-template build.

Cloud Datastream

  • Allow using project numbers in command arguments.
  • Update help text files for gcloud beta datastream streams create/update.

Cloud Functions

  • Remove incorrect client-side validation for --entrypoint flag of gcloud functions deploy.

Cloud Healthcare

  • Added gcloud command-line tool support for healthcare NL
    • gcloud beta healthcare nlp analyze-entities

Cloud Key Management Service

  • Added ec-sign-secp256k1-sha256 to the list of supported algorithms.

Cloud Spanner

  • Added --processing-units flag to spanner create instance and spanner update instance to add ability to create granular instances in beta.

Cloud TPU

  • Added Cloud AI Notebooks support to gcloud compute tpus execution-groups create by adding flag --use-with-notebook.

Compute Engine

  • Added --redirect-type and --redirect-target to gcloud compute security-policies rules create|update in alpha and beta.
  • Add share_type to output of gcloud compute reservations list.
  • Added custom response headers to regional gcloud compute backend-services create requests.
  • Promoted user_license flag of gcloud compute images insert to beta.
  • Added an example of gcloud compute instances list to display IPv6 related fields.
  • Promoted --target-service-attachment flag of gcloud compute forwarding-rules create to GA.
  • Promoted --purpose=private-service-connect flag of gcloud compute networks subnets create to GA.
  • Promoted gcloud compute service-attachments to GA.
  • Added --mesh to gcloud compute instance-templates create in alpha and beta.

Config Connector

Dataproc Metastore

  • Promoted backups command group to GA.
  • Promoted Service restore command to GA.

GKE Hub

  • Promoted the following commands to GA:
    • gcloud container hub features list
    • gcloud container hub ingress describe
    • gcloud container hub ingress disable
    • gcloud container hub ingress enable
    • gcloud container hub ingress update
    • gcloud container hub multi-cluster-services describe
    • gcloud container hub multi-cluster-services disable
    • gcloud container hub multi-cluster-services enable

Kpt

  • Updated kpt to v1.0.0-beta.1. Look at the documentation at https://kpt.dev for more details.

Pubsub Emulator

  • Added support for subscriptions with both dead letter topics and ordered delivery enabled in the Pub/Sub emulator.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

348.0.0 (2021-07-13)

Cloud SDK

  • Added --locked flag to gcloud compute images create.

AI

  • Added more available regions to gcloud ai custom-job.

App Engine

BigQuery

  • Added --autoscale_budget_slot_hours flag to mk and update to support budget based reservation autoscaling.
  • Added flags: --create_session and --session_id to query to support session creation and using existing sessions.
  • Added --connection_property flag to query to set connection properties.
  • Minor bug fixes.

Cloud Bigtable

  • Added support to cbt to drop all rows from a table.
  • Added --auth-token flag to use IAM Auth Token for requests.

Cloud Build

  • Promoted gcloud builds worker-pools command group to GA.

Cloud Composer

  • Added gcloud beta composer environments list-packages command. It lists all PyPI modules installed in an Airflow worker.

Cloud DNS

  • Added --gkeclusters to gcloud beta dns response-policies create to support binding GKE clusters to the response policy.
  • Added --gkeclusters to gcloud beta dns response-policies update to support updating response policy with GKE clusters.

Cloud Datastream

  • Modified output formatting for gcloud beta datastream streams list to include stream creation and update times.
  • Added gcloud beta routes create which creates a datastream private connection route.
  • Added gcloud beta routes delete which deletes a datastream private connection route.
  • Added gcloud beta streams update which updates an existing datastream stream.

Cloud Key Management Service

  • Added client-side request and response integrity verification to gcloud kms encrypt, gcloud kms decrypt, gcloud kms asymmetric-sign, and gcloud kms asymmetric-decrypt. For more information about Cloud KMS's integrity verification API, visit https://cloud.google.com/kms/docs/data-integrity-guidelines.
  • Added --skip-integrity-verification flag to gcloud kms encrypt, gcloud kms decrypt, gcloud kms asymmetric-sign, and gcloud kms asymmetric-decrypt.

Cloud On Demand Scanning

  • Added --additional-package-types=MAVEN flag to scan Maven packages for vulnerabilities.
  • Updated local-extract to version 1.2.0 in order to support the scanning of CentOS and RHEL images.

Cloud Scheduler

  • Added gcloud scheduler locations command group [ALPHA, BETA]. Commands in this group provide information for locations where Cloud Scheduler is available.

Cloud Storage

  • Updated gsutil component to 4.65.

Compute Engine

  • Removed IPv6 support from gcloud compute instances create-with-container and gcloud compute instance-templates create-with-container until it's ready.
  • Added --description flag on compute instance-groups managed update to add possibility to update descriptions.
  • Changed the behavior of gcloud compute url-maps import to wait for the import operation to finish.
  • Added KMS args (--boot-disk-kms-project, --boot-disk-kms-location, --boot-disk-kms-keyring, --boot-disk-kms-key, and kms-project, kms-location, kms-keyring, kms-key properties of --create-disk) to gcloud compute instances bulk create to allow specifying a customer-managed encryption key.
  • Promoted --request-headers-to-add to beta for gcloud compute security-policies rules create|update.

Config Connector

Dataproc Metastore

  • Added the following alpha and beta commands to work with Dataproc Metastore service backups:
    • metastore services backups get-iam-policy
    • metastore services backups set-iam-policy
    • metastore services backups add-iam-policy-binding
    • metastore services backups remove-iam-policy-binding

GKE Hub

  • Fixed issue where --config-membership of gcloud container hub ingress enable and gcloud container hub ingress update did not properly handle full Membership resource paths.

Kubernetes Engine

  • Added --enable-identity-service flag to alpha, beta.
  • Mark --enable-gke-oidc flag as deprecated.
  • Added --security-group to gcloud container clusters create and gcloud container clusters update. This flag is used to enable the Authenticator Groups Config for group authentication.

Miscellaneous

  • Fixed issue where special characters were improperly escaped during command completion when using zsh or fish.
    • The previous behavior can be restored by setting the environment variable _ARGCOMPLETE_SHELL to 'bash'.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

347.0.0 (2021-06-29)

Breaking Changes

  • (Assured Workloads) Removed 'consumer-project-id' and 'consumer-project-name' as possible values for resource-settings in gcloud assured workloads delete command in alpha and beta, as they are now deprecated.
  • (Cloud SQL) Modified gcloud beta sql users list to include 'IAM_EMAIL' column in the output. It will display full email address for a CloudSQL MySQL IAM database user account.
  • (Kpt) Binary for Windows will no longer be provided. If you want to use kpt with windows, the source code is available at github.com/GoogleContainerTools/kpt.

AI

  • Promoted gcloud ai hp-tuning-jobs to GA.
  • Fixed issue where gcloud beta ai custom-jobs create failed to install dependencies in requirements.txt when packaging from local files.
  • Added --feature-attribution-thresholds flag to gcloud beta ai model-monitoring-jobs <create|update> to support configuring feature attribution score thresholds.

App Engine

  • Added support for 'egress_setting' field in 'vpc_access_connector' section of app.yaml.

Certificate Authority Service

  • Added gcloud privateca pools get-ca-certs to get the root CA certs for all active CAs in the CA pool.

Cloud Asset Inventory

  • Added --read-mask flag to gcloud asset search-all-resources to specify which fields to be returned.
  • Updated gcloud asset search-all-resources to return the full metadata (versionedResources) of resources when requested with flag --read-mask.

Cloud Datastream

  • Added gcloud beta connection-profiles update which updates an existing datastream connection profile.
  • Added gcloud beta streams create which creates a datastream stream.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.13.0
    • Add WebSocket endpoint for monitoring rules requests.

Cloud Pub/Sub

  • Promoted gcloud pubsub lite-topics publish to GA.
  • Promoted gcloud pubsub lite-subscriptions subscribe to GA.
  • Promoted gcloud pubsub lite-subscriptions ack-up-to to GA.

Cloud Run

  • gcloud beta run deploy now defaults to deploy from source if --image is not provided.

Cloud SQL

  • Promoted --active-directory-domain flag of gcloud sql instances create and gcloud sql instances patch to GA.

Cloud Storage

  • Updated gsutil component to 4.64.

Compute Engine

  • Changed the behavior of gcloud compute backend-services import to wait for the import operation to finish.
  • Promote share-setting and share-with for glcloud compute reservations create to beta.
  • Fixed gcloud compute forwarding-rules import to remove top-level properties of an existing forwarding rule when they are not specified in the YAML file.
  • Changed the list format of gcloud compute networks subnets list to include IPv6 related fields.
  • Changed --custom-cpu type from int to string to allow E2 shared-core instances to be specified as a custom value.

GKE Hub

  • Promoted the following commands to beta:
    • gcloud container hub config-management apply
    • gcloud container hub config-management disable
    • gcloud container hub config-management enable
    • gcloud container hub config-management status
    • gcloud container hub config-management unmanage
    • gcloud container hub config-management upgrade
    • gcloud container hub config-management version
    • gcloud container hub features list
    • gcloud container hub ingress describe
    • gcloud container hub ingress disable
    • gcloud container hub ingress enable
    • gcloud container hub ingress update
    • gcloud container hub multi-cluster-services describe
    • gcloud container hub multi-cluster-services disable
    • gcloud container hub multi-cluster-services enable

Identity Groups

  • Promoted --posix-group flag of gcloud identity groups create to beta.
  • Promoted --add-posix-group, --remove-posix-groups, and --clear-posix-groups flags of gcloud identity groups update to beta.

Kpt

  • Removed Windows binary.

Kubernetes Engine

  • Promoted --enable-l4-ilb-subsetting flag of gcloud container clusters create and gcloud container clusters update to GA.
  • Promoted --enable-service-externalips flag to beta.

Managed Active Directory

  • Promoted gcloud active-directory domains update-ldaps-settings to beta and GA.
  • Promoted gcloud active-directory domains describe-ldaps-settings to beta and GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

346.0.0 (2021-06-22)

Breaking Changes

  • (Cloud SDK) Removed the deprecated flag --add-quota-project in gcloud auth application-default login. --add-quota-project is the default.
  • (Certificate Authority Service) Renamed --location flag on gcloud privateca certificates create as --template-location, and updated it to default to the same location as the issuing CA Pool.
  • (Certificate Authority Service) Added an explicit check to gcloud privateca certificates create to verify that any certificate templates are in the same location as the issuing CA Pool.

AI

  • Added gcloud beta ai custom-jobs local-run which creates a custom training container image from your code and runs it locally.
  • Supported training with local files in gcloud beta custom-job create command.

Access Approval

  • Promoted gcloud access-appoval command group to beta.

Cloud Asset Inventory

  • Updated gcloud asset search-all-iam-policies with new searchable fields (memberTypes, roles, project, folders, and organizations), new request fields (assetTypes and orderBy), and new response fields (assetType, folders, and organization).

Cloud Build

  • Updated gcloud builds triggers create ... with require-approval flag.

Cloud Composer

  • Added gcloud beta composer environments check-upgrade command. It checks that an environment upgrade does not fail because of PyPI module conflicts.

Cloud DNS

  • Added --gkeclusters to gcloud beta dns managed-zones create to support binding GKE clusters to the zone.

Cloud Datastream

  • Added gcloud beta operations cancel which cancels a datastream operation.
  • Added gcloud beta private-connections create which creates a datastream private connection.

Cloud Pub/Sub

  • Promoted gcloud pubsub schemas to GA.
  • Promoted --schema and --encoding flags of gcloud pubsub topics create to GA.

Cloud SQL

  • Added SQL Server 2019 options to --database-version flag of gcloud sql instances create and gcloud sql flags list.

Compute Engine

  • Added debian-10 option to --os flag for:
    • gcloud compute images import in GA,
    • gcloud compute instances import in GA
    • gcloud compute machine-images import in beta
    • gcloud compute routers update
  • Promoted support for stack-type and ipv6-network-tier for gcloud compute instances network-interfaces update to GA.
  • Added staged progress tracker to gcloud beta compute networks update --switch-to-custom-subnet-mode when updating a legacy network.

Config Connector

Kpt

  • Updated kpt from v0.39.2 to v0.39.3.

Miscellaneous

  • Updated lazy module loader to correctly set module.file to the file name, rather than the file handle, to properly support debugging with Pdb++ (https://issuetracker.google.com/issues/190741410).

VPC Access

  • Promoted following flags in gcloud compute networks vpc-access connectors create to GA:
    • --machine-type

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

345.0.0 (2021-06-15)

AI

  • Updated --worker-pool-spec flag of gcloud beta ai custom-jobs create to support configuring GPUs.

Certificate Authority Service

  • Added gcloud privateca which enables creating and managing private CA pools, certificate authorities, certificates and certificate templates through the v1 API.

Cloud Composer

  • Fixed exception on executing gcloud composer environments run env-name delete_dag command without Airflow command arguments.

Cloud Dataflow

  • Updated build command to fuse multiple dependencies COPY docker commands into a single COPY command.

Cloud Datastream

  • Added gcloud beta connection-profiles discover which performs discovery on a datastream connection profile.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.12.0
    • Support partially clearing data via API.

Cloud Run

  • Modified gcloud beta run deploy --source to use Artifact Registry for build artifacts. Users will be prompted prior to automatic creation of an Artifact Registry repository named "cloud-run-source-deploy".
  • Promoted --use-http2 flag to GA for Cloud Run (fully managed).

Cloud SQL

  • Added support for - as a wildcard in place of an instance name for gcloud sql backups list.

Cloud Storage

  • Updated gsutil component to 4.63.

Compute Engine

  • Promoted --byol flag of:
    • gcloud compute images import to GA
    • gcloud compute instances import to GA
  • Promoted following flags in gcloud compute instances create and gcloud compute instances update-access-config to GA:
    • --ipv6-public-ptr-domain
    • --no-ipv6-public-ptr
  • Added --all-instances flag on compute managed update-instances to reflect the instances selection options available in the REST API.
  • Add --source-disk-project flag to image creation. It is used to specify source disk project when creating image from disk.
  • Promoted support for stack-type and ipv6-access-type for gcloud compute networks subnets create to GA.
  • Promoted --enable flag to GA for the following commands:
    • gcloud compute routers add-bgp-peer
    • gcloud compute routers update-bgp-peer
  • Promoted --keepalive-interval flag to GA for the following commands:
    • gcloud compute routers create
    • gcloud compute routers update
  • Promoted support for stack-type and ipv6-network-tier for gcloud compute instances <create|create-with-container> to GA.
  • Promoted support for stack-type and ipv6-network-tier for gcloud compute instance-templates <create|create-with-container> to GA.
  • Promoted support for stack-type and ipv6-access-type for gcloud compute networks subnets update to GA.

Kubernetes Engine

  • Added --enable-service-externalips flag to gcloud alpha and beta to allow or deny services to set the ExternalIPs field.
  • Added --autoprovisioning-image-type flag to gcloud container clusters create and gcloud container clusters update to specify the image type for node autoprovisioning.

Network Services

  • Promoted gcloud network-services endpoint-policies to beta.

VPC Access

  • Promoted following flags in gcloud compute networks vpc-access connectors create to GA:
    • --min-instances
    • --max-instances
    • --machine-type

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

344.0.0 (2021-06-08)

Breaking Changes

  • (AI) Renamed --drift-thresholds flag in gcloud beta ai model-monitoring-jobs create and gcloud beta ai model-monitoring-jobs update to --feature-thresholds.

App Engine

  • Updated the Python SDK to version 1.9.93.

Cloud Asset Inventory

  • Added new content type org-policy, access-policy, os-inventory to gcloud beta asset list.

Cloud Pub/Sub

  • Added gcloud beta pubsub lite-subscriptions subscribe which allows the user to receive messages on a Pub/Sub Lite subscription.

Compute Engine

  • Added --json-parsing and --log-level flags to gcloud compute security-policies update.
  • Promoted --json-parsing and --log-level flags to GA for gcloud compute security-policies update.

Config Connector

GKE Hub

  • Promoted gcloud container hub memberships get-credentials to GA.

Managed Active Directory

  • Adding support for gcloud active-directory peerings for Multi Project Support release.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

343.0.0 (2021-06-02)

Breaking Changes

  • (Certificate Authority Service) Updated gcloud beta privateca to only allow managing resources in the 6 supported locations. For more information, see https://cloud.google.com/certificate-authority-service/docs/locations.
  • (Cloud Run) If platform is not specified via flags or config, gcloud run commands that require a platform will now default to managed instead of prompting to select a platform.

AI

  • Promoted gcloud ai custom-jobs to GA.

Artifact Registry

  • Added Python repo creation with gcloud artifacts repositories create.
  • Added print-settings command for Python repositories.

BigQuery

  • Disable non-fedarated AWS connection type.
  • New module credential_loader encapsulate credential and auth related functions for BQCLI. The main entrypoint for these functions is credential_loader.GetCredentialsFromFlags (moved from _GetCredentialsFromFlags). Note the removed underscore in addition to the module path change.
  • Minor bug fixes and dependency updates.

Cloud Datastream

  • Added gcloud beta connection-profiles which contains create, delete, describe and list for Datastream connection profile objects.
  • Added gcloud beta locations fetch-static-ips which returns a list of static IPs used by Datastream for a specific location.
  • Fixed issue where gcloud beta connection-profiles list returned partial information in the list formatting.

Cloud Functions

  • Update logging message for gcloud functions deploy to print Cloud Build log URL.

Cloud Pub/Sub

  • Modified the output of gcloud beta pubsub schemas validate-schema on the successful validation of a schema to text indicating the success rather than the empty response returned by the service.
  • Modified the output of gcloud beta pubsub schemas validate-message on the successful validation of a message to text indicating the success rather than the empty response returned by the service.
  • Added gcloud beta pubsub lite-subscriptions ack-up-to which allows the user to acknowledge messages on a specified Pub/Sub Lite subscription.

Compute Engine

  • Promoted --scopes, --no-scopes,, --service-account and --no-service-account flags to GA for gcloud compute instances import.
  • Updated gcloud beta compute service-attachment to fix the default values of --enable-proxy-protocol and --connection-preference.

Config Connector

Kubernetes Engine

  • Added --threads-per-core flag to gcloud container clusters create and gcloud container node-pools create commands.
  • Fixed issue for 0 node clusters relating to misleading output of node versioning in gcloud container clusters list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

342.0.0 (2021-05-25)

App Engine

  • Added support for specifying a service account for each App Engine version during deployment. This can be done by either running gcloud app deploy --service-account=<SERVICE_ACCOUNT> or by specifying 'service_account: ' in app.yaml file. If both are specified, the CLI parameter will override the app.yaml spec.
  • Updated the Java SDK to version 1.9.89. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/java/release-notes.

App Engine Flexible Environment

  • Added support for specifying a service account for each App Engine Flexible version during deployment. This can be done by either running gcloud app deploy --service-account=<SERVICE_ACCOUNT> or by specifying 'service_account: ' in app.yaml file. If both are specified, the CLI parameter will override the app.yaml spec.

Certificate Authority Service

  • Added support for key generation in certificates create using newer versions (3.4 and above) of the Python cryptography package.

Cloud Build

  • Update gcloud beta builds triggers run for repoless triggers.

Cloud Datastream

  • Added gcloud beta datastream locations command group - contains describe and list for Datastream locations objects.
  • Added gcloud beta datastream routes command group - contains describe and list for Datastream routes objects.
  • Deprecated --region flag of gcloud beta datastream. Use --location instead.

Cloud Pub/Sub

  • Added --definition-file to gcloud beta pubsub schemas validate-message, gcloud beta pubsub schemas validate-schema, and gcloud beta pubsub schemas create to specify a schema stored in a file.

Compute Engine

  • Updated gcloud compute instance-groups managed abandon-instances, delete-instances, recreate-instances, and update-instances to return unresolved instance names for regional groups with status MEMBER_NOT_FOUND.
  • Updated gcloud beta compute service-attachment update to allow users to clear the consumer-accept-list and consumer-reject-list.
  • Added --threads-per-core flag to specify number of visible threads per physical core to both beta and GA for:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
    • gcloud compute instances bulk create

Config Connector

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

341.0.0 (2021-05-18)

AI Platform

  • Added beta commands for the AI Platform TensorBoard suite.
  • Added gcloud beta ai tensorboards commands to manage a TensorBoard on the unified AI Platform.
  • Added gcloud beta ai tensorboard-experiments commands to manage a TensorBoard Experiment on the unified AI Platform.
  • Added gcloud beta ai tensorboard-runs commands to manage a TensorBoard Run on the unified AI Platform.
  • Added gcloud beta ai tensorboard-time-series commands to manage a TensorBoard Time Series on the unified AI Platform.

App Engine

  • Added a deprecation warning to gcloud app deploy dos.yaml.

App Engine Flexible Environment

  • Added a deprecation warning to gcloud app deploy dos.yaml.

Assured Workloads

  • Added option to specify custom project names in --resource-settings by using consumer-project-name or encryption-keys-project-name key in gcloud assured workloads create command.

BigQuery

  • Support displaying TVF return table signature.
  • Adds enable_queuing_and_priorities reservation flag (only for whitelisted reservations).
  • Adds support for reservation assignment priority (only for whitelisted reservations).

Cloud Asset Inventory

  • Added gcloud asset analyze-move commands to analyze a GCP Project Migration.

Cloud Pub/Sub

  • Added gcloud beta pubsub lite-topics publish which allows the user to publish a message to their specified Pub/Sub Lite topic.

Cloud Storage

  • Updated gsutil component to 4.62.

Compute Engine

  • Promoteddisk-resource-policykey of flag--create-diskfor allcompute instances` create commands.
  • Updated help text for --enable-endpoint-independent-mapping on compute routers nats create and compute routers nats update to reflect the new default.

Kubernetes Engine

  • Added --threads-per-core flag to gcloud container clusters create and gcloud container node-pools create commands.
  • Promoted --cluster-dns-* flags of gcloud container clusters create and gcloud container clusters update to beta.
  • Updates default kubectl from 1.17 to 1.18.
  • Additional kubectl versions:
    • kubectl.1.17 (1.17.17)
    • kubectl.1.18 (1.18.19)
    • kubectl.1.19 (1.19.11)
    • kubectl.1.20 (1.20.7)
    • kubectl.1.21 (1.21.1)

Pubsub Emulator

  • Fixed issue where subscription retention was not being respected upon subscription creation.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

340.0.0 (2021-05-11)

Cloud Asset Inventory

  • Updated gcloud asset search-all-resources to support date-time string in queries on timestamp fields (createTime and updateTime).

Cloud Bigtable

  • Promoted the IAM Conditions flags --condition and --condition-from to GA.

Cloud Billing

  • Added optional --calendar-period, --start-date, and --end-date flags to gcloud billing budgets [create | update] to support a wider array of options for the budget's timeframe, which was previously always one month.

Cloud Memorystore

  • Promoted gcloud beta redis reschedule-maintenance to beta.
  • Added --maintenance-window-day flag and --maintenance-window-hour flag to gcloud beta redis instances create to allow specifying a maintenance policy when creating a new instance.
  • Added --maintenance-window-day flag, --maintenance-window-hour flag and --maintenance-window-any flag to gcloud beta redis instances update to allow updating a maintenance policy when updating an instance.

Cloud Run

  • Modified gcloud beta run deploy --source to suggest a default service name based on the source path when one isn't provided.

Compute Engine

  • Promoted gcloud compute service-attachments to beta.
  • Added --target-service-attachment flag to gcloud beta compute forwarding-rules create.
  • Added --purpose=private-service-connect to gcloud beta compute networks subnets create.

Config Connector

Database Migration

  • Added MYSQL_8_0, POSTGRES_10, POSTGRES_12, and POSTGRES_13 database version options for --database-version flag to database-migration connection-profiles create cloudsql.

Kubernetes Engine

  • Promoted --enable-dataplane-v2 to GA.

Notebooks

  • Added gcloud notebooks instances rollback to rollback a notebook's boot disk.
  • Added gcloud notebooks instances get-health to verify instance health.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

339.0.0 (2021-05-04)

Breaking Changes

  • (Certificate Authority Service) Updated default value for --max-chain-length flag of gcloud beta privateca roots create. Now, no max chain length will be added to newly created root CAs unless they are explicitly specified through --max-chain-length, or (indirectly) through a --reusable-config resource argument.

AI

  • Added executor-image-uri field to --worker-pool-spec flag of gcloud beta ai custom-jobs create, as an alias of python-image-uri field. python-image-uri will be deprecated soon.
  • Accepted empty value for --worker-pool-spec flag, which means to create an empty worker pool.

Assured Workloads

  • Added option to specify custom keyring name in --resource-settings by using keyring-id key in gcloud assured workloads create command.

Cloud Composer

  • Added links to the documentation pages when the request fails on missing required permissions.

Cloud On Demand Scanning

  • Upgrade local-extract to version 1.0.0. This version replaces memory-intensive extraction with disk-based extraction.

Cloud SQL

  • The output of gcloud sql backups list --instance="my-instance-1" will now include the instance name.

Compute Engine

  • Added --request-coalescing to gcloud compute backend-services create, gcloud compute backend-services update, gcloud compute backend-buckets create and gcloud compute backend-buckets update.
  • Added cdnPolicy.requestCoalescing field support to gcloud compute backend-services import.
  • Added --minimal-action and --most-disruptive-allowed-action flags to gcloud beta compute instance-groups managed rolling-action start-update.

Config Connector

Kpt

  • Updated kpt from v0.39.0 to v0.39.2.
  • Updated import of cli-utils from v0.24.0 to v0.25.0.
  • Updated import of kyaml from v0.10.15 to v0.10.17.
  • Updated import of cmd/config from v0.9.7 to v0.9.10.

Kubernetes Engine

  • Added --disable-autopilot flag of gcloud container clusters update to convert cluster from Autopilot mode to Standard mode.

Network Security

  • Modified gcloud network-security client-tls-policies to accept empty serverValidationCa which signals to the client to do un-authenticated TLS.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

338.0.0 (2021-04-27)

Breaking Changes

  • (Cloud Run) Deprecated all choice of --vpc-egress flag of gcloud run deploy and gcloud run services update. A new all-traffic choice provides the same functionality with a more specific name. all will continue to be supported, but prefer to use all-traffic.
  • (Cloud Run) Modified gcloud beta run deploy to accept either --image or --source, but not both.

Cloud Dataproc

  • Added --confidential-compute boolean flag to gcloud dataproc clusters create to allow users to configure Compute Engine Confidential VMs on Dataproc clusters.
  • Added --confidential-compute boolean flags to gcloud dataproc workflow-templates set-managed-cluster to allow users to configure Compute Engine Confidential VMs on Dataproc managed clusters.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.15
    • Fixes issue with parsing empty headers which caused some valid requests to be rejected.

Cloud Key Management Service

  • Promote get-certificate-chain command to GA.

Cloud Memorystore

  • Added timeout key to --redis-config flag of redis instances create.
  • Added timeout key to --redis-config flag of redis instances update.

Cloud Pub/Sub

  • Promoted --starting-offset flag of gcloud pubsub lite-subscriptions create to GA.

Cloud Run

  • Added all-traffic choice to --vpc-egress flag of gcloud run deploy and gcloud run services update. all-traffic provides the same functionality as the existing all choice with a more specific name. all is now deprecated but will continue to be supported. Prefer to use all-traffic.
  • Promoted --binary-authorization and --breakglass flags of gcloud run deploy and gcloud run services update to beta.

Cloud Services

  • Promoted gcloud services vpc-peerings delete to GA.

Cloud Tasks

  • Updated gcloud tasks queues update [QUEUE_NAME] --clear-routing-override to remove appEngineRoutingOverride values instead of setting them to empty strings.

Compute Engine

  • Promoted --iap-tunnel-disable-connection-check flag of gcloud compute start-iap-tunnel to GA.
  • Promoted --cpu-utilization-predictive-autoscaling flag of gcloud compute instance-groups managed set-autoscaling and gcloud compute instance-groups managed update-autoscaling to GA.

Config Connector

Network Security

  • Promoted gcloud network-security authorization-policies to beta.
  • Promoted gcloud network-security server-tls-policies to beta.
  • Promoted gcloud network-security client-tls-policies to beta.

Secret Manager

  • Added --etag flag to the following commands:
    • gcloud beta secrets update
    • gcloud beta secrets delete
    • gcloud beta secrets versions enable
    • gcloud beta secrets versions disable
    • gcloud beta secrets versions destroy

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

337.0.0 (2021-04-20)

Assured Workloads

  • Added HIPAA and HITRUST as compliance regime options for gcloud assured workloads create command in GA.

BigQuery

  • Added bq truncate command. This command will only be available to selected customers in private preview.
  • Added --job to bq delete.

Cloud Access Context Manager

  • Changed behavior of perimeters dry-run describe:
    • Not displaying unset fields.
    • +/- signs now are displayed at the very beginning of the line, instead of being displayed right in front of the resource text.
    • Extra space added in front of top-level fields like names/title/type to align text.

Cloud Dataflow

  • Promoted gcloud dataflow snapshots to GA.

Cloud Domains

  • Fixed issue where multiple address line fields were not supported in commands with interactive prompts:
    • gcloud beta domains registrations register
    • gcloud beta domains registrations configure contacts

Cloud Filestore

  • Promoted gcloud filestore backups to GA.
  • Added gcloud filestore instances restore to enable restoring a Cloud Filestore instance from a backup.
  • Added support for creating Filestore instances from backup using gcloud filestore instances create.
  • Promoted --source-backup and --source-backup-region flags to GA to specify backup details; these flags should be used in conjunction with --file-share flag.

Cloud Memorystore

  • Added support for Redis 6.x.

Cloud Resource Settings

  • Promoted gcloud resource-settings to GA.

Cloud Services

  • Promoted gcloud services vpc-peerings delete to beta.

Compute Engine

  • Promoted --redundant-interface, --subnetwork and --subnetwork-region flags of gcloud compute routers add-interface to beta.
  • Promoted --instance and --instance-zone flags of gcloud compute routers add-bgp-peer to beta.
  • Promoted --interface-names of gcloud compute routers remove-interface to beta.
  • Promoted --peer-names of gcloud compute routers remove-bgp-peer to beta.

Essential Contacts

  • Promoted gcloud essential-contacts to beta.

Service Directory

  • Added --network flag to gcloud service-directory endpoints create command in beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

336.0.0 (2021-04-13)

Assured Workloads

  • Promoted --resource-settings of gcloud assured workloads create to GA.

Cloud Composer

  • Added support of Airflow 2.0 CLI nested commands to gcloud composer environments run.
  • Updated gcloud beta composer environments run my-environment upgrade_check to run upgrade check to Airflow 2.0 for Composer environments with Airflow 1.10.15+.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.14
    • Fix header parsing causing permission denined errors with Firestore JS SDK v8.3.2.

Cloud Storage

  • Updated gsutil component to 4.61.

Compute Engine

  • Added --request-coalescing to gcloud beta compute backend-services create, gcloud beta compute backend-services update, gcloud beta compute backend-buckets create and gcloud beta compute backend-buckets update.
  • Added cdnPolicy.requestCoalescing field support to gcloud beta compute backend-services import.
  • Promoted --target_distribution_shape flag of gcloud compute instance-groups managed create and update to GA. Added --compute-service-account flag to gcloud compute instances import.
  • Removed unneeded curl progress output from gcloud compute ssh with `--internal-ip flag.
  • Promoted --zone flag to gcloud beta compute images describe-from-family.

Config Connector

Kpt

  • Updated kpt from v0.38.1 to v0.39.0.
  • Updated import of cli-utils from v0.23.5 to v0.24.0.
  • Updated import of kyaml from v0.10.13 to v0.10.15.
  • Updated import of cmd/config from v0.9.5 to v0.9.7.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

335.0.0 (2021-04-06)

Breaking Changes

  • (Cloud Bigtable) Deprecated --cluster, --cluster-num-nodes and --cluster-zone flags of
  • (Cloud Bigtable) gcloud bigtable instances create. Use --cluster-config instead.
  • (Cloud Bigtable) Deprecated --instance-type flag of gcloud bigtable instances create. All
  • (Cloud Bigtable) instances are now of type PRODUCTION.

App Engine

Cloud Access Context Manager

  • Promoted ingress-policies and egress-policies flags of gcloud access-context-manager perimeters to GA.
  • Support displaying Ingress and EgressPolicies for:
    • gcloud access-context-manager perimeters describe.
    • gcloud access-context-manager perimeters dry-run describe.

Cloud Asset Inventory

  • Added --access-time flag to gcloud asset analyze-iam-policy and gcloud asset analyze-iam-policy-longrunning.

Cloud Bigtable

  • Added --kms-key, --kms-keyring, --kms-location and --kms-project flags to gcloud bigtable clusters create for alpha, beta and GA for creating CMEK-protected clusters.
  • Added key kms-key to --cluster-config flag of gcloud bigtable instances create, for creating CMEK-protected clusters.
  • Promoted --cluster-config flag of gcloud bigtable instances create to beta and GA.
  • Promoted gcloud bigtable instances tables describe to beta and GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.13
    • Reset document create time when a document is deleted and re-created in a single transaction.

Compute Engine

  • Promoted the following flags in gcloud compute backend-services create, gcloud compute backend-services update, gcloud compute backend-buckets create and gcloud compute backend-buckets update to GA:
    • --[no-]negative-caching
    • --[no-]negative-caching-policy
    • --[no-]serve-while-stale
    • --[no-]bypass-cache-on-request-headers
  • Added the following fields to gcloud compute backend-services import and gcloud compute backend-services export:
    • cdnPolicy:
    • negativeCaching
    • negativeCachingPolicy
    • bypassCacheOnRequestHeaders
    • serveWhileStale
  • Added support for authorizationPolicy and serverTlsPolicy for gcloud compute target-https-proxies import command.
  • Added --iap-tunnel-disable-connection-check flag to gcloud compute start-iap-tunnel to disable the initial connection check in alpha and beta.
  • Promoted gcloud compute public-delegated-prefixes to GA.
  • Added --network-interface=nic-type flag to gcloud compute instance-templates create for beta and GA.
  • Promoted --image-family-scope flag to gcloud beta compute instances create and gcloud beta compute disks create.

Policy Simulator

  • Added gcloud iam simulator replay-recent-access which simulates policy changes by replaying policy overlay on recent access.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

334.0.0 (2021-03-30)

Breaking Changes

  • (Cloud Build) Modified the positional argument WORKER_POOL to be required for commands in the command group gcloud builds worker-pools (except for gcloud builds worker-pools list).
  • (Cloud Run) Deprecated --connectivity flag of gcloud run deploy and gcloud run services update. --connectivity will continue to be supported. --connectivity only applies to --platform=gke and --platform=kubernetes. The new --ingress flag applies to all platforms and provides equivalent functionality. Prefer to use --ingress. Use --ingress=all in place of --connectivity=external. Use --ingress=internal in place of --connectivity=internal.
  • (Dataproc Metastore) Deprecated gcloud beta metastore services imports command group. Use gcloud beta metastore services import command group instead.

Cloud SDK

  • Cloud SDK supports Apple Silicon. Some native components currently rely on Rosetta 2.

AI

  • Modified --region flag of gcloud beta ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud beta ai models to include new online prediction regions.

BigQuery

  • Added --max_concurrency flag to mk and update reservation commands.
  • Added --parquet_enum_as_string and --parquet_enable_list_inference flags to load and mk --table commands for Parquet format. Run bq load --help or bq mk --help for details.
  • Removed old oauth2client_4_0 compatibility shim.

Cloud On Demand Scanning

  • Promoted the On-Demand Scanning API commands to GA.
    • gcloud artifacts docker images scan to scan a container image.
    • gcloud artifacts docker images get-operation to retrieve an operation.
    • gcloud artifacts docker images list-vulnerabilities to retrieve scan results.
  • Improved error messages for local-extract.

Cloud Run

  • Promoted --ingress flag of gcloud run deploy and gcloud run services update to GA.

Cloud SQL

  • Promoted Active Directory integration to beta.

Cloud Security Command Center

  • Updated the following commands to support project/folder parent types:
    • gcloud scc findings create
    • gcloud scc findings group
    • gcloud scc findings list
    • gcloud scc findings list-marks
    • gcloud scc findings update
    • gcloud scc findings update-marks
    • gcloud scc assets describe
    • gcloud scc assets group
    • gcloud scc assets list
    • gcloud scc assets list-marks
    • gcloud scc assets update-marks
  • Assets and findings will now have canonicalName field in their response.

Compute Engine

  • Added --service-account, --no-service-account, --scopes and --no-scopes flags to gcloud beta compute instances import.
  • Added --service-directory-registration flag to gcloud compute forwarding-rules create --global --target-google-apis-bundle=<bundle> in beta and GA.
  • Added --target-google-apis-bundle to gcloud compute forwarding-rules create.
  • Added PRIVATE_SERVICE_CONNECT as a global address purpose to gcloud compute addresses create.
  • Promoted --post-key-reservation-action-type flag to beta for gcloud compute instances create.
  • Promoted --post-key-reservation-action-type flag to beta for gcloud compute instance-templates create.
  • Added --resource-policies flag for gcloud compute instance-templates create command in alpha, beta, and GA.
  • Added --service-account, --no-service-account, --scopes and --no-scopes flags for gcloud compute machine-images import in beta.
  • Fixed failure to pipe into ssh when --internal-ip flag is specified.
  • Added gcloud compute target-https-proxies import method which creates or updates a target HTTPS proxy resource in Compute Engine
  • Promoted gcloud compute public-advertised-prefixes to GA.

Config Connector

Database Migration

  • Launched Database Migration.

Dataproc Metastore

  • Added --dump-type flag to gcloud beta metastore services export gcs to allow specification of the database dump type to export.
  • Added --release-channel flag to gcloud beta metastore services create.
  • Added the following commands to work with Dataproc Metastore services:
    • gcloud beta metastore services import
    • gcloud beta metastore services restore
    • gcloud beta metastore services backups describe
    • gcloud beta metastore services backups list
    • gcloud beta metastore services backups create
    • gcloud beta metastore services backups delete
  • Promoted gcloud metastore to GA.

Secret Manager

  • Added --next-rotation-time flag to gcloud beta secrets create, gcloud secrets create gcloud beta secrets update and gcloud secrets update commands to specify the timestamp at which to send SECRET_ROTATE notification.
  • Added --rotation-period flag to gcloud beta secrets create, gcloud secrets create gcloud beta secrets update and gcloud secrets update commands to specify a duration between secret rotation notifications.
  • Added --remove-next-rotation-time flag to gcloud beta secrets update and gcloud secrets update command to remove scheduled rotation time from a secret if it has one.
  • Added --remove-rotation-period flag to gcloud beta secrets update and gcloud secrets update command to remove a set rotation period if it has one.
  • Added --remove-rotation-schedule flag to gcloud beta secrets update and gcloud secrets update command to remove the rotation policy from a secret if it has one.
  • Promoted --expire-time flag of gcloud secrets create and gcloud secrets update to GA.
  • Promoted --ttl flag of gcloud secrets create and gcloud secrets update to GA.
  • Promoted --remove-expiration flag of gcloud secrets update to GA.
  • Promoted --topics flag of gcloud secrets create to GA.
  • Promoted the following flags to GA for gcloud secrets update:
    • --add-topics
    • --remove-topics
    • --clear-topics

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

333.0.0 (2021-03-23)

Cloud SDK

  • --impersonate-service-account flag can accept a list of service accounts for impersonation delegation.

Assured Workloads

  • Added --resource-settings flag to gcloud assured workloads create command.
  • Added US_REGIONAL_ACCESS as compliance regime option for gcloud assured workloads create command.
  • Added HIPAA and HITRUST as compliance regime options for gcloud assured workloads create command.

Cloud Build

  • Updated gcloud builds submit and gcloud builds log to tell users when they cannot read the default logs bucket because of VPC-SC.

Cloud Dataflow

  • Added flex template docker container building support for python in build command gcloud beta dataflow flex-template build.

Cloud Dataproc

  • Added gcloud dataproc clusters stop and gcloud dataproc clusters start which stop and start clusters.
  • Promoted --dataproc-metastore flag of gcloud dataproc clusters create to GA.
  • Promoted --dataproc-metastore flag of gcloud dataproc workflow-templates set-managed-cluster to GA.
  • Added --secure-multi-tenancy-user-mapping and --identity-config-file flags to gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.

Cloud Logging

  • Promoted gcloud logging views command group to GA.

Cloud On Demand Scanning

  • Improved error messages for local-extract.

Cloud Pub/Sub

  • Added --starting-offset flag to gcloud pubsub lite-subscriptions create to allow subscriptions to be created at HEAD.

Cloud Storage

  • Updated gsutil component to 4.60.

Compute Engine

  • Fixed gcloud compute url-maps import for correctly removing top-level properties of an existing Url map, when they are not specified in the YAML file.
  • Updated import and export schemas for:
    • gcloud compute forwarding-rules.
    • gcloud compute backend-services.
  • Added --compute-service-account flag for gcloud compute instances import in beta.
  • Added --compute-service-account flag for gcloud compute machine-images import in beta.
  • Promoted --description and --family flags of gcloud compute images update to GA.
  • Promoted the following flags in gcloud compute instance-groups managed set-autoscaling to GA:
    • --set-schedule
    • --schedule-cron
    • --schedule-duration-sec
    • --schedule-min-required-replicas
    • --schedule-time-zone
    • --schedule-description For more information see <https://cloud.google.com/compute/docs/autoscaler/scaling-schedules>.
  • Promoted the following flags in gcloud compute instance-groups managed update-autoscaling to GA:
    • --min-num-replicas
    • --max-num-replicas
    • --set-schedule
    • --update-schedule
    • --disable-schedule
    • --enable-schedule
    • --remove-schedule
    • --schedule-cron
    • --schedule-duration-sec
    • --schedule-min-required-replicas
    • --schedule-time-zone
    • --schedule-description For more information see <https://cloud.google.com/compute/docs/autoscaler/scaling-schedules>.

Config Connector

Kpt

  • Updated kpt from v0.37.1 to v0.38.1.
  • Updated import of cli-utils from v0.21.1 to v0.23.5.
  • Updated import of kyaml from v0.9.5 to v0.10.13.
  • Updated import of cmd/config from v0.8.5 to v0.9.5.

Miscellaneous

  • Reordered contents of help text pages to make "Examples" section more prominent.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

332.0.0 (2021-03-16)

Breaking Changes

  • (App Engine) Updated backend when using gcloud app deploy <queue|cron>.yaml. The only noticeable change is that when removing queues from the queues YAML file, previously the queues were marked as "DISABLED" but now they are marked "PAUSED". In terms of functionality, there is no difference between the two.

Cloud SDK

  • Added support for environment variable CLOUDSDK_ENCODING to set the IO encoding for gcloud. UTF-8 will be the default IO encoding on Unix.

App Engine

Artifact Registry

  • Promoted PyPI repo creation with gcloud artifacts repositories create to beta and GA.
  • Promoted gcloud artifacts print-settings pypi to beta and GA.

Cloud Dataflow

  • Added default runtime environment parameters support in gcloud dataflow flex-template build.

Cloud Functions

  • Promoted --security-level flag of gcloud functions deploy to GA.
  • Modified --limit of gcloud functions logs read such that the most recent entries in the given time range up to the limit are returned rather than the earliest.

Cloud Org Policy

  • Promoted gcloud org-policies command group to GA.

Cloud Run

  • Promoted --tag flag of gcloud run deploy to GA.
  • Promoted --tag flag of gcloud run services update to GA.
  • Promoted --to-tags, --set-tags, --update-tags, --remove-tags, and --clear-tags flags of gcloud run services update-traffic to GA.

Cloud Spanner

  • Promoted CMEK flags to beta and GA in gcloud spanner commands.

Compute Engine

  • Added --byol flag for:
    • gcloud compute images import in beta
    • gcloud compute instances import in beta
    • gcloud compute machine-images import in beta
  • Promoted gcloud compute instances remove-resource-policies command to GA.
  • Added --boot-disk-provisioned-iops to gcloud compute instances create and gcloud compute instance-templates create to allow specifying provisioned IOPS for attached disks.
  • Promoted gcloud compute instances create --network-performance-configs flag to beta.
  • Promoted gcloud compute instances bulk create to beta and GA.

Dataproc Metastore

  • Added --database-dump-type flag to gcloud beta metastore services imports create to set the database dump type.
  • Deprecated --database-type flag gcloud beta metastore services imports create. Use --database-dump-type flag to specify the database dump type.
  • Added gcloud beta metastore services imports update which updates a metadata import.
  • Added --data-catalog-sync flag for gcloud metastore services in beta.

Identity Groups

  • Added --group-type flag to gcloud identity groups create to automatically set group labels based on the type of group being created.

Kubernetes Engine

  • Promoted --enable-l4-ilb-subsetting of gcloud container clusters create and gcloud container clusters update to beta.
  • Added --node-labels, --node-taints, and --tags flags to gcloud beta container node-pools update to update the node labels, node taints and network tags on an existing node pool.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

331.0.0 (2021-03-09)

AI

  • Added --autoscaling-metric-specs flag to gcloud beta ai endpoints deploy-model.

App Engine

  • Updated gcloud app instances list and gcloud app instances describe to return the auto healer health check (i.e. liveness) for the flexible environment.

Assured Workloads

  • Promoted gcloud assured command group to GA. Commands in this group provide the ability to read and modify Assured data controls.
  • Promoted gcloud assured workloads command group to GA. Commands in this group provide the ability to manage Assured Workloads environment resources.
  • Promoted gcloud assured operations command group to GA. Commands in this group provide the ability to view Assured Workloads operation resources.

Cloud Build

  • Fixed issue where gcloud beta builds worker-pools commands fail to wait for long-running operations to finish.

Cloud Dataproc

  • Added a confirmation prompt to gcloud datapoc clusters enable-personal-auth-session and gcloud beta datapoc clusters enable-personal-auth-session.

Cloud Healthcare

  • Promoted gcloud healthcare consent-stores to GA.

Cloud On Demand Scanning

  • Updated the local-extract component to version 0.1.5, to improve error handling in certain cases.

Cloud Resource Manager

  • Updated gcloud resource-manager org-policies describe to throw an error for unsupported policy versions.

Cloud Run

  • Promoted --min-instances flag of gcloud run deploy and gcloud run services update to GA for --platform=managed.

Cloud Services

  • Support service usage check on gcloud services disable command.

Compute Engine

  • Promoted --provisioned-iops flag of gcloud compute disks create to GA.
  • Promoted gcloud compute public-delegated-prefixes to beta.

Config Connector

Identity and Access Management

  • Added gcloud iam workload-identity-pools which enables granting on-premises or multi-cloud workloads access to Google Cloud resources, without using a service account key.

Kubernetes Engine

  • Added gcloud container clusters create-auto for creating Autopilot clusters to the beta and GA tracks.

Network Management

  • Added IPv6 support for Network Load balancers to gcloud compute forwarding-rules command group.

Secret Manager

  • Promoted gcloud secrets replication command group to GA.
  • Added --replication-policy-file flag to gcloud secrets create command to specify replication policy using a JSON or YAML file.
  • Added --kms-key-name flag to gcloud secrets create command to specify a KMS key when creating an automatic secret.

VPC Access

  • Promoted VPC connector --subnet flag from beta to GA.
  • Modified gcloud compute networks vpc-access connectors create to accept an optional --subnet flag to specify a subnet to house the connector rather than requiring --network and --range flags.
    • If the provided subnet is a shared subnet, use the flag --subnet-project to specify the VPC host project ID.

Workspace Add Ons

  • Promoted gcloud workspace-add-ons commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

330.0.0 (2021-03-02)

Breaking Changes

  • (Cloud Code) Downgraded --env-vars and --env-vars-file to alpha.

Cloud SDK

  • Added bundled Python 3 option for macOS installations. See gcloud topics startup and https://cloud.google.com/sdk/docs/install#mac.
  • Fixed issue where gcloud emulators ... start commands would leave behind emulator processes when Ctrl+C was pressed.

Cloud Dataproc

  • Added --cluster-labels flag to gcloud dataproc jobs submit to allow jobs to be placed on a cluster matching specified cluster labels.

Cloud Healthcare

  • Added --filter-config-gcs-uri flag to the following commands:
    • gcloud beta healthcare dicoms-stores export gcs
    • gcloud beta healthcare dicoms-stores export bq

Cloud On Demand Scanning

  • Updated some error messages to be more clear.
  • Added a prompt to the beginning of gcloud beta artifacts docker images scan to install the local-extract component.

Cloud Pub/Sub

  • Promoted --partitions flag in gcloud pubsub lite-topics update to GA.
  • Added --view flag to gcloud beta schemas list to allow retrieval of schema definitions.

Cloud Run

  • Fixed bug on force-override prompt for gcloud beta run domain-mappings create where it would fail to re-create the domain mapping after deleting the one without the override.

Compute Engine

  • Promoted gcloud compute public-advertised-prefixes to beta.
  • Added --request-coalescing to gcloud beta compute backend-services create, gcloud beta compute backend-services update, gcloud beta compute backend-buckets create and gcloud beta compute backend-buckets update.
  • Promoted support for gce-vm-ip for --network-endpoint-type for gcloud compute network-endpoint-groups create and gcloud compute network-endpoint-groups update to GA.

Config Connector

Kubernetes Engine

  • Added --pod-ipv4-range and --create-pod-ipv4-range flags to gcloud beta container node-pools create to configure pod ranges for the node pools.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

329.0.0 (2021-02-23)

Breaking Changes

  • (Container Registry) Fixed issue where gcloud containers images list-tags doesn't show occurrence metadata.

AI

  • Added --network and --service-account to gcloud beta ai <custom-jobs|hp-tuning-jobs> create to allow specifying a peering network and user service account.

Cloud Asset Inventory

  • Added --relationship-type flag to gcloud beta asset export.

Cloud Code

  • Promoted gcloud code dev and gcloud code clean-up to beta.

Cloud Composer

  • Added --kms-key flag to gcloud composer environments command to specify the Customer-managed KMS key name to use for encrypting the Composer environment.

Cloud Functions

  • Fixed a performance issue in gcloud functions logs read by adding a default value of 1 week ago for --start-time.

Cloud Memorystore

  • Added --transit-encryption-mode flag to gcloud redis instances create to allow enabling Redis TLS with server authentication when creating a new instance.
  • Modified --region flag to be optional in gcloud memcache. If not specified, use the value in memcache/region property.

Cloud Pub/Sub

  • Added gcloud beta pubsub schemas validate-schema to allow validation of PROTOCOL_BUFFER and AVRO schemas.
  • Added gcloud beta pubsub schemas validate-message to allow validation of messages against an existing or inline schema.

Compute Engine

  • Promoted --provisioned-iops flag of gcloud compute disks create to beta.
  • Promoted gcloud compute url-maps validate to GA.
  • Promoted labels-related flags for gcloud compute forwarding-rules update to GA.
  • Modified --short-name of gcloud compute firewall-policies create to be a required flag.
  • Promoted --proxy-bind flag of gcloud compute target-tcp-proxies create to GA.
  • Allow --target-tcp-proxy for gcloud compute forwarding-rules create and set-target with specified -load-balancing-scheme=INTERNAL_SELF_MANAGED.
  • Added functionality in gcloud beta compute images import to import images from AWS.
  • Promoted gcloud compute resource-policies create instance-schedule command to GA.

Identity Groups

  • Added --dynamic-user-query flag to gcloud identity update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

328.0.0 (2021-02-16)

Breaking Changes

  • (App Engine) Changed error message for Permissions error fetching application to indicate which account might be missing roles/appengine.deployer.
  • (Miscellaneous) Added support for colored output using ANSI escape sequences on modern versions of Windows. Use gcloud config set disable_color true to disable this behavior.

App Engine

Artifact Registry

  • Modified gcloud artifacts docker images describe to group vulnerability occurrences by effective severity instead of severity.

BigQuery

  • Expose json_extension flag in CLI which can be used to load newline-delimited GeoJSON files (in combination with source_format=NEWLINE_DELIMITED_JSON).

Cloud Composer

  • Modified --image-version and --airflow-version flags of gcloud beta composer environments update to be mutually exclusive.
  • Added the following flags to gcloud composer environments create and gcloud composer environments update to manage machine types for web server and Cloud SQL:
    • --cloud-sql-machine-type
    • --web-server-machine-type

Cloud Logging

  • Promoted the gcloud alpha logging tail command to beta.

Cloud Memorystore

  • Promoted gcloud memcache to GA.
  • Added apply-software-update command to apply latest available software update to Memcached instance and nodes.

Cloud Pub/Sub

  • Added gcloud pubsub schemas to beta which allows creating and managing schemas. Schemas can be used to validate messages published to Cloud Pub/Sub topics.
  • Added --schema and --message-encoding flags to gcloud beta pubsub topics create. Messages published to the topic with the given message encoding will be validated against the specified schema.
  • Added --partitions flag to gcloud beta pubsub lite_topics update to allow increasing partitions in a Pub/Sub Lite topic.

Cloud SQL

  • Added --secondary-zone flag to gcloud sql instances <create|patch> that allows users to choose the secondary zone during create|patch of High Availability instances.

Cloud Spanner

  • Added --version-time flag to gcloud spanner backups create to allow specifying the timestamp of the data contained in the backup.
  • Added version time to the output of gcloud spanner backups list.
  • Added version retention period and earliest version time to the output of gcloud spanner databases list.

Cloud Spanner Emulator

  • Promoted gcloud emulators spanner to GA.

Cloud Storage

  • Updated gsutil component to 4.59.

Cloud TPU

  • Promoted gcloud compute tpus execution-groups to GA. Commands in this group allow convenient orchestration of TPU nodes and Compute VMs. This replaces the standalone tool ctpu.

Compute Engine

  • Promoted --provisioned-iops flag of gcloud compute disks create to beta.
  • Promoted gcloud compute url-maps validate to GA.
  • Promoted labels-related flags for gcloud compute forwarding-rules update to GA.

Config Connector

Container Analysis

  • Modified gcloud container images describe to group vulnerability occurrences by effective severity instead of severity.

Identity Groups

  • Promoted --dynamic-user-query flag of gcloud identity create to GA.

Kubernetes Engine

  • Promoted --notification-config of gcloud container clusters <create|update> to GA. This flag is used to enable notifications on a cluster. Currently Pub/Sub notifications are supported.
  • Node System Config is now GA. Added --system-config-from-file flag to gcloud container clusters create, gcloud container node-pools create, and gcloud node-pools update to configure kubelet and Linux configuration settings on nodes.

Pubsub Emulator

  • Added schema support to the Pub/Sub emulator, which allows the association of topics with schemas and the validation of published messages against them.

Secret Manager

  • Added --topics flag to gcloud beta secrets create command to specify a list of Pub/Sub topics to configure on the secret.
  • Added --add-topics flag to gcloud beta secrets update command to specify a list of Pub/Sub topics to add to the secret.
  • Added --remove-topics flag to gcloud beta secrets update command to specify a list of Pub/Sub topics to remove from the secret.
  • Added --clear-topics flag to gcloud beta secrets update command to remove all Pub/Sub topics from the secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

327.0.0 (2021-02-09)

AI

  • Added KMS args (--kms-project, --kms-location, --kms-keyring, --kms-key) to gcloud <alpha|beta> ai custom-jobs create and gcloud <alpha|beta> ai hp-tuning-jobs create to allow specifying a customer-managed encryption key.

App Engine

Artifact Registry

  • Fixed a bug that prevented users from creating an encrypted repository with a custom kms key.

Cloud DNS

  • Added gcloud beta dns response-policies create to create a new Cloud DNS response policy.
  • Added gcloud beta dns response-policies update to update a Cloud DNS response policy.
  • Added gcloud beta dns response-policies list to list all Cloud DNS response policies in a given project.
  • Added gcloud beta dns response-policies describe to describe details of a Cloud DNS response policy.
  • Added gcloud beta dns response-policies delete to delete a Cloud DNS response policy.

Cloud Functions

  • Promoted --security-level flag of gcloud functions deploy to beta.
  • Added support for google.firebase.remoteconfig.update as an event type. The full set of supported event types can be listed using gcloud functions event-types list.

Cloud Healthcare

  • Added --write-disposition flag to the following commands:
    • gcloud healthcare fhir-stores export bq
    • gcloud beta healthcare fhir-stores export bq
    • gcloud beta healthcare dicom-stores export bq
    • gcloud beta healthcare annotation-stores export bq
    • gcloud beta healthcare annotation-stores evaluate bq

Cloud Logging

  • Promoted the following commands that support Logs Buckets to GA:
    • gcloud logging buckets
    • gcloud logging read
    • gcloud logging locations describe
    • gcloud logging locations list
    • gcloud logging sinks
    • gcloud logging cmek-settings
  • Promoted --location, --bucket, and --view of gcloud logging read to GA.
  • Promoted --description and --log-filter of gcloud logging metrics to GA.
  • Promoted --use-partitioned-tables of gcloud logging sinks to GA.

Compute Engine

  • Added support for short-name=windows for --os-type flag for gcloud beta compute instances ops-agents policies. This is only valid when --agent-rules=type=ops-agent.
  • Promoted --cpu-utilization-predictive-method flag of gcloud compute instance-groups managed <set-autoscaling|update-autoscaling> to beta.
  • Added support for --asn flag for gcloud compute routers update.
  • Promoted gcloud compute security-policies update to beta.
  • Added --enable-layer7-ddos-defense flag and --layer7-ddos-defense-rule-visibility flag to gcloud beta compute security-policies update.

Events

  • Added --authentication flag to gcloud events init command.
  • Added --authentication flag to gcloud events namespaces init command.
  • Added workload-identity-gsa support to --authentication flag for gcloud events init command.
  • Modified gcloud events namespaces init command to create namespace if it is missing.

Identity Groups

  • Added --labels flag to gcloud identity groups update to allow updating the labels for a group.

Identity Groups Memberships

  • Promoted --expiration flag of gcloud identity groups memberships add to GA.
  • Promoted --update-roles-param flag of gcloud identity groups memberships modify-membership-roles to GA.

Kubernetes Engine

  • Adds new kubectl delegate version 1.19.7 for rapid channel
  • Updated default kubectl version from 1.17.14 to 1.17.17
  • Additional kubectl delegate versions:
    • kubectl.1.15 (1.15.12)
    • kubectl.1.16 (1.16.15)
    • kubectl.1.17 (1.17.17)
    • kubectl.1.18 (1.18.15)
  • Corrected passing URIs and full resource names to work with paths in the form projects/<project>/locations/<location> (in addition to the deprecated form projects/<project>/zones/<location>).

Pubsub Emulator

  • Added retry policy feature to the emulator.
  • Updated emulator to deliver dead lettered messages to original subscription in case of publishing failure to dead letter topic.
  • Added subscription name, project name, and publish time properties to dead lettered messages.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

326.0.0 (2021-02-02)

App Engine

  • Updated backend when using gcloud app deploy <queue|cron>.yaml. The only noticeable change is that when removing queues from the queues YAML file, previously the queues were marked as "PAUSED" but now they are marked "DISABLED". In terms of functionality, there is no difference between the two.

Artifact Registry

  • Fixed issue where gcloud docker images delete failed if the image is referenced by a tag.

Cloud Asset Inventory

  • Added new searchable fields (kmsKey, state, createTime and updateTime) to gcloud asset search-all-resources.

Cloud Composer

  • Added gcloud beta composer environments run my-environment upgrade_check to run upgrade check to Airflow 2.0 for Composer environments with Airflow 1.10.14+.
  • Added support of CLI commands for Airflow 2.0 to gcloud beta composer environments run.

Cloud Dataflow

  • Added streaming update and flexrs support to flex-template run command gcloud dataflow flex-template run.
  • Updated gcloud dataflow sql query command to use Dataflow Flex Templates.
  • Added --additional-experiments flag to gcloud beta dataflow jobs run.
  • Added --additional-experiments flag to gcloud dataflow jobs run.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.12
    • Fix onCreate/onWrite events triggering when deleting nonexistent documents.

Cloud On Demand Scanning

  • Launched commands for the On-Demand Scanning API in the Artifact Registry command group.
    • gcloud beta artifacts docker images scan to scan an image.
    • gcloud beta artifacts docker images get-operation to poll an ongoing scan.
    • gcloud beta artifacts docker images list-vulnerabilities to retrieve scan results.
  • Introduced a new component called local-extract to aid in the commands for the On-Demand Scanning API.

Compute Engine

  • Added --compute-service-account to gcloud beta compute images import.
  • Changed --os flag to be optional for gcloud compute images import.
  • Added --enable-nested-virtualization flag to enable or disable nested virtualization to both beta and GA for:
    • gcloud compute instances create
    • gcloud compute instances create-with-container
    • gcloud compute instance-templates create
  • Fixed issue where policies created or updated via gcloud beta compute instances ops-agents policies [create|update] that included short-name values of 'debian' or 'ubuntu' in --os-types had trouble locating packages due to a missing call to apt-get update.
  • Updated Windows PuTTY executables to version 0.74.

Config Connector

Eventarc

  • Promoted gcloud eventarc triggers to GA. Renamed --matching-criteria flag as --event-filters in GA.
  • Promoted gcloud eventarc locations to GA.

GKE Hub

  • Promoted gcloud container hub memberships register --enable-workload-identity --public-issuer-url=$URL to GA.

Notebooks

  • Promoted gcloud notebooks to GA.

VPC Access

  • Added --machine-type to gcloud beta compute networks vpc-access connectors create to support machine type configuration of the managed instance group underlying the connector.
  • Added --min-instances and --max-instances to gcloud beta compute networks vpc-access connectors create to allow users to configure the scaling bounds of the underlying managed instance group.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

325.0.0 (2021-01-26)

Breaking Changes

  • (Compute Engine) Modified enable-autoupgrade field belonging to flag --agent-rules in gcloud beta compute instances ops-agents policies create and gcloud beta compute instances ops-agents policies update from optional to required.
  • (Container Registry) Updated gcloud container images list-tags and gcloud container images describe to use ContainerAnalysis V1 API in beta.
    • Changed occurrence kind PACKAGE_VULNERABILITY to VULNERABILITY, DEPLOYABLE to DEPLOYMENT, BUILD_DETAILS to BUILD and IMAGE_BASIS to IMAGE. To construct filters on kinds, new names should be used. For example, kind="VULNERABILITY.
    • Occurrence kind names are changed in output accordingly.

App Engine

  • Updated backend when using gcloud app deploy <queue|cron>.yaml. The only noticeable change is that when removing queues from the queues YAML file, previously the queues were marked as "DISABLED" but now they are marked "PAUSED". In terms of functionality, there is no difference between the two.

Certificate Authority Service

  • Added --ignore-active-certificates flag to gcloud beta privateca roots delete and gcloud beta privateca subordinates delete to allow a Certificate Authority to be scheduled for deletion even if the Certificate Authority has un-revoked or un-expired certificates.

Cloud Composer

  • Added gcloud beta composer environments run my-environment upgrade_check to run upgrade check to Airflow 2.0 for Composer environments with Airflow 1.10.14+.

Cloud Storage

  • Updated gsutil component to 4.58.

Compute Engine

  • Promoted gcloud compute networks get-effective-firewalls command to GA.
  • Promoted gcloud compute instances network-interfaces get-effective-firewalls command to GA.
  • Promoted gcloud compute instance ops-agents to beta.
  • Promoted --compute-service-account flag to GA for gcloud compute images import.

Eventarc

  • Added --transport-topic flag to gcloud beta eventarc triggers create, to allow the use of an existing Pub/Sub topic for a trigger's transport intermediary.

Miscellaneous

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

324.0.0 (2021-01-19)

Breaking Changes

  • (Cloud Run) Updated gcloud run to require that --platform and --region be passed after all positional arguments. For example: gcloud run services describe SERVICE --platform=managed --region=us-central1. This change first appeared in version 322.0.0.

AI Platform

  • Added support for maxNodes to gcloud ai-platform versions update --config.
  • Added --bigquery-table-name and sampling-percentage to gcloud ai-platform versions update to update request logging config.

Cloud API Gateway

  • Promoted gcloud api-gateway to GA.

Cloud DNS

  • Promoted gcloud dns managed-zones to GA.
  • Added --service-directory-namespace to gcloud beta dns managed-zones create to support providing a Service Directory namespace that should be associated with the zone.

Cloud Machine Learning Engine

  • Added support for maxNodes to gcloud ml-engine versions update --config.
  • Added --bigquery-table-name and sampling-percentage to gcloud ml-engine versions update to update request logging config.

Cloud Run

  • For Cloud Run (fully managed), changed gcloud run services delete to wait until the service is no longer returned and account for the possibility of a deletion failing before reporting success. To use the previous behavior and exit without waiting for deletion to complete, use --async.

Cloud Speech API

  • Promoted --separate-channel-recognition and --audio-channel-count flags of gcloud ml speech recognize and gcloud ml speech recognize-long-running to GA.

Cloud Workflows

  • Added gcloud workflows and gcloud workflows executions commands to GA.

Compute Engine

  • Added --compute-service-account to gcloud beta compute images import.
  • Added the following flags to gcloud beta compute backend-services create, gcloud beta compute backend-services update, gcloud beta compute backend-buckets create and gcloud beta compute backend-buckets update:
    • --[no-]serve-while-stale
    • --[no-]bypass-cache-on-request-headers
  • Added the following fields to gcloud beta compute backend-services import and gcloud beta compute backend-services export:
    • cdnPolicy:
    • bypassCacheOnRequestHeaders
    • serveWhileStale
  • Promoted --compute-service-account flag to GA for gcloud compute images export.
  • Added org-firewall-policies command group.

Config Connector

Kpt

  • Updated kpt from v0.36.1 to v0.37.1.
  • Updated import of cli-utils from v0.21.0 to v0.21.1.
  • Updated import of kyaml from v0.9.3 to v0.9.5.
  • Updated import of cmd/config from v0.8.4 to v0.8.5.

Secret Manager

  • Added --expire-time flag to gcloud beta secrets create and gcloud beta secrets update commands to specify timestamp for the secret to expire.
  • Added --ttl flag to gcloud beta secrets create and gcloud beta secrets update commands to specify a duration until the secret should expire.
  • Added --remove-expiration flag to gcloud beta secrets update command to remove scheduled expiration from a secret if it has one.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

323.0.0 (2021-01-12)

Cloud Asset Inventory

  • Promote gcloud asset list command to beta.

Cloud Dataproc

  • Added --shielded-secure-boot, --shielded-vtpm, and --shielded-integrity-monitoring boolean flags to gcloud dataproc clusters create to allow users to configure Compute Engine Shielded VMs on Dataproc clusters.
  • Added --shielded-secure-boot, --shielded-vtpm, and --shielded-integrity-monitoring boolean flags to gcloud dataproc workflow-templates set-managed-cluster to allow users to configure Compute Engine Shielded VMs on Dataproc managed clusters.

Cloud Filestore

  • Added --description flag to gcloud beta filestore backups create command.

Cloud Run

  • Promoted --use-http2 flag to beta for Cloud Run (fully managed).

Config Connector

Identity Groups Memberships

  • Added gcloud identity groups memberships check-transitive-membership for ALPHA, beta and GA.
  • Added gcloud identity groups memberships get-membership-graph for ALPHA, beta and GA.
  • Added gcloud identity groups memberships search-transitive-groups for ALPHA, beta and GA.
  • Added gcloud identity groups memberships search-transitive-memberships for ALPHA, beta and GA.

Managed Active Directory

  • Added --enable-audit-logs flag to gcloud beta active-directory domains create and gcloud beta active-directory domains update.
  • Added AUDIT_LOGS_ENABLED parameter to gcloud beta active-directory domains list.
  • Added auditLogsEnabled parameter to gcloud beta active-directory domains describe.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

322.0.0 (2021-01-07)

Breaking Changes

  • (Miscellaneous) Updated --format=flattened and --format=text to print labels if provided. If a key is specified inside either of these formats but a label is not, the child key will be printed in lower snake case. This is different than done previously when the entire dotted key path was printed. Note that this change does not apply to keys whose values are objects or lists.
  • (Miscellaneous) If you would like to use the legacy version of --format=flattened or --format=text, set the following configuration: gcloud config set core/use_legacy_flattened_format true Please note that this option will not be supported indefinitely.

Cloud API Gateway

  • Promote support for gRPC scoped api-config configurations via grpc-files flag to beta.

Cloud Composer

  • Added --max-pods-per-node option to gcloud beta environment create operation. It allows to limit the number of pods that can be assigned to a single GKE node and reduce the size of IP range assigned to it.
  • Added maintenance window flags for environment creation:
    • --maintenance-window-start
    • --maintenance-window-end
    • --maintenance-window-recurrence.
  • Added maintenance window flags for environment update:
    • --maintenance-window-start
    • --maintenance-window-end
    • --maintenance-window-recurrence
    • --clear-maintenance-window.
  • Added gcloud beta composer environments restart-web-server to restart web server for a Cloud Composer environment.

Cloud Dataflow

  • Added --enable-streaming-engine flag to gcloud beta dataflow jobs run.
  • Added --enable-streaming-engine flag to gcloud dataflow jobs run.

Cloud Filestore

  • Promoted nfs-export-options key of --file-shares flag in gcloud filestore instances to GA.

Cloud Run

  • Fixed an issue with using --clear-vpc-connector when deploying new services.

Compute Engine

  • Promoted --mtu flag to beta and GA for gcloud compute interconnects attachments <dedicated|partner> <create|update>.
  • Changed --os flag to be optional for:
    • gcloud compute images import in beta
    • gcloud compute instances import in beta
    • gcloud compute machine-images import in beta
  • Promoted --maintenance-window-start-time flag in gcloud compute sole-tenancy node-groups create command to GA.
  • Added --compute-service-account to gcloud compute images export in beta.
  • Added --service-directory-registration to gcloud compute forwarding-rules create in beta.
  • Promoted --no-address flag to GA for gcloud compute images import.

Config Connector

Eventarc

  • Added gcloud beta eventarc locations list which lists locations available for Eventarc.

Miscellaneous

  • Updated gcloud to not attempt reauthentication if running in non-interactive mode.

Service Directory

  • Promoted gcloud service-directory locations to beta. Added a commands to describe/list locations.
  • Promoted gcloud service-directory namespaces to GA. Added commands to create/delete/describe/list/update/add-iam-policy-binding/get-iam-policy/set-iam-policy/remove-iam-policy-binding.
  • Promoted gcloud service-directory services to GA. Added commands to create/delete/describe/list/resolve/update/add-iam-policy-binding/get-iam-policy/set-iam-policy/remove-iam-policy-binding.
  • Promoted gcloud service-directory endpoints to GA. Added commands to create/delete/describe/list/resolve/update.
  • Updated --metadata flag to --annotations flag in GA only.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

321.0.0 (2020-12-15)

Breaking Changes

  • (Dataproc Metastore) Renamed gcloud beta metastore services update --kerberos_principal flag as --kerberos-principal.

Cloud SDK

  • Added new regions for Artifact Registry: europe-west5, asia-northeast3, us-west3, us-west4, asia-southeast2.

AI

  • Added parameters args and command to gcloud beta ai custom-jobs create which provides ability to pass the parameters to containers or python tasks.

Cloud Access Context Manager

  • Added ingress-policies and egress-policies optional flags to the following commands:
    • gcloud beta access-context-manager perimeters create.
    • gcloud beta access-context-manager perimeters update.
    • gcloud beta access-context-manager perimeters dry-run create.
    • gcloud beta access-context-manager perimeters dry-run update.
  • The ingress-policies and egress-policies flags accept paths to yaml files. The content of the yaml files should contain valid representations of IngressPolicies and EgressPolicies.
  • Added support for displaying the contents of Ingress and EgressPolicies for following commands:
    • gcloud beta access-context-manager perimeters describe.
    • gcloud beta access-context-manager perimeters dry-run describe.

Cloud Composer

  • Added the following flags to gcloud composer environments create to manage Airflow web server network access control:
    • --web-server-allow-ip
    • --web-server-deny-all
    • --web-server-allow-all
  • Added the following flags to gcloud composer environments update to manage Airflow web server network access control:
    • --update-web-server-allow-ip
    • --web-server-deny-all
    • --web-server-allow-all

Cloud Dataproc

  • Promoted --dag-timeout flag of gcloud dataproc workflow-templates create to GA.
  • Promoted gcloud dataproc workflow-templates set-dag-timeout to GA.
  • Promoted gcloud dataproc workflow-templates remove-dag-timeout to GA.
  • Added gcloud beta dataproc clusters stop and gcloud beta dataproc clusters start commands to enable stopping and starting Dataproc clusters.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.11
    • Fix listCollectionId not returning collections with nested docs.
    • Fix listDocuments with showMissing returning 500 errors.

Cloud Run

  • Added multitenancy support to gcloud run commands https://cloud.google.com/run/docs/gke/multi-tenancy.
  • Promoted --vpc-egress flag of gcloud run deploy and gcloud run services update to GA.
  • Promoted --ingress flag of gcloud run deploy and gcloud run services update to beta.

Cloud SQL

  • Promoted --type flag of gcloud sql users create to GA to support the creation of Cloud SQL database users for login using IAM database authentication.

Cloud Services

  • Promoted gcloud services peered-dns-domains <create|delete|list> to GA.
  • Promoted gcloud services vpc-peerings <enable-vpc-service-controls|disable-vpc-service-controls> to GA.

Cloud Storage

  • Updated gsutil component to 4.57.

Compute Engine

  • Removed centos-6 option from --os flag for gcloud compute images import, gcloud compute instances import, and gcloud compute machine-images import.
  • Promoted TrafficDirector proxyBind property to v1 for:
    • gcloud compute target-http-proxies import
    • gcloud compute target-http-proxies export
    • gcloud compute target-https-proxies import
    • gcloud compute target-https-proxies export
  • Added no-address flag to:
    • gcloud beta compute images import
    • gcloud beta compute machine-images import
  • Promoted --disk and --accelerator flags in gcloud compute sole-tenancy node-templates create command to GA.
  • Added --shielded-vtpm, --shielded-secure-boot, and --shielded-integrity-monitoring flags to gcloud compute instances create-with-container command.
  • Added --shielded-vtpm, --shielded-secure-boot, and --shielded-integrity-monitoring flags to gcloud compute instance-templates create-with-container command.
  • Added --shielded-vtpm, --shielded-secure-boot, --shielded-integrity-monitoring, and --shielded-learn-integrity-policy flags to gcloud compute instances update-container command.
  • Promoted the following flags in gcloud compute backend-services create, gcloud compute backend-services update, gcloud compute backend-buckets create and gcloud compute backend-buckets update to GA:
    • --cache-mode
    • --[no-]client-ttl
    • --[no-]default-ttl
    • --[no-]max-ttl
    • --[no-]custom-response-header
  • Added the following fields to gcloud compute backend-services import and gcloud compute backend-services export:
    • customResponseHeader
    • cdnPolicy:
    • cacheMode
    • clientTtl
    • defaultTtl
    • maxTtl

Events

  • Added URI support to --target-service of gcloud events triggers create.
  • Modify --type flag of gcloud events triggers create to be optional for ApiServerSource.

Kubernetes Engine

  • Added --addons=GcePersistentDiskCsiDriver to gcloud container clusters create and --update-addons=GcePersistentDiskCsiDriver to gcloud container clusters update to enable/disable the GCP Compute Persistent Disk Container Storage Interface (CSI) Driver.

Miscellaneous

  • Informational messages printed during installation are now printed to stderr, rather than stdout.

Pubsub Emulator

  • Added dead letter queue feature to the emulator.

Transcoder

  • Promoted gcloud transcoder to beta.

VPC Access

  • Added a new subnet flag to gcloud compute networks vpc-access connectors create which can be used to specify a subnet to house the connector rather than specifying network and range flags.
    • If the provided subnet is a shared subnet, the flag subnet-project has been added to specify the host project id.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

320.0.0 (2020-12-08)

AI Platform

  • Updated the following command groups to display a choice of available regions if a region hasn't been specified:

App Engine

  • Updated gcloud beta app instances list and gcloud beta app instances describe to return the auto healer health check (i.e. liveness) for the flexible environment.
  • Updated the Java SDK to version 1.9.84. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/java/release-notes.

Assured Workloads

  • Change --next-rotation-time and --rotation-period flags of gcloud assured workloads create to be optional.
  • Add --provisioned-resources-parent flag to gcloud assured workloads create command.

BigQuery

  • Added schema to jobs.query dry run reply.
  • Supported bq partition command for HOUR/MONTH/YEAR time partitioning types.
  • Supported Avro logical types for creating new external tables.
  • Added PARQUET as option for export type. This feature is still experimental.

Cloud Asset Inventory

  • Added gcloud asset bulk-export command to beta which enables the user to export GCP resource configurations in Kubernetes Resource Model or Terraform formats.

Cloud Billing

  • Promoted gcloud billing budgets to GA.
    • Renamed all-updates-rule-* flags as notifications-rule-* flags in GA.

Cloud Build

  • Added flag --no-external-ip to gcloud beta builds worker-pools <create|update> commands.

Cloud Composer

  • Added --kms-key-name flag to gcloud beta composer environments command to specify the Customer-managed KMS key name to use for encrypting the Composer environment.

Cloud DNS

Cloud Dataproc

  • Added --max-failures-total flag to gcloud dataproc jobs submit to allow jobs to be restarted in event of a failure during job execution.

Cloud Filestore

  • Removed deprecation warning of --location flag from the gcloud filestore command group.
  • Added gcloud filestore operations cancel to cancel a Filestore operation.

Cloud Functions

Cloud Key Management Service

  • Added client-side request and response integrity verification to gcloud kms encrypt, gcloud kms decrypt, gcloud kms asymmetric-sign, gcloud kms asymmetric-decrypt in beta. For more information about Cloud KMS's integrity verification API, visit https://cloud.google.com/kms/docs/data-integrity-guidelines.
  • Added --skip-integrity-verification flag to gcloud kms encrypt, gcloud kms decrypt, gcloud kms asymmetric-sign, gcloud kms asymmetric-decrypt in beta.

Cloud Logging

  • Promoted the following commands that support Logs Buckets and Logs Views to beta:
    • gcloud logging buckets
    • gcloud logging sinks
    • gcloud logging read
    • gcloud logging locations
    • gcloud logging cmek-settings Logs Buckets are GA, while Logs Views and Regionalized Logs Buckets are in Preview.
  • Promoted --use-partitioned-tables of gcloud logging sinks to beta. BigQuery sinks with partitioned tables are GA.

Cloud Memorystore

  • Added --transit-encryption-mode flag to gcloud beta redis instances create to allow enabling Redis TLS with server authentication when creating a new instance.

Cloud Source Repositories

Cloud Spanner

  • Added --strong and --read-timestamp flags to gcloud spanner databases execute-sql to give more control over the timestamp of a read-only query.
  • Added throttling state to the output of gcloud spanner operations list.

Compute Engine

  • Promoted the following flags in gcloud compute instance-groups managed set-autoscaling to GA:
    • --stackdriver-metric-single-instance-assignment
    • --stackdriver-metric-utilization-target-type
    • --stackdriver-metric-utilization-target
    • --stackdriver-metric-filter
    • --update-stackdriver-metric
    • --remove-stackdriver-metric For more information see <https://cloud.google.com/compute/docs/autoscaler/scaling-stackdriver-monitoring-metrics#per_group_metrics>.
  • Promoted --distribution-target-shape flag in gcloud compute instance-groups managed create command to beta.
  • Promoted --distribution-target-shape flag in gcloud compute instance-groups managed update command to beta.
  • Promoted --network, --subnetwork, and --private-network-ip flags of gcloud compute instances network-interfaces update to GA.
  • Promoted --enable-endpoint-independent-mapping flag of compute routers nats create and compute routers nats update to GA.
  • Promoted the following flags in gcloud compute instance-groups managed set-autoscaling to Beta:
    • --set-schedule
    • --schedule-cron
    • --schedule-duration-sec
    • --schedule-min-required-replicas
    • --schedule-time-zone
    • --schedule-description
  • Promoted the following flags in gcloud compute instance-groups managed update-autoscaling to Beta:
    • --set-schedule
    • --remove-schedule
    • --enable-schedule
    • --disable-schedule
    • --update-schedule
    • --schedule-cron
    • --schedule-duration-sec
    • --schedule-min-required-replicas
    • --schedule-time-zone
    • --schedule-description
  • Promoted --[no-]enable-logging flag of gcloud compute health-checks command group to GA.
  • Promoted gcloud compute instance-groups managed describe-instance to GA.
  • Extended gcloud beta compute target-tcp-proxies create command with --proxy-bind flag.
  • Allow --target-tcp-proxy for gcloud beta compute forwarding-rules create and set-target with specified -load-balancing-scheme=INTERNAL_SELF_MANAGED.
  • Promoted --no-address flag in gcloud beta compute instances import command to GA.

Config Connector

Dataproc Metastore

  • Added gcloud metastore services export gcs which exports metadata from a Dataproc Metastore service.
  • Removed --maintenance-window-day-of-week and --maintenance-window-hour-of-day. Use --maintenance-window-day and --maintenance-window-hour instead.
  • Fixed issue where --maintenance-window-day-of-week and --maintenance-window-hour-of-day flags were not both required in gcloud metastore services update.
  • Promoted gcloud metastore services to beta.
  • Promoted gcloud metastore imports to beta.
  • Promoted gcloud metastore operations to beta.
  • Promoted gcloud metastore locations to beta.

Events

  • Added URI support to --target-service of gcloud events triggers create.
  • Updated gcloud beta events init to set the roles monitoring.metricWriter and cloudtrace.agent for the data plane service account.

GKE Hub

  • Promoted gcloud container hub memberships get-credentials to beta.

Kubernetes Engine

  • Promoted --private-ipv6-google-access-type to GA.
  • Fixed behavior of --no-enable-stackdriver-kubernetes flag of gcloud container clusters update command group.
  • Updates default kubectl from 1.16 to 1.17.
  • Additional kubectl versions:
    • kubectl.1.15 (1.15.12)
    • kubectl.1.16 (1.16.15)
    • kubectl.1.17 (1.17.14)
    • kubectl.1.18 (1.18.12)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

319.0.0 (2020-11-17)

Breaking Changes

  • (Secret Manager) Modified gcloud secrets commands to send action taken (e.g. Created secret [my-secret].) to stderr instead of stdout.

Assured Workloads

  • Add --provisioned-resources-parent flag to gcloud assured workloads create command.

Cloud Asset Inventory

  • Added new content type os-inventory to gcloud asset export and gcloud asset get-history.

Cloud Healthcare

  • Promoted gcloud healthcare hl7v2-stores export to beta.

Cloud Pub/Sub

  • Promoted --message-filter flag of gcloud pubsub subscriptions create to GA. This feature allows users to specify a filter expression on a Cloud Pub/Sub subscription which will automatically drop messages.

Cloud Resource Manager

  • Updated the following commands to accept a domain name (e.g. "example.com") for organization in addition to the ID (e.g. 1234567890):
    • gcloud organizations describe
    • gcloud organizations get-iam-policy
    • gcloud organizations set-iam-policy

Cloud SQL

  • Added following flags to gcloud sql instances <create|patch>:
    • --retained-backups-count
    • --retained-transaction-log-days

Cloud Storage

  • Updated gsutil component to 4.55.

Compute Engine

  • Promoted --filter-direction flag in gcloud compute packet-mirrorings create/update commands to beta and GA.

Config Connector

Identity Groups

  • Updated --organization flag for gcloud identity groups create and gcloud identity groups search to accept domain names (e.g. example.com) in addition to organization IDs (e.g. 1234567890).

Kubernetes Engine

  • Added pd-balanced disk type to --disk-type of gcloud container command group.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

318.0.0 (2020-11-10)

AI

  • Updated --min-replica-count in gcloud beta ai endpoints deploy-model to be a non-required flag.
  • Added --enable-access-logging, --enable-container-logging, and --service-account flags to gcloud beta ai endpoints deploy-model.

App Engine

App Engine Flexible Environment

  • Promoted gcloud app services update to GA.

Artifact Registry

  • Added --show-occurrences flag to gcloud artifacts docker images list command that enables showing metadata from Container Analysis API.

Cloud SQL

  • Added following flags of gcloud sql instances create and gcloud sql instances update to GA:
    • --insights-config-query-insights-enabled
    • --insights-config-query-string-length
    • --insights-config-record-application-tags
    • --insights-config-record-client-address

Compute Engine

  • Added --chain-name to flag gcloud compute disks snapshot.
  • Added PRIVATE_SERVICE_CONNECT as a global address purpose to gcloud beta compute forwarding-rules create.
  • Added --target-google-apis-bundle to gcloud beta compute forwarding-rules create.
  • Added --no-address flag to gcloud beta compute instances import.

Kpt

  • Updated kpt from v0.35.0 to v0.36.1.
  • Updated import of cli-utils from v0.21.0 to v0.20.6.
  • Updated import of kyaml from v0.9.2 to v0.9.3.
  • Updated import of cmd/config from v0.8.3 to v0.8.4.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

317.0.0 (2020-11-03)

Breaking Changes

  • (App Engine Flexible Environment) Modified deployment prerequisites such that app.yaml is now required for all deployments and can no longer be added to .gcloudignore list.

AI

  • Added gcloud beta ai endpoints explain to send explanation requests to AI Platform endpoints.

Artifact Registry

  • Updated Maven print-settings with service account key to use preemptive for HEAD requests.
  • Promoted gcloud artifacts command group to GA.

Cloud Asset Inventory

  • Promoted Cloud assets analysis commands gcloud asset analyze-iam-policy and gcloud asset analyze-iam-policy-longrunning to GA.

Cloud Billing

  • Promoted gcloud billing budgets to beta.

Cloud Build

  • Added the flag --pack to the command gcloud builds submit.

Cloud Functions

  • Promoted build-env-vars flags of gcloud functions to GA.

Cloud IAM

  • Updated gcloud iam service-accounts keys list to remove the non-functional --uri flag.

Cloud Run

  • Added gcloud run regions list command to list supported Cloud Run (fully managed) regions.

Compute Engine

  • Enabled Patch support for target-http-proxies import command in GA.

Eventarc

  • Added gcloud beta eventarc which manages Eventarc resources.

Firebase Test Lab

  • Promoted --testing-special-entitlements flag of gcloud firebase test ios run to GA.
  • Increased the maximum number of test shards from 250 to 500 when using Android virtual devices.

Identity and Access Management

  • Added gcloud beta iam workload-identity-pools create-cred-config to create a credential config file that can grant non-Google Cloud workloads access to Google Cloud resources, without using a service account key.

Kubernetes Engine

  • Added --ephemeral-storage to gcloud beta container clusters create and gcloud beta container node-pools create. This flag is used to configure nodes' ephemeral storage to be backed by local SSDs.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

316.0.0 (2020-10-27)

Breaking Changes

  • (Cloud Spanner) Modified gcloud spanner operations list to disallow --database or --backup flags used in combination with --type=INSTANCE.
  • (Vmware Engine) Renamed gcloud config vmware/location to gcloud config vmware/region.

AI

  • Added gcloud beta ai hp-tuning-jobs stream-logs which provides the ability to stream logs of hyperparameter tuning jobs in AI Platform.

AI Platform

  • Added --service-account to gcloud beta ai-platform jobs submit training to allow specifying a service account to use when running the training appplication for a training job.
  • Updated --region flag of gcloud ai-platform command to include new CAIP regions.

App Engine

Artifact Registry

  • Disallowed creating CMEK-enabled repositories if Artifact Registry service account is not granted sufficient permissions.
  • Added a new command gcloud beta artifacts docker images describe that shows information of a docker image and optionally the metadata of the image from Container Analysis API.
  • Command gcloud beta artifacts docker images list will now show metadata of images from Container Analysis API as well.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager cloud-bindings to GA.

Cloud Build

  • Updated cloud-build-local to version 0.5.2. This version allows cloud-build-local to execute without a GCP account, providing a warning rather than an error.

Cloud SQL

  • Promoted Postgres 13 to GA.

Cloud Shell

  • Promoted gcloud cloud-shell command group to GA.

Cloud Storage

  • Updated gsutil component to 4.54.

Cloud Workflows

  • Added gcloud workflows executions describe-last to beta which describes the last executed workflow execution that has been cached locally.
  • Added gcloud workflows executions wait-last to beta which waits for the last cached workflow execution to complete.
  • Added gcloud workflows run to beta which executes a workflow and waits for it to complete.

Compute Engine

  • Promoted --mtu flag to beta and GA for gcloud compute networks <create|update>.
  • Promoted gcloud compute instances set-name command to beta.
  • Promoted scope option for --disk flag for gcloud compute instances create to GA.
  • Fixed incorrect error message for gcloud compute target-http-proxies.
  • Added --user-licenses flag to disk create and update command for alpha. ' when the resource already exists.
  • Added gcloud beta compute snapshots create command. It allows to create snapshots of disks.
  • Added --[no-]negative-caching and --[no-]negative-caching-policy to gcloud beta compute backend-services create, gcloud beta compute backend-services update, gcloud beta compute backend-buckets create and gcloud beta compute backend-buckets update.
  • Added cdnPolicy.negativeCaching and cdnPolicy.negativeCachingPolicy to gcloud beta compute backend-services import and gcloud beta compute backend-services export.
  • Promoted HTTP Filter related resource properties to beta for:
    • gcloud compute target-http-proxies import
    • gcloud compute target-http-proxies export
    • gcloud compute target-https-proxies import
    • gcloud compute target-https-proxies export
    • gcloud compute url-maps import
    • gcloud compute url-maps export

Config Connector

Events

  • Updated gcloud beta events triggers create to reference the serving.knative.dev/v1 APIVersion in the subscriber reference of created triggers.

Firebase Test Lab

  • Promoted --testing-special-entitlements flag of gcloud firebase test ios run to GA.

Kpt

  • Updated kpt from v0.34.0 to v0.35.0.
  • Updated import of cli-utils from v0.20.1 to v0.20.6.
  • Updated import of kyaml from v0.8.0 to v0.9.2.
  • Updated import of cmd/config from v0.8.0 to v0.8.3.

Kubernetes Engine

  • Added --release-channel=None option to gcloud container clusters create. This option is used to explicitly opt-out of release channels.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

315.0.0 (2020-10-20)

AI

  • Added gcloud beta ai custom-jobs stream-logs which provides ability to stream logs of custom jobs in AI Platform.
  • Fixed a bug where config.yaml was parsed incorrectly for command gcloud ai custom-jobs create in AI Platform.

Artifact Registry

  • Removed GCR repositories from artifacts repositories list result.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.9
    • Fix handling of != and not-in operators.

Compute Engine

  • Added sles-12, sles-sap-12, sles-sap-12-byol, sles-15, sles-sap-15, and sles-sap-15-byol options to --os flag for gcloud compute images import in GA, gcloud compute instances import in GA, and gcloud compute machine-images import in beta.
  • Promoted --disable-default-snat flag for gcloud container clusters update command to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

314.0.0 (2020-10-13)

Breaking Changes

  • (Cloud Build) cloud-build-local is no longer supported on 32-bit MacOS. The executable has been deleted from this release. The prior release, v0.5.0 included a 32-bit MacOS executable that may continue to work for some users.

Apigee

  • Added apigee surface to GA which provides access to Apigee Hybrid.
  • Added apigee organizations command group which provides access to Apigee organizations.
  • Added apigee apis command group which allows management and deployment of Apigee API proxies.
  • Added apigee environments command group which provides access to Apigee environments.
  • Added apigee deployments command group which provides access to Apigee API proxy deployments.
  • Added apigee product command group which allows creation and management of Apigee API products.
  • Added apigee developer command group which provides access to Apigee developers.
  • Added apigee applications command group which provides access to Apigee developer applications.

BigQuery

  • Fixed 'TableSnapshot with expiration' issue.

Certificate Authority Service

  • Added gcloud beta privateca certificates export command which simplifies the process of writing a PEM certificate to a file.

Cloud Build

Cloud Dataproc

  • Removed prompt from gcloud dataproc clusters stop and gcloud dataproc clusters start. The commands now run without requiring confirmation.

Cloud Domains

  • Promoted gcloud domains registrations to beta. Enables the registering and managing of domains.

Cloud Run

  • Promoted --vpc-egress flag of gcloud run deploy and gcloud run services update to beta.

Cloud Shell

  • Removed --boosted flag. An upgraded VM type is available by default.

Firebase Test Lab

  • Added --other-files flag to gcloud beta firebase test ios run. This flag lets you specify files that are pushed onto the iOS test device prior to testing.
  • Added --directories-to-pull flag to gcloud beta firebase test ios run. This flag lets you specify directories on the device that are pulled after testing and included in the test results.

Identity Groups

  • Promoted gcloud identity groups update to GA.

Identity Groups Memberships

  • Promoted gcloud identity groups memberships add to GA.
  • Promoted gcloud identity groups memberships modify-membership-roles to GA.

Notebooks

  • Fixed CMEK support and add PD_BALANCED disk support.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

313.0.1 (2020-10-07)

Cloud Dataflow

  • Fixed bug with gcloud dataflow flex-template build.

313.0.0 (2020-10-06)

Anthos

  • Fixed issue where v2alpha1 Login-Config could not be read from URL in gcloud anthos auth login command.

Artifact Registry

  • Added gcloud beta artifacts repositories update to enable changing the description and labels on an existing repository.

Certificate Authority Service

  • Added gcloud beta privateca command group which enables creating and managing private certificate authorities and certificates. For more information, see <https://cloud.google.com/certificate-authority-service/>.

Cloud API Gateway

  • Added gcloud api-gateway to beta, which adds commands for managing APIs, API Configs, and the Gateways that serve those APIs.

Cloud Build

Cloud Data Catalog

  • Promoted gcloud data-catalog taxonomies to GA release track.

Cloud Dataflow

  • Added runtime environment parameters support in gcloud dataflow flex-template run.

Cloud Memorystore

  • Added --enable-auth flag to gcloud beta redis instances create to allow enabling Redis AUTH when creating a new instance.

Added --[no-]enable-auth flag to gcloud beta redis instances update to allow enabling and disabling Redis AUTH when updating an instance.

Added gcloud beta redis instances get-auth-string command to allow viewing the AUTH string for an instance.

Cloud Pub/Sub

Cloud Run

  • Promoted --min-instances flag of gcloud run deploy and gcloud run services update to beta for --platform=managed.

Cloud SQL

  • Promoted server-level --deny-maintenance-period-start-date, --deny-maintenance-period-end-date, --deny-maintenance-period-time and --remove-deny-maintenance-period flags of gcloud sql instances create/patch to GA.

Cloud Services

  • Promoted gcloud services peered-dns-domains <create|delete|list> to beta.

Compute Engine

  • Promoted --mtu flag to beta and GA for gcloud compute networks <create|update>.
  • Promoted gcloud compute instances set-name command to beta.
  • Promoted scope option for --disk flag for gcloud compute instances create to GA.
  • Fixes incorrect error message for 'gcloud compute target-http-proxies ' when the resource already exists.

Config And Policy Automation

  • Added pkg as a gcloud component. pkg installs a group of Kubernetes Resource Model (KRM) package management tools including: kustomize, kpt, appctl and nomos.

Firebase Test Lab

  • Added --other-files flag to gcloud beta firebase test ios run. This flag lets you specify files that are pushed onto the iOS test device prior to testing.

Identity Groups

  • Promoted gcloud identity groups create to GA.
  • Promoted gcloud identity groups search to GA.

Identity Groups Memberships

  • Promoted gcloud identity groups memberships describe to GA.

Identity and Access Management

  • Added gcloud beta iam workload-identity-pools which enables you to grant on-premises or multi-cloud workloads access to Google Cloud resources, without using a service account key.

Pubsub Emulator

  • Increased server gRPC max message size to 10 MB with some buffer. Allows for publishing 10 MB messages.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

312.0.0 (2020-09-29)

Breaking Changes

  • (Stackdriver Debugger) Removed gcloud beta debug source upload command.

Cloud SDK

  • Modified the --billing-project flag and billing/quota_project property to accept service accounts when specifying a Google Cloud project for billing and quota purposes.

AI

  • Added gcloud ai surface to beta which provides access to manage entities in AI Platform.
  • Added gcloud ai custom-jobs command group which provides access to custom jobs in AI Platform.
  • Added gcloud ai hp-tuning-jobs command group which provides access to hyperparameter tuning jobs in AI Platform.
  • Added gcloud ai endpoints command group which provides access to endpoints in AI Platform.
  • Added gcloud ai models command group which provides access to models in AI Platform.

Artifact Registry

  • Added --labels flag to gcloud beta artifacts repositories create to allow labels to be added to a repository during creation.

Assured Workloads

  • Removed option limitations for --location flag of gcloud assured workloads create.

BigQuery

  • Fixed 'RedirectMissingLocation' issue.

Cloud Asset Inventory

  • Added --partition-key and --per-asset-type flags to gcloud asset export to support partitioned per-type BigQuery export.
  • Removed gcloud alpha asset analyze-iam-policy. Please use gcloud beta asset analyzer-iam-policy instead.

Cloud Billing

  • Added gcloud beta billing accounts add-iam-policy-binding and gcloud beta billing accounts remove-iam-policy-binding commands to manage IAM policy bindings on a Cloud Billing account.

Cloud Dataflow

  • Modified gcloud dataflow sql query to allow "project.dataset.table" and "dataset.table" formats for --bigquery-table argument.

Cloud Dataproc

  • Added --node-group flag to gcloud dataproc clusters create to allow clusters to be created on a Compute Engine sole-tenant node group.
  • Added --node-group flag to gcloud dataproc workflow-templates set-managed-cluster to allow managed clusters to be created on a Compute Engine sole-tenant node group.

Cloud Healthcare

  • Promoted gcloud healthcare consent-stores to beta.

Cloud Pub/Sub

  • Promoted --enable-message-ordering flag of gcloud pubsub subscriptions create and --ordering-key flag of gcloud pubsub topics publish to GA.

Cloud Workflows

  • Added gcloud beta workflows executions wait which allows the user to wait for a workflow execution to complete.

Compute Engine

  • Modified gcloud compute os-login to use the current gcloud project for quota by default. See help for billing/quota_project property or --billing-project flag for more details on how to control this behavior.
  • Added ubuntu-2004 option of --os flag for gcloud compute images import in GA, gcloud compute instances import in GA, and gcloud compute machine-images import in beta.
  • Promoted --service-proxy and --service-proxy-labels flags to GA for gcloud compute instance-templates create.

Events

  • Allow non-default brokers for events brokers create command.
  • Added brokers describe/list/delete commands.

GKE Hub

  • Promoted gcloud container hub memberships <register|unregister> commands to beta. Modified command to unsupport manage-workload-identity-bucket flag.

Identity Groups

  • Promoted gcloud identity groups describe to GA.

Identity Groups Memberships

  • Added --update-roles-params to gcloud beta identity groups memberships modify-membership-roles.
  • Promoted gcloud identity groups memberships delete to GA.
  • Promoted gcloud identity groups memberships list to GA.

Kubernetes Engine

  • Promoted --validate flag of gcloud container binauthz attestations create and gcloud container binauthz attestations sign-and-create to GA and beta, respectively.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

311.0.0 (2020-09-22)

Breaking Changes

  • (Assured Workloads) Updated gcloud assured workloads list and gcloud assured operations list commands to use separate flags for organization and location.

App Engine

  • Added gcloud beta app services update to allow management of incoming traffic to an app on a per-service basis.
  • Promoted --no-cache flag of gcloud app deploy to GA. This flag disables the build cache when deploying an app.
  • Added a warning that <application> or <version> elements within appengine-web.xml are not respected.
  • Modified the behavior of gcloud app deploy with --promote. Previously, attempting to deploy and promote a version that was already deployed, but stopped, would result in an error. Now a stopped version will be started before it is promoted.

App Engine Flexible Environment

  • Added gcloud beta app services update to allow management of incoming traffic to an app on a per-service basis.
  • Promoted --no-cache flag of gcloud app deploy to GA. This flag disables the build cache when deploying an app.
  • Modified the behavior of gcloud app deploy with --promote. Previously, attempting to deploy and promote a version that was already deployed, but stopped, would result in an error. Now a stopped version will be started before it is promoted.

Assured Workloads

  • Added multiple input format support to resource arguments for the following commands: gcloud assured workloads describe, gcloud assured workloads delete, gcloud assured workloads update, and gcloud assured operations describe.

Cloud Dataproc

  • Added --private-ipv6-google-access-type flag to gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster to allow users to configure the private IPv6 Google access type for the cluster.

Cloud Resource Manager

  • Added gcloud folders get-ancestors-iam-policy for retrieving IAM policies for a given folder and its ancestors.

Identity Groups

  • Promoted gcloud identity to GA.
  • Promoted gcloud identity groups delete to GA.

Kpt

  • Updated kpt from v0.33.0 to v0.34.0.
  • Updated import of cli-utils from v0.18.1 to v0.20.1.
  • Updated import of kyaml from v0.6.0 to v0.8.0.
  • Updated import of cmd/config from v0.6.0 to v0.8.0.

Secret Manager

  • Promoted gcloud secrets replication command group to beta.
  • Added --replication-policy-file flag to gcloud beta secrets create command to specify replication policy using a JSON or YAML file.
  • Added --kms-key-name flag to gcloud beta secrets create command to specify a KMS key when creating an automatic secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

310.0.0 (2020-09-15)

Assured Workloads

  • Added confirmation text to gcloud assured workloads delete command.

Cloud IAM

  • Changed default format for gcloud iam service-accounts list to refer to the display name of the service account as "DISPLAY NAME" instead of "NAME".

Cloud Resource Manager

  • Added a command gcloud projects get-ancestors-iam-policy for retrieving IAM policies for a given project and its ancestors.

Cloud Run

  • Added support for --format to gcloud run deploy, gcloud run services update, and gcloud run replace.

Compute Engine

  • Promoted --disk flag of gcloud compute sole-tenancy node-templates create to beta.
  • Added --accelerator flag of gcloud compute sole-tenancy node-templates create to beta.

Events

  • Added gcloud events command group to beta to allow the configuration of event-based triggers on Cloud Run for Anthos services..

Kubernetes Engine

  • Added --cloud-run-config to gcloud container clusters create and gcloud container clusters update. This flag is used to enable internal load balancer for Cloud Run cluster.
  • Enabled auto repair by default on UBUNTU and UBUNTU_CONTAINERD image.
  • Added --enable-gke-oidc to gcloud container clusters create and gcloud container clusters update. This flag is used to enable the GKE OIDC component for authentication using OIDC.
  • Added new fields to specify disk type and size configuration, shielded instance settings, and customer-managed encryption keys when using --autoprovisioning-config-file with gcloud container clusters create and gcloud container clusters update.
  • Promoted --autoprovisioning-min-cpu-platform flag of gcloud container clusters create and gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

309.0.0 (2020-09-08)

Assured Workloads

  • Added gcloud assured command group to beta. Commands in this group provide the ability to read and modify Assured data controls.
  • Added gcloud assured workloads command group to beta. Commands in this group allow you to manage Assured Workloads environment resources.
  • Added gcloud assured operations command group to beta. Commands in this group allow you to view Assured Workloads operation resources.

Cloud API Gateway

  • Promoted gcloud api-gateway to beta.
    • Modified gcloud api-gateway api-configs create. Removed --grpc-files temporarily since Cloud API Gateway does not support gRPC.
    • Modified gcloud apis create. Added the optional --managed-service flag to specify a pre-existing Google Managed Service.

Cloud Firestore

  • Promoted gcloud firestore databases to beta and GA.
  • Promoted gcloud datastore databases to beta and GA.

Cloud SQL

Compute Engine

  • Added the following flags to gcloud beta compute backend-services create, gcloud beta compute backend-services update, gcloud beta compute backend-buckets create and gcloud beta compute backend-buckets update:
    • --cache-mode
    • --[no-]client-ttl
    • --[no-]default-ttl
    • --[no-]max-ttl
    • --[no-]negative-caching
    • --[no-]negative-caching-policy
    • --[no-]custom-response-header
  • Added the following fields to gcloud beta compute backend-services import and gcloud beta compute backend-services export:
    • customResponseHeader
    • cdnPolicy:
    • cacheMode
    • clientTtl
    • defaultTtl
    • maxTtl
    • negativeCaching
    • negativeCachingPolicy

Kubernetes Engine

  • Added --notification-config to gcloud <alpha|beta> container clusters <create|update>. This flag is used to enable notifications on a cluster. Currently Pub/Sub notifications are supported.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

308.0.0 (2020-09-01)

BigQuery

  • Added 'creationTime', 'updateTime' columns for creating reservation.
  • Added 'ignore_idle_slots' flag for managing reservations idle slots behavior.
  • Supported table snapshot and restoration operation.
  • Added manual instruction for Azure connection setup.
  • Removed requirements of specifying destination table and target dataset if the scheduling query using DML or DDL with command bq query --schedule.

Cloud Data Catalog

  • Implemented the following commands for gcloud data-catalog taxonomies and gcloud data-catalog taxonomies policy-tags in beta.
    • list
    • describe
    • get-iam-policy
    • set-iam-policy
    • add-iam-policy-bindings
    • remove-iam-policy-bindings
  • Implemented export command for gcloud data-catalog taxonomies in beta.
  • Implemented import command for gcloud data-catalog taxonomies in beta.

Cloud Dataproc

  • Added --enable-kerberos flag to gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster to allow users to enable Kerberos directly without specifying --kerberos-root-principal-password-uri or --kerberos-kms-key-uri.

Cloud Firestore

  • Promoted gcloud filestore backups to beta.
  • Added gcloud beta filestore instances restore to enable restoring a Cloud Filestore instance from a backup.
  • Promoted --source-backup and --source-backup-region flags to beta to specify backup details; these flags should be used in conjunction with --file-share flag.

Cloud Healthcare

  • Promoted gcloud healthcare hl7v2-stores import to beta.

Cloud Run

  • Fixed issue when updating labels on a cluster with private visibility failed.
  • Added service endpoint visibility to gcloud run services describe output for services deployed with --platform=gke or --platform=kubernetes. Cluster-local services show Ingress: internal. Services that are not cluster-local show Ingress: all. Use --connectivity flag of gcloud run deploy or gcloud run services update to update service endpoint visibility.

Cloud Shell

  • Promoted gcloud cloud-shell command group to beta.

Compute Engine

  • Promoted compute instances get-screenshot to GA.

Notebooks

  • Added gcloud beta notebooks instances upgrade to upgrade Notebooks instance.
  • Added gcloud beta notebooks instances is-upgradeable to verify if Notebooks instance can be upgraded to a newer image.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

307.0.0 (2020-08-25)

App Engine

Cloud Dataflow

  • Promoted gcloud dataflow flex-template build to GA. Promoted gcloud dataflow flex-template run to GA.

Cloud Run

  • Changed the generation of revision names. If the generated revision name is longer than the knative resource name length limit (63 characters), shorten the part of the service name used as a prefix until the revision name is no longer than the maximum knative resource name.

Cloud SQL

  • Promoted MySQL 8 to GA.

Cloud Security Command Center

  • Promoted gcloud scc notifications command group to beta and GA.
  • Promote gcloud scc [operations|sources|findings] to beta and GA.

Cloud Storage

  • Updated gsutil component to 4.53.

Compute Engine

  • Promoted 'SHARED_LOADBALANCER_VIP' option of --purpose flag of gcloud compute addresses create to GA.
  • Promoted --logging-metadata flag to GA for
    • gcloud compute firewall-rules create
    • gcloud compute firewall-rules update.
  • Promoted --network, --subnetwork, and --private-network-ip flags of gcloud compute instances network-interfaces update to beta.

Firebase Test Lab

  • Added --additional-ipas flag to gcloud beta firebase test ios run. This flag allows you to specify additional iOS apps that should be installed on the device prior to testing.

Kpt

  • Updated kpt from v0.30.1 to v0.33.0.
  • Updated import of cli-utils from v0.15.0 to v0.18.1.
  • Updated import of kyaml from v0.3.1 to v0.6.0.
  • Updated import of cmd/config from v0.3.0 to v0.6.0.

Kubernetes Engine

  • Promoted --enable-master-global-access flag of gcloud container clusters <create|update> to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

306.0.0 (2020-08-18)

BigQuery

  • Fixed issue where ls --reservation command randomly failed with internal error.
  • Added add-iam-policy-binding and remove-iam-policy-binding commands, with support for modifying IAM policies for tables and views.

Cloud Dataproc

  • Added --dataproc-metastore flag to gcloud beta dataproc clusters create to allow clusters to be created with a Dataproc Metastore service.
  • Added --dataproc-metastore flag to gcloud beta dataproc workflow-templates set-managed-cluster to allow managed clusters to be created with a Dataproc Metastore service.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.7
    • Includes latest features and improvements from production.

Cloud Key Management Service

  • Added gcloud beta kms keys versions get-certificate-chain to retrieve HSM attestation certificate chains.

Cloud Pub/Sub

  • Promoted gcloud pubsub topics detach-subscription to GA.

Cloud Resource Manager

  • Fixed issue where gcloud resource-manager org-policies <allow|deny> gave an error when a restore default policy exists.

Cloud Security Command Center

  • Promoted gcloud scc notifications command group to beta and GA.

Cloud TPU

  • Added --use-service-networking flag to gcloud beta compute tpus create.

Compute Engine

  • Added gcloud beta compute os-config os-upgrade to enable major OS version updates on support distributions.
  • Promoted --condition flag to GA for
    • gcloud compute instances add-iam-policy-binding
    • gcloud compute instances remove-iam-policy-binding.
  • Promoted Regional Network Endpoint Groups to GA.
  • Promoted Hybrid Network Endpoint Groups to GA.
  • Promoted gcloud compute commitments create-license to beta and GA.
  • Promoted the following commands to GA:
    • gcloud compute instance-groups managed instance-configs create
    • gcloud compute instance-groups managed instance-configs update
    • gcloud compute instance-groups managed instance-configs list
    • gcloud compute instance-groups managed instance-configs delete
  • Promoted --stateful-disk and --stateful-metadata for gcloud compute instance-groups managed create-instance to GA.
  • Added --network flag to gcloud beta compute target-instances create.

Game Servers

  • Promoted gcloud game servers to GA.

Notebooks

  • Added n1-standard-1 as the default for notebook instances.
  • Added deeplearning-platform as the default for notebook instance project and environment project.

Secret Manager

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

305.0.0 (2020-08-11)

Artifact Registry

  • Added --json-key flag to gcloud beta artifacts print-settings.
  • Added bearer auth for npm support to gcloud beta artifacts print-settings.

Cloud Build

  • Added the flag --worker-pool to the command gcloud builds submit.

Cloud Dataflow

  • Added flex template docker container building support in build command gcloud beta dataflow flex-template build.

Cloud Pub/Sub

  • Replaced --scale in gcloud beta pubsub lite-topics create and gcloud beta pubsub lite-topics update with --per-partition-publish-mib and --per-partition-subscribe-mib flags.

Cloud Run

  • Added --image flag to gcloud run services update command in beta and GA to support updating container image.

Cloud Security Command Center

  • Promoted gcloud scc assets command group to beta and GA.

Compute Engine

  • Promoted cpu-overcommit-type flag of gcloud beta compute sole-tenancy node-templates create to GA.
  • Promoted --stateful-disk flag for gcloud compute instance-groups managed create to GA.
  • Promoted --stateful-disk, --remove-stateful-disk flags for gcloud compute instance-groups managed update to GA.
  • Promoted --scale-in-control flag of gcloud compute instance-groups managed set-autoscaling to GA.
  • Promoted --scale-in-control and --clear-scale-in-control flags of gcloud compute instance-groups managed update-autoscaling to GA.

Deployment Manager

  • Added --custom-certificate-authority-roots flag to gcloud deployment-manager type-providers <create|update>.

Kubernetes Engine

  • Promoted the GKE add-on ConfigConnector of gcloud container clusters <create|update> to GA. This add-on is disabled by default.
    • Use --addons=ConfigConnector to enable the add-on during cluster creation.
    • Use --update-addons=ConfigConnector=ENABLED|DISABLED to enable/disable the add-on for existing GKE clusters.
  • Updates default kubectl from 1.15 to 1.16.
  • Additional kubectl versions:
    • kubectl.1.14 (1.14.10)
    • kubectl.1.15 (1.15.12)
    • kubectl.1.16 (1.16.13)
    • kubectl.1.17 (1.17.9)
    • kubectl.1.18 (1.18.6)
  • Promoted --disable-default-snat flag of gcloud container clusters <create|update> to GA.
  • Modified GKE nodes to have serial port output logging enabled by default. To disable, use --metadata serial-port-logging-enable=false.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

304.0.0 (2020-08-04)

Cloud Build

  • Modified the command group gcloud beta builds worker-pools such that all underlying commands now use a regional Cloud Build API endpoint (instead of the global one).
  • Modified the command group gcloud builds such that all underlying commands may optionally use a regional Cloud Build API endpoint (instead of the global one). This is controlled by the new flag --region, as well as the configuration of submitted builds.

Cloud Composer

  • Fixed a bug where an argument added to backfill subcommand of gcloud composer environments run fails in older Airflow versions.
  • Added --web-server-machine-type flag to gcloud beta composer environments commands to specify the machine type used by the Airflow web server.

Cloud IAM

  • Promoted gcloud iam service-accounts keys upload to GA.

Compute Engine

  • Added gcloud beta compute os-config os-upgrade to enable major OS version updates on support distributions.
  • Promoted gcloud compute diagnose export-logs to GA.

Firebase Test Lab

  • Added the command gcloud [alpha|beta] firebase test ip-blocks list, which retrieves a catalog of IP blocks used by Firebase Test Lab devices.

Kubernetes Engine

  • Added --node-group to gcloud container node-pools create. This flag is used to enable the Compute Engine sole tenant node feature on Kubernetes Engine node pools.

Secret Manager

  • Updated the following commands to better support IAM Conditions:
    • gcloud secrets get-iam-policy outputs conditions associated with each binding.
    • gcloud secrets set-iam-policy accepts policies with conditional bindings.
    • gcloud secrets <add|remove>-iam-policy-binding accepts conditional bindings.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

303.0.0 (2020-07-28)

AI Platform

  • Promoted --kms-key flag of gcloud ai-platform jobs submit training to GA.

Cloud Bigtable

  • Promoted gcloud bigtable backups commands group to GA.
  • Promated gcloud bigtable instances tables restore and gcloud bigtable instances tables list to GA.

Cloud Build

  • Added --comment-control flag option COMMENTS_ENABLED_FOR_EXTERNAL_CONTRIBUTORS_ONLY to gcloud builds triggers create github in alpha and beta.

Cloud Composer

  • Added --cloud-sql-machine-type flag to gcloud beta composer environments commands to specify the Cloud SQL machine type used by the Airflow database.

Cloud Data Catalog

  • Added --restricted-locations to gcloud data-catalog search to enable regional search.

Compute Engine

  • Added --log-location flag to gcloud compute instances import and gcloud beta compute machine-images import.
  • Promoted --condition flag for
    • gcloud compute images add-iam-policy-binding
    • gcloud compute images remove-iam-policy-binding to GA.
  • Promoted --rollout-mode, --rollout-disruption-budget, and --rollout-disruption-budget-percent flags of gcloud compute os-config patch-jobs execute to GA.
  • Allowed using user-data key in metadata with gcloud compute instances create-with-container.
  • Promoted --condition flag to GA for
    • gcloud compute images add-iam-policy-binding
    • gcloud compute images remove-iam-policy-binding
    • gcloud compute snapshots add-iam-policy-binding
    • gcloud compute snapshots remove-iam-policy-binding.

Kubernetes Engine

  • Added --identity-provider to gcloud beta container clusters create and gcloud beta container clusters update. This flag is used to enable a 3P identity provider on a cluster.
  • Added flag --enable-dataplane-v2 to gcloud <alpha|beta> container clusters create. This flag allows GKE clusters to use the new and improved datapath with additional visibility and observability features.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

302.0.0 (2020-07-21)

AI Platform

App Engine

  • Added support for directly deploying the Gradle project 'build.gradle' file.

Cloud Asset Inventory

  • Modified gcloud asset search-all-resources and gcloud asset search-all-iam-policies to apply --page-size=20 by default.

Cloud Dataproc

  • Added --dag-timeout flag to gcloud dataproc workflow-templates create to allow timeouts to be set on Workflow jobs DAGs.
  • Added gcloud dataproc workflow-templates set-dag-timeout to allow DAG timeouts to be updated or set on existing Workflows.
  • Added gcloud dataproc workflow-templates remove-dag-timeout to allow DAG timeouts to be removed from Workflows.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.5
    • Bug fix for camel case query parameters
    • Add support for != style queries

Cloud Pub/Sub

  • Promoted --enable-message-ordering flag of gcloud pubsub subscriptions create and --ordering-key flag of gcloud pubsub topics publish to beta.

Cloud Resource Manager

  • Promoted gcloud resource-manager org-policies command group to GA.

Cloud Run

  • Promoted --tag flag of gcloud run deploy to beta.
  • Promoted --tag flag of gcloud run services update to beta.
  • Promoted --to-tags, --set-tags, --update-tags, --remove-tags, and --clear-tags flags of gcloud run services update-traffic to beta.

Cloud SQL

  • Promoted server-level --collation flag of gcloud sql instances create to GA.

Cloud Storage

  • Updated gsutil component to 4.52.

Compute Engine

  • Promoted --rollout-mode, --rollout-disruption-budget, and --rollout-disruption-budget-percent flags of gcloud compute os-config patch-jobs execute to beta.
  • Promoted gcloud compute health-checks <create|update> grpc commands to GA.

Firebase Test Lab

  • Added --grant-permissions flag to gcloud beta firebase test android run. This flag allows you to specify if runtime permissions should be granted prior to running a test.
  • Modified the limit for --num-uniform-shards and --test-targets-for-shard to be 250 when no physical devices are selected.

Kubernetes Engine

  • Added flag --private-ipv6-access-type of gcloud container clusters create and gcloud container clusters update to beta. This flag is used to allow GKE pods to connect to Google services over a low latency, secure, IPv6 network path.
  • Promoted --release-channel of gcloud container clusters create and gcloud container clusters update to GA. This flag is used to configure the cluster release channel.

Secret Manager

  • Updated gcloud secrets create command to default to an automatic replication policy if a replication policy is not provided.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

301.0.0 (2020-07-14)

Cloud SDK

  • Prefer Python 3 for deb and rpm package installations. The Cloud SDK now prefers Python 3 for bq, gcloud, and gsutil on all installation paths. See gcloud topic startup for information on configuring the Python interpreter used by the Cloud SDK.

Anthos

  • Upgraded anthos-auth component to version 1.1.2.
  • Added ldap support to gcloud anthos auth login.

App Engine

Artifact Registry

  • Added support for CMEK repository creation with customer managed encryption key.
  • Added gcloud beta artifacts repositories describe.

Compute Engine

  • Promoted --description and --family flags of gcloud compute images update to beta.
  • Promoted --target-grpc-proxy for gcloud compute forwarding-rules <create|set-target> to GA.
  • Promoted documentation for --protocol to include GRPC for gcloud compute backend-services <create|update> to GA.
  • Promoted gcloud compute target-grpc-proxies <create|delete|describe|list> to GA.
  • Added only-scale-out mode enum value to gcloud compute instance-groups managed <set|update>-autoscaling . The only-scale-out value directly replaces and deprecates the only-up value.

Kubernetes Engine

  • Promoted NodeLocalDNS Addon to GA. Use NodeLocalDNS addons with gcloud container clusters create and gcloud container clusters update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

300.0.0 (2020-07-08)

Breaking Changes

  • (Recommender) Modified headers in output of gcloud recommender recommendations list.
    • Renamed ID to RECOMMENDATION_ID and STATE to RECOMMENDATION_STATE.
  • (Recommender) Modified headers in output of gcloud recommender insights list.
    • Renamed ID to INSIGHT_ID and STATE to INSIGHT_STATE.

Cloud Dataproc

  • Added --temp-bucket flag to gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster to allow users to configure a Cloud Storage bucket that stores ephemeral cluster and jobs data, such as Spark and MapReduce history files.

Cloud SQL

  • Promoted --enable-point-in-time-recovery flag of gcloud sql instances create and gcloud sql instances patch to GA.
  • Promoted --point-in-time flag of gcloud sql instances clone to GA.

Compute Engine

  • Promoted --source-disk flag of gcloud compute disks create to GA.

Kpt

  • Updated kpt from v0.24.0 to v0.30.1.
  • Updated import of cli-utils from v0.8.0 to v0.15.0.
  • Updated import of kyaml from v0.1.8 to v0.3.1.
  • Updated import of cmd/config from v0.1.7 to v0.3.0.

Kubernetes Engine

  • Added --system-config-from-file flag to gcloud beta container clusters create, gcloud beta container node-pools create, and gcloud beta container node-pools update to configure kubelet and Linux configuration settings on nodes.

Recommender

  • Promoted gcloud recommender insights to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

299.0.0 (2020-06-30)

Cloud SDK

Anthos

  • Added gcloud anthos create-login-config command to GA.

Cloud Asset Inventory

  • Promoted Cloud assets search commands gcloud asset search-all-resources and gcloud asset search-all-iam-policies to GA.

Cloud Data Catalog

  • Added possibility to rename enum values using gcloud data-catalog tag-templates fields enum-values rename.

Cloud Dataproc

  • Promoted --enable-component-gateway flag of gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster to GA.

Cloud Run

  • Updated --service-account flag to accept a Kubernetes service account for --platform=gke and --platform=kubernetes.

Compute Engine

  • Added --interface flag to gcloud beta compute disks create.
  • Removed interface key from --disk key of gcloud beta compute instances create.
  • Promoted gcloud compute security-policies list-preconfigured-expression-sets to GA.
  • Promote --condition flag to GA for the following commands:
    • gcloud compute disks add-iam-policy-binding
    • gcloud compute disks remove-iam-policy-binding
    • gcloud compute instance-templates add-iam-policy-binding
    • gcloud compute instance-templates remove-iam-policy-binding.
  • Added --service-proxy and '--service-proxy-labels' flags to gcloud beta compute instance-templates create to populate the fields in Instance Template required to automatically deploy and configure the service proxy and service-proxy-agent.
  • Added --chain-name flag gcloud beta compute disks snapshot.
  • Promoted Regional Network Endpoint Groups to beta.

Kubernetes Engine

  • Promoted NodeLocalDNS Addon to GA. Use NodeLocalDNS addons with gcloud container clusters create and gcloud container clusters update.

VPC Access

  • Added --vpc-connector flag to gcloud run deploy and gcloud run services update which allows cloud run services to connect to a VPC Connector.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

298.0.0 (2020-06-23)

Breaking Changes

  • (Cloud Data Catalog) Removed add-enum-values flag from gcloud data-catalog tag-templates fields update.

Cloud SDK

  • Changed the bq and gcloud command-line tools to prefer Python 3 for component-based Cloud SDK installs on Unix. See gcloud topic startup for information on configuring the Python interpreter used by the Cloud SDK.

AI Platform

  • Added --network flag to gcloud ml-engine jobs submit training and gcloud ai-platform jobs submit training.

App Engine

  • Added an optional --appyaml flag to change the app.yaml file location for an application.

Cloud Data Catalog

  • Added enum-values flag in gcloud data-catalog tag-templates fields update.

Compute Engine

  • Promote --condition flag for

    • gcloud compute disks add-iam-policy-binding
    • gcloud compute disks remove-iam-policy-binding to GA.

  • Promote --condition flag for

    • gcloud compute reservations add-iam-policy-binding
    • gcloud compute reservations remove-iam-policy-binding to GA.

Secret Manager

  • Updated the following beta commands to better support IAM Conditions:
    • gcloud beta secrets get-iam-policy outputs conditions associated with each binding.
    • gcloud beta secrets set-iam-policy accepts policies with conditional bindings.
    • gcloud beta secrets <add|remove>-iam-policy-binding accepts conditional bindings.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

297.0.1 (2020-06-17)

297.0.0 (2020-06-16)

Anthos

  • Added support for preferred authentication methods to anthos auth login command.

BigQuery

  • Added support for splitting/merging capacity commitments.
  • Added support for autoscale based on reservations.
  • Fixed CLI json.loads error for Python 3.5.

Compute Engine

  • Added --preemptible flag to gcloud compute instances set-scheduling.
  • Promoted --multi-writer flag of gcloud compute disks create to beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

296.0.1 (2020-06-10)

Anthos

  • Fixed blocking bug in anthos auth login command.

296.0.0 (2020-06-09)

Cloud SDK

  • Updated bundled Python executable to 3.7.5.

Cloud Composer

  • Fixed a bug that causes backfill subcommand of gcloud composer environments run to be stuck indefinitely.
  • Updated gcloud composer environments run command to prefer GKE pods with 'Ready: true' condition state.

Cloud Filestore

  • Updated gcloud beta filestore instances create and gcloud beta filestore instances update to include:
    • Added HIGH_SCALE_SSD, BASIC_HDD and BASIC_SSD tiers.
    • Added nfs-export-options to --file-share flag.
    • Support for NfsExportOptions. Run gcloud filestore --help or visit https://cloud.google.com/filestore/docs/ to learn more.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.4
    • Fixes bug for evaluating rules in query listening.
    • Fixes support for ?show_missing in listing collection.

Cloud Resource Manager

  • Promoted gcloud projects create to beta.

Cloud Run

  • Modified --vpc-connector and --clear-vpc-connector flags to be applicable for --platform=managed only.
  • Added --format export option to gcloud run services describe and gcloud run revisions describe, to output resources without deployment-specific metadata or status information.

Compute Engine

  • Replaced coreos-cloud with fedora-coreos-cloud in the list of public image projects for --standard-images flag of gcloud compute images list.
  • Promoted gcloud compute commitments create-license to beta.
  • Added flag --instance-update-minimal-action flag to gcloud beta compute instance-groups managed instance-configs <create|update|delete>.

Kubernetes Engine

  • Added --master-logs and '--enable-master-metrics' flags to gcloud beta container clusters to enable sending master logs and metrics to Cloud Operations (fka Stackdriver).

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

295.0.0 (2020-06-02)

Anthos

  • Added gcloud anthos apply command to beta. This command declaratively applies Config Connector resource configurations.
  • Added gcloud anthos export command to beta. This command exports Config Connector resource configurations of existing Google Kubernetes Engine clusters.

Cloud Memorystore

  • Enabled support for Redis version 5.0. Added redis_5_0 as a new option for --redis_version flag of gcloud redis instances create.
  • Added gcloud redis instances upgrade to upgrade a Memorystore Redis instance to a specified Redis version.

Cloud Pub/Sub

  • Rename --filter flag of gcloud pubsub subscriptions create to --message-filter. This is done to avoid confusion with --filter flag of https://cloud.google.com/sdk/gcloud/reference/topic/filters.
  • Promoted --message-filter flag of gcloud pubsub subscriptions create to beta. This feature allows users to specify a filter expression on a Cloud Pub/Sub subscription which will automatically drop messages.

Compute Engine

  • Promoted gcloud compute instance-groups managed describe-instance to beta.
  • Added --accelerator flag to gcloud beta compute instances create-with-container.
  • Promoted --private-ipv6-google-access-type flag of gcloud compute instances <create|create-with-container> to GA.
  • Promoted --private-ipv6-google-access-type flag of gcloud compute instance-templates <create|create-with-container> to GA.
  • Promoted --private-ipv6-google-access-type flag of gcloud compute networks subnets <create|update> to GA.
  • Added --interface flag to gcloud beta compute disks create.
  • Added --interface flag to gcloud beta compute instances attach-disk.
  • Added interface key to --disk key of gcloud beta compute instances create.

Game Servers

  • Added --description to gcloud <alpha|beta> game servers <clusters/realms/deployments> update to allow updating description for resources.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

294.0.0 (2020-05-27)

Breaking Changes

  • (Secret Manager) Modified gcloud secrets beta command group to use the Secret Manager v1 API. The --uri flag now formats output to begin with https://secretmanager.googleapis.com/v1/ instead of https://secretmanager.googleapis.com/v1beta1/ when used with the following commands:
    • gcloud beta secrets list
    • gcloud beta locations list
    • gcloud beta secrets versions list

AI Platform

  • Added --kms-key to gcloud <alpha|beta> ai-platform jobs submit training to allow specifying a customer-managed encryption key for a training job.

Cloud Pub/Sub

  • Promoted configurable retry-related flags in gcloud pubsub subscriptions create and gcloud pubsub subscriptions update to GA.

Cloud Run

  • Change gcloud run services get-iam-policy, gcloud run services set-iam-policy, gcloud run services add-iam-policy-binding, and gcloud run services remove-iam-policy-binding to use the v1 api.

Cloud Storage

  • Updated gsutil component to 4.51.

Cloud Tasks

  • Promoted gcloud tasks queues create-pull-queue to beta.

Compute Engine

  • Changed default action from RESTART to REPLACE for --update-instance flag of gcloud compute instance-groups managed instance-configs create|update.
  • Promoted --maintenance-policy of gcloud compute sole-tenancy node-groups create to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

293.0.0 (2020-05-19)

App Engine

Cloud SQL

  • Promoted Postgres 12 to GA.

Compute Engine

  • Promoted gcloud compute instance-groups managed list-errors to GA.
  • Added gcloud beta compute instances get-screenshot command to beta.

Firebase Test Lab

  • Promoted --additional-apks, --other-files, --network-profile, and --robo-script flags of gcloud firebase test android run to GA.

Kubernetes Engine

  • Promoted --disable-default-snat flag of gcloud container clusters <create|update> to beta.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

292.0.0 (2020-05-12)

Breaking Changes

  • (Cloud SDK) Modified gcloud auth application-default login to add a quota project by default. Use --disable-quota-project to skip setting the quota project.
  • (Cloud SDK) Modified gcloud auth application-default login and gcloud auth application-default set-quota-project so that a quota project is added to the application default credentials only when the credentials have the permission to bill the project.

Cloud SDK

App Engine Flexible Environment

  • Fixed issue where CloudBuild timeout value without 's' suffix was rejected sometimes.

Cloud DNS

  • Promoted Non-RFC 1918 Cloud DNS features to GA.

Cloud Dataproc

  • Fixed bug in gcloud dataproc clusters list where Google Kubernetes Engine-based clusters are listed with PLATFORM as GCE when accessed by the GA command.

Cloud Key Management Service

  • Promoted --condition flag to GA for the following commands:
    • gcloud kms keyrings add-iam-policy-binding
    • gcloud kms keyrings remove-iam-policy-binding
    • gcloud kms keys add-iam-policy-binding
    • gcloud kms keys remove-iam-policy-binding

Compute Engine

  • Added import and export commands to gcloud compute <target-http-proxies|target-https-proxies>.
  • Promoted --private-ipv6-google-access-type flag of gcloud compute instances <create|create-with-container> to beta.
  • Promoted --private-ipv6-google-access-type flag of gcloud compute instance-templates <create|create-with-container> to beta.
  • Promoted --autoscaler-mode, --min-nodes, and --max-nodes flags of command gcloud compute sole-tenancy node-groups create to GA.

Kubernetes Engine

  • gcloud container now respects compute/region property.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

291.0.0 (2020-05-05)

AI Platform

  • Added --config to gcloud beta ai-platform versions update and gcloud beta ai-platform versions update to allow specifying manual and auto-scaling parameters.

App Engine

BigQuery

  • Enabled purchasing capacity commitments through the BQCLI.
  • Added support for passing empty array parameters.
  • Fixed issues with handling of YAML parse errors.
  • Fixed vulnerabilities related to pre-packaged dependencies.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager perimeters dry-run command group to GA.
  • Added the following flags to gcloud access-context-manager perimeters create:
    • --enable-vpc-accessible-services
    • --vpc-allowed-services
  • Added the following flags to gcloud access-context-manager perimeters update:
    • --enable-vpc-accessible-services
    • --add-vpc-allowed-services
    • --clear-vpc-allowed-services
    • --remove-vpc-allowed-services

Cloud Dataproc

  • Added --secondary-worker-type to gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster commands. This adds the ability to create a cluster with secondary workers that are non-preemptible. If unspecified, secondary workers continue to be preemptible by default.

Cloud Functions

  • gcloud functions logs read now understands log entries with JSON payloads.

Cloud Healthcare

  • Promoted gcloud healthcare command group to GA.
  • This release includes some major changes that are different from beta.
    • FHIR store creation requires a version in GA, or the request will fail.
    • HL7V2 stores can now have multiple Pub/Sub topics, corresponding API is changed to accomplish that.

Cloud IAM

  • Promoted --condition flag to GA for gcloud iam service-account <add|remove>-iam-policy-binding.

Cloud Resource Manager

  • Promoted --condition flag to GA for the following commands:
    • gcloud projects <add|remove>-iam-policy-binding
    • gcloud organizations <add|remove>-iam-policy-binding
    • gcloud resources-manager folders <add|remove>-iam-policy-binding

Cloud Run

  • Promoted --min-instances, --no-traffic, --use-http2, --clear-config-maps, --set-config-maps, --remove-config-map, --update-config-map, --clear-secrets, --set-secrets, --remove-secrets, --update-secrets flags of gcloud run services update to beta.
  • Changed default output format of gcloud run revisions describe to be more human-readable. For yaml output, use --format=yaml.

Cloud Services

  • Promoted gcloud services vpc-peerings enable-vpc-service-controls to beta.
  • Promoted gcloud services vpc-peerings disable-vpc-service-controls to beta.

Cloud Storage

  • Updated gsutil component to 4.50.

Compute Engine

  • Promoted --export-subnet-routes-with-public-ip and --import-subnet-routes-with-public-ip flags of gcloud compute networks peerings create and gcloud compute networks peerings update to beta and GA.
  • Promoted --domains flag of gcloud compute ssl-certificates create to GA.
  • Promoted suspend and resume commands of gcloud compute instances command group to beta.

Firebase Test Lab

  • Added --testing-special-entitlements flag to gcloud beta firebase test ios run. This flag allows you to test iOS app entitlements by re-signing the app with a new and explicit application-identifier.

Kpt

  • Updated kpt from v0.17.0 to v0.24.0.
  • Updated import of cli-utils from v0.6.0 to v0.8.0.
  • Updated import of kyaml from v0.1.4 to v0.1.8.
  • Updated import of cmd/config from v0.1.4 to v0.1.7.

Kubernetes Engine

  • Updates kubectl to change default version of kubectl from 1.14 to 1.15.
  • Additional kubectl versions:
    • kubectl.1.14 (1.14.10)
    • kubectl.1.15 (1.15.11)
    • kubectl.1.16 (1.16.9)
    • kubectl.1.17 (1.17.5)
  • Promoted --autoprovisioning-max-surge-upgrade, --autoprovisioning-max-unavailable-upgrade, --enable-autoprovisioning-autoupgrade, --enable-autoprovisioning-autorepair flags of gcloud container clusters create and gcloud container clusters update to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

290.0.1 (2020-04-27)

Compute Engine

  • Promoted --domains flag of gcloud compute ssl-certificates create to GA.

290.0.0 (2020-04-22)

Cloud Dataflow

  • Promoted gcloud dataflow sql query command to GA.

Cloud Dataproc

  • Updated --image flag to accept image family URIs.
  • Fixed a bug where managed clusters added to workflow templates did not correctly respect --enable-component-gateway.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.11.3
    • Fix rolling back an already failed transaction.
    • Fix gRPC issue on large rules coverage reports.

Compute Engine

  • Changed the default value of --image-family flag to debian-10 for gcloud compute instances create and gcloud compute instance-templates create commands.
  • Added PRIVATE_SERVICE_CONNECT as a type of global address reservation.
  • Added --target-bundle option in gcloud compute forwarding-rules create.

Kubernetes Engine

  • Promoted the GKE ConfigConnector add-on of gcloud container clusters create and gcloud container clusters update to beta. This add-on is disabled by default.
    • Use --addons=ConfigConnector to enable the add-on during cluster creation.
    • Use --update-addons=ConfigConnector=ENABLED|DISABLED to enable/disable the add-on for existing GKE clusters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

289.0.0 (2020-04-14)

App Engine

Cloud Access Context Manager

  • Added --custom-level-spec argument to enable custom access level definition to the following commands:
    • gcloud access-context-manager levels create
    • gcloud access-context-manager levels update
  • Added gcloud beta access-context-manager perimeters dry-run enforce command for enforcing the dry-run configurations for individual Service Perimeters.
  • Promoted gcloud access-context-manager levels replace-all and gcloud access-context-manager perimeters replace-all commands to GA.
  • Added gcloud beta access-context-manager perimeters dry-run enforce command for enforcing the dry-run configurations for individual Service Perimeters.

Cloud Dataproc

  • Fixed bug where the GKE cluster name is also displayed in the zone column when listing GKE-based Dataproc clusters.

Cloud Memorystore

  • Added new redis_5_0 redis-version value to gcloud redis instances upgrade.

Cloud Run

  • Promoted the Knative API version used from v1alpha1 to v1 on all gcloud beta run and gcloud run commands for --platform=gke and --platform=kubernetes.

Compute Engine

  • Promoted gcloud compute instances add-resource-policies command to GA.

Kubernetes Engine

  • Promoted the following flags to GA for gcloud container binauthz attestors public-keys add:
    • --pkix-public-key-file
    • --pkix-public-key-algorithm
    • --keyversion
    • --public-key-id-override

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

288.0.0 (2020-04-07)

Breaking Changes

  • (Secret Manager) Removed newline from the end of the output of gcloud secrets versions access command.

AI Platform

  • Added support for --region flag for gcloud beta ai-platform.

Cloud Access Context Manager

  • Renamed gcloud beta access-context-manager perimeters dry-run reset as gcloud beta access-context-manager perimeters dry-run drop.

Cloud Composer

  • Added the following flags to gcloud composer environments create to handle IP aliasing:

    • --enable-ip-alias
    • --cluster-ipv4-cidr
    • --services-ipv4-cidr
    • --cluster-secondary-range-name
    • --services-secondary-range-name

  • Added the following flags to gcloud composer environments create to handle Private IP:

    • --enable-private-environment
    • --enable-private-endpoint
    • --master-ipv4-cidr

  • Added the following flags to gcloud composer environments create to handle Private IP:

    • --web-server-ipv4-cidr
    • --cloud-sql-ipv4-cidr

  • Fixed a bug that could cause flags passed to gcloud composer environments run to be interpreted incorrectly.

Cloud Dataflow

  • Added gcloud beta dataflow snapshots command group which provides the ability to create and manage Cloud Dataflow snapshots.

Cloud Dataproc

  • Fixed bug where the default project was not automatically used as the GKE cluster project for GKE-based Dataproc clusters.
  • Changed the default value for --timeout in gcloud dataproc clusters update from 3h to 25h. This prevents client-side timeouts during long graceful decommissioning operations.

Cloud Run

  • Promoted --no-traffic flag of gcloud run deploy to GA for --platform=managed.

Compute Engine

  • Promoted --scale-in-control flag of gcloud compute instance-groups managed set-autoscaling to beta.
  • Promoted --scale-in-control and --clear-scale-in-control flags of gcloud compute instance-groups managed update-autoscaling to beta.
  • Added support of tabular display format of command gcloud compute networks get-effective-firewalls and gcloud compute instances network-interfaces get-effective-firewalls.

Kpt

  • Updated kpt from v0.14.0 to v0.17.0.
  • Updated import of cli-utils from v0.5.0 to v0.6.0.
  • Updated import of kyaml from v0.1.3 to v0.1.4.
  • Updated import of cmd/config from v0.1.3 to v0.1.4.

Subscribe to these release notes at