Google Cloud CLI - Release Notes

Copyright 2014-2026 Google Inc. All rights reserved.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

581.0.0 (2026-08-18)

Breaking Changes

  • (Cloud Services) Removed gcloud beta services mcp enable, gcloud beta services mcp disable, and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

  • Promoted gcloud ai semantic-governance-policies (create, describe, update, delete, list) and gcloud ai semantic-governance-policy-engine (describe, update, deprovision) commands from beta to GA.

BigQuery

  • Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.
  • Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.

Cloud Auth

  • Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.

Cloud Bigtable

  • Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.

Cloud IAM

  • Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).
  • Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.

Cloud Services

  • API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.

Cluster Director

  • Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.
  • Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.
  • Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.

Compute Engine

  • Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta, preview, and GA.
  • Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta, preview, and GA.
  • Added gcloud compute packet-mirrorings test-iam-permissions command for beta, preview and GA tracks.

Container

  • Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong, to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.

Database Migration

  • Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.
  • Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.

Kubernetes Engine

  • Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.

Oracle Database

  • Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type, --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

580.0.0 (2026-08-11)

Breaking Changes

Google Cloud CLI

  • Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.

Apihub

  • Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.

Certificate Authority Service

  • Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool, --issuer-location, and --issuer-ca flags.
  • Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.

Certificate Manager

  • Added --tags flag to gcloud certificate-manager create commands (certificates create, dns-authorizations create, issuance-configs create, maps create, and trust-configs create).

Cloud Backup DR

  • Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.
  • Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.

Cloud Composer

  • Enabled the 'backfill' Airflow CLI sub-command for Composer environments running Airflow 3.
  • Enabled the 'config lint' Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.

Cloud Dataflow

  • Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.
  • Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.

Cloud IAM

  • Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.

Cloud Spanner

  • Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.

Cloud Storage

  • gcloud storage rsync:
    • Skipping syncing files which goes outside of destination directory.

Cluster Director

  • Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.

Compute Engine

  • Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA, beta, preview, and alpha.
  • Added gcloud compute snapshot-groups set-iam-policy command in beta.
  • Added --kms-key-service-account to gcloud compute disks create, gcloud compute images create, gcloud compute machine-images create and gcloud compute snapshots create for beta track.
  • Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.
  • Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.
  • Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.
  • Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta, preview, and GA.
  • Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.
  • Added gcloud compute firewall-policies test-iam-permissions command.
  • Promoted --graceful-shutdown, --graceful-shutdown-max-duration, and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.
  • Added --identity-type flag to gcloud compute instances create, gcloud compute instances update, and gcloud compute instance-templates create in alpha.
  • Promoted exapool capacity flags to beta and GA tracks for gcloud compute storage-pools update command.
  • Added --maintenance-freeze-duration and --clear-maintenance-freeze-duration flags to gcloud compute instances set-scheduling and gcloud compute instances create in beta.
  • Added gcloud compute images test-iam-permissions command to test IAM permissions on a Compute Engine image in beta, preview, and GA.

Device Run

  • Promoted gcloud device-run sessions wait command to beta.
  • Updated --instrumentation-timeout flag of gcloud beta device-run sessions submit instrumentation to allow a maximum duration of 3 hours.
  • Updated gcloud device-run devices describe to display hardware_type instead of form.
  • Updated gcloud device-run devices list to display HARDWARE_TYPE column instead of FORM.

GKE Hub

  • Promoted API field schema for --fleet-default-member-config flag on gcloud container fleet|hub config-management enable command to beta.

Metastore

  • Updated gcloud beta metastore services migrations start to support migrations to Lakehouse runtime catalog(s).
  • Deprecated Cloud SQL migration arguments in gcloud beta metastore services migrations start.

Network Connectivity

  • Added --export-psc-published-services-and-regional-google-apis and --export-psc-global-google-apis flags to gcloud beta network-connectivity hubs create and gcloud beta network-connectivity hubs update commands.

Network Security

  • Promoted mcp and policyProfile fields to GA in gcloud network-security authz-policies import and export commands.
  • Made loadBalancingScheme optional in gcloud network-security authz-policies import and export commands.

Network Services

  • Promoted gcloud network-services telemetry-policies delete command to BETA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

579.0.0 (2026-08-04)

Breaking Changes

  • (API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.
  • (Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.

AI

  • Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.

Agent Identity

  • Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.

Cloud Auth

  • Enabled ECP HTTP Proxy support for external users (disabled by default).
  • Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.

Cloud Dataproc

  • Promoted --master-instance-selection, --master-instance-flexibility-policy-file, --worker-instance-selection, --worker-instance-flexibility-policy-file, --secondary-worker-instance-selection, and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.

Cloud Firestore Emulator

  • Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.

Cloud Functions

  • Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.
  • Promoted gcloud functions upgrade command to GA.

Cloud NetApp

  • Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.

Cloud Quotas

  • Promoted gcloud quotas surface (info, preferences, and adjuster settings) to General Availability (GA).

Cloud SQL

  • Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances, removing the previous downtime warning. Instances using C4, C4A, or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.

Cloud Services

  • Updated gcloud beta services mcp enable command to be a no-op, as MCP enablement is no longer required.

Cluster Director

  • Fixed an issue where the default zone for cluster resources (storage, network, etc.) was always set to the location's "b" zone, overriding the user-specified zone in compute flags.
  • Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.
  • Added support for 3500GB, and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.
  • Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.
  • Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.
  • Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA, beta, and preview.
  • Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta, preview, and GA.
  • Added --exapool-capacity-optimized-capacity, --exapool-read-optimized-capacity, and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.
  • Added Arm CCA support to the confidential-compute-type option in gcloud compute instance create.
  • Added gcloud compute network-firewall-policies test-iam-permissions command.
  • Added gcloud compute disks test-iam-permissions command to test IAM permissions on a Compute Engine disk.
  • Promoted --ipv6-network-tier flag of gcloud compute networks subnets create and gcloud compute networks subnets update to beta.
  • Added STANDARD option to --ipv6-network-tier flag of gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances network-interfaces add, and gcloud compute instances network-interfaces update in beta.
  • Added gcloud compute routers test-iam-permissions command to test specific IAM permissions on a Compute Engine router in beta.

Compute Firewall Policies

  • Promoted new ULL_POLICY value for --policy-type flag of gcloud compute network-firewall-policies create to GA.

Distributed Cloud Edge

  • Promoted gcloud edge-cloud zones list to GA.

GKE Hub

  • Promoted gcloud container fleet|hub config-management update command to beta.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud iam policy-bindings create.

Kpt

Kubernetes Engine

  • Updated default kubectl to 1.35.6.
  • Additional kubectl versions:
    • 1.30.14
    • 1.31.14
    • 1.32.13
    • 1.33.13
    • 1.34.10
    • 1.35.7
    • 1.36.3

Network Services

  • Deprecated clientTlsPolicy field in gcloud network-services endpoint-policies.
  • Updated gcloud network-services endpoint-policies resource name pattern to support regional locations.

Vmware Engine

  • Added --kms-key flag to gcloud vmware private-clouds create. Specifying this flag with a valid KMS key resource name enables CMEK.
  • Added --encryption-type and --kms-key flags to gcloud vmware private-clouds update. --kms-key (valid KMS key resource name) is required when --encryption-type is CMEK.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

578.0.0 (2026-07-28)

Breaking Changes

  • (Database Migration) Made --auto-commit flag the default for gcloud database-migration conversion-workspaces seed|convert|import-rules operations. To disable auto-committing, use --no-auto-commit flag.

  • The run_bq_command tool exposes the BigQuery CLI (bq) within the Cloud CLI remote MCP server. You can send natural language prompts to your AI application to execute specific BigQuery SQL commands on your behalf.

    For more information, see Use the Cloud CLI remote MCP server.

Google Cloud CLI

  • Fixed an issue where running gcloud init crashed when Enterprise Certificate Proxy (ECP) binaries were missing from configuration.
  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.6.

AlloyDB

  • Promote AlloyDB Backup DR restore flags (--backupdr-backup and --backupdr-data-source) to the GA track.

BigLake

  • Fixed a bug where gcloud biglake iceberg tables commands failed to send the X-Iceberg-Access-Delegation: vended-credentials header.

BigQuery

  • Added -f/--force support to bq rm --connection to ignore NOT_FOUND errors if the connection does not exist.
  • Fixed reading configuration from gcloud CLI with --nouse_google_auth flag.
  • Added a predefined label for jobs created in specific metrics environments.
  • Updated the help text for several global flags.
  • Updated command format in the user-agent HTTP header of API requests.

Cloud Backup DR

  • Added --log-retention-days flag across gcloud backup-dr backup-plans create and update across all release tracks to enable Point-in-Time Recovery (PITR) log retention configuration.

Cloud Bigtable

  • Added --ignore-warnings flag to gcloud bigtable instances tables update and gcloud bigtable tables update.
  • Promoted --ignore-warnings flag of gcloud bigtable materialized-views create to GA.

Cloud Composer

  • Enabled Airflow CLI commands for Composer environments running Airflow 3.2.

Cloud IAM

  • Promoted enabled-for-users-groups option for --scim-usage flag to beta in gcloud beta iam workforce-pools providers.

Cloud Run

  • Added --sandbox-launcher flag to gcloud beta run jobs and gcloud beta run worker-pools command groups to allow setting a container as sandbox launcher when creating or updating a Cloud Run job or a worker pool.

Cloud Workstations

  • Added --idle-action flag to gcloud alpha workstations configs create, gcloud alpha workstations configs update, gcloud beta workstations configs create, and gcloud beta workstations configs update commands.

Compute Engine

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in beta.
  • Added --metadata-filter flag to gcloud compute forwarding-rules create command across all release tracks.
  • Added --metadata-filter flag to gcloud compute forwarding-rules update commands across all release tracks.
  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added gcloud compute instant-snapshot-groups set-iam-policy command to set the IAM policy for a Compute Engine instant snapshot group.
  • Added gcloud compute networks subnets test-iam-permissions command in beta, preview, and GA.
  • Added gcloud compute image-views describe command in beta.
  • Added gcloud compute snapshots test-iam-permissions to test IAM permissions for Compute Engine snapshots.
  • Added gcloud compute interconnects attachments groups set-iam-policy command to set IAM policy on an interconnect attachment group in beta, preview, and GA.
  • Added --internal-range flag to gcloud compute addresses create to support allocating global internal IP addresses from an Internal Range for Private Service Connect.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.

Developer Connect

  • Updated gcloud beta developer-connect account-connectors commands to support Bring Your Own (BYO) and Bitbucket Cloud (BBC) connection types.

GKE Hub

  • Promoted --view, --memberships, --filter, and --sort-by flags on gcloud container fleet|hub config-management describe command to beta.

Network Management

  • Added --source-dms-private-connection flag to gcloud network-management connectivity-tests.

Secret Manager

  • Added the --secret-type flag to gcloud secrets create to support creating secrets of different types (e.g. Cloud SQL credentials).
  • Added the gcloud secrets enable-managed-rotation command to enable managed rotation for a secret using Cloud SQL credentials.
  • Added the gcloud secrets rotate-secret command to rotate a secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

577.0.0 (2026-07-21)

Agent Identity

  • Promoted gcloud agent-identity auth-providers and gcloud agent-identity access-summaries to GA.

AlloyDB

  • Modify flag --no-enable-autoscaler of gcloud beta alloydb instances create|update commands to only set the enabled field to false and not clear autoscaling config.
  • Modify gcloud beta alloydb instances update command to only allow one of --autoscaler-delete-schedule, --autoscaler-disable-schedule, --autoscaler-enable-schedule, or --autoscaler-set-schedule to be specified.

Artifact Registry

  • Added connector-repository mode to gcloud artifacts repositories create.

BigQuery

  • Added support for --s3_service_directory_service flag to pass custom Service Directory endpoints for AWS connection make and update operations. This is used for routing traffic over a private network connection through Cross-Cloud Interconnect.
  • Updated the data source of agent name value set in the user agent HTTP header.
  • Stopped enforcing bq init when --oauth_access_token is provided.

Cloud Bigtable

  • fix: cbt cli escape row keys and column qualifiers in printRow.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.22.0
    • Added DML support for the Firestore Pipelines API
    • Added ability to model when composite indexes are required in Datastore mode using new --require-indexes and --index-file flags
    • Added depreciation warning for JRE versions <25

Cloud Key Management Service

  • (GA) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.

Cloud Workstations

  • Added gcloud beta workstations suspend and gcloud alpha workstations suspend commands.

Compute Engine

  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added --logging-http-request-headers and --logging-http-response-headers flags to gcloud compute backend-services create and update commands to configure Cloud Logging HTTP headers for external L7 load balancers.
  • Added --local-ssd-encryption-mode flag to gcloud compute instances create to specify the encryption mode for Local SSDs.
  • Deprecated customer-supplied encryption keys (CSEK) flags --csek-key-file, --require-csek-key-create, --source-machine-image-csek-key-file, --source-disk-csek-key, --source-disk-key-file, and --source-instant-snapshot-key-file for gcloud compute commands.

GKE Hub

  • Changed both --config flag on gcloud beta container fleet|hub config-management apply command and --fleet-default-member-config flag on gcloud beta container fleet|hub config-management enable command to no longer default spec.upgrades: manual population since auto-upgrades is no longer supported from Config Sync version 1.21.0 and spec.upgrades: manual is behaviorally equivalent to not setting this field.

Kubernetes Engine

  • Fix overwriting autoscaling settings in gcloud container clusters update.

Network Security

  • Updated gcloud beta network-security authz-policies import to support networkRules and snis fields.

Recaptcha

  • Added --universal option to gcloud recaptcha keys create and gcloud recaptcha keys update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

576.0.0 (2026-07-14)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage rsync to default decompresses downloaded gzip files to match the behavior of gcloud storage cp. To retain the previous behavior, use the new --do-not-decompress flag.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

  • The Cloud CLI remote MCP server provides a secure environment that lets you send natural language prompts to your AI application to execute command-line interface (CLI) commands on your behalf. Only gcloud commands are supported.

    For more information, see Use the Cloud CLI remote MCP server.

Artifact Registry

  • Fixed a performance regression in gcloud artifacts docker images list when listing a large number of image versions.

BigLake

  • Promoted gcloud biglake delta-sharing <catalogs|shares|schemas|tables> to GA.
  • Promoted gcloud biglake data-product-sharing publish to GA.
  • Added lakehouse option to --catalog=type flag to gcloud biglake iceberg catalogs.
  • Added gcloud biglake hive tables update to beta.

BigQuery

  • Added environment information to the user-agent HTTP header.
  • Added support for --label flag in bq cp, bq extract, and bq load commands to configure job-level labels.
  • Fixed 'bq show' command failures displaying timestamps without fractional seconds.

Cloud Data Lineage

  • Added gcloud datalineage runs command group to manage data lineage runs.
  • Added gcloud datalineage lineage-events command group to manage data lineage runs.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans create data-documentation and gcloud dataplex datascans update data-documentation commands.
  • Added --mode flag to gcloud dataplex datascans create data-profile and gcloud dataplex datascans update data-profile commands to support specifying profiling mode.

Cloud Dataproc

  • Promoted gcloud dataproc batches submit pyspark-notebook to GA.

Cloud Identity-Aware Proxy

  • Promoted support for agent-registry resource type in gcloud iap web IAM commands to GA.

Cloud Key Management Service

  • (Alpha, Beta) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.
  • Added --hsm-trusted-wrapping flag to gcloud kms keys create and gcloud kms keys versions import to enable trusted wrapping capabilities.
  • Promoted gcloud kms keys versions export-trusted-key-wrapped and gcloud kms keys versions import-trusted-key-wrapped to GA.
  • Added --crypto-key-version-name and --two-factor-public-key-pem flags to gcloud kms single-tenant-hsm proposal create for --operation-type=upgrade_key_trust.

Cloud Managed Kafka

  • Added util function to validate and remove byte units from broker disk input.

Cloud Run

  • Modified gcloud run services proxy to fail immediately if the service has its default URL disabled.

Cloud SQL

  • Upgraded --storage-auto-increase-limit flag for gcloud sql instances create and gcloud sql instances patch commands to GA.

Cloud Storage

Cluster Director

  • Added support for Lustre dynamic tier in gcloud cluster-director clusters commands.

Compliance Manager

  • Updated gcloud compliance-manager commands to support project-level resources.

Compute Engine

  • Promoted --nat-ips-per-endpoint flag to GA in gcloud compute service-attachments create and gcloud compute service-attachments update.
  • Promoted gcloud compute hosts and gcloud compute reservations hosts to beta.
  • Added gcloud compute sole-tenancy node-templates test-iam-permissions command to test IAM permissions on a node template in beta, preview, and GA.
  • Added gcloud compute instant-snapshots set-iam-policy command to support setting IAM policy bindings for instant snapshots in alpha, beta, preview, and GA.
  • Added gcloud compute network-attachments test-iam-permissions command to test IAM permissions on a network attachment in beta, preview, and GA.
  • Added gcloud beta compute instance-groups managed adopt-instances to support adopting instances into regional managed instance groups.
  • Added gcloud compute instant-snapshots test-iam-permissions command to test IAM permissions on an instant snapshot in beta, preview, and GA.
  • Added get-iam-policy and set-iam-policy commands to gcloud compute firewall-policies and gcloud compute network-firewall-policies to manage policy-level IAM policy.
  • Promote the --location flag of gcloud compute interconnects update to GA.
  • Added gcloud compute backend-buckets test-iam-permissions command to test IAM permissions on backend buckets.
  • Promoted --on-repair-allow-changing-zone flag to GA in gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Added gcloud compute interconnects test-iam-permissions command to test IAM permissions on a Compute Engine interconnect in beta.
  • Added gcloud compute instant-snapshot-groups test-iam-permissions command.
  • Added test-iam-permissions command to gcloud compute target-tcp-proxies to test IAM permissions on a target TCP proxy. Global proxies are supported in all tracks, and regional proxies are supported in alpha and beta tracks.
  • Added support for displaying dynamic field GRACEFUL_SHUTDOWN_TIMESTAMP to gcloud compute instance-groups managed list-instances in GA, beta and alpha.
  • Added gcloud compute service-attachments set-iam-policy command to set IAM policy on a service attachment in beta, preview, and GA.
  • Added --async flag to gcloud compute instance-groups managed delete.
  • Promoted --load-balancing-scheme flag to GA in gcloud compute target-tcp-proxies create.
  • Promoted --instances flag of gcloud create instance-groups managed resize-requests create to GA to support specific instance names.
  • Added gcloud compute reservations sub-blocks test-iam-permissions command to beta, preview and GA release tracks.
  • Added on-update-action enum class to --create-disk flag for an instance creation. And it is added to the following release tracks alpha, beta, preview, and GA.
  • Added gcloud compute external-vpn-gateways test-iam-permissions command to test IAM permissions on an external VPN gateway.
  • Added gcloud compute sole-tenancy node-groups test-iam-permissions command to test IAM permissions on a node group in alpha, beta, GA, and preview.
  • Promoted --identity, --identity-certificate and --most-disruptive-allowed-action flags to GA.
  • Added gcloud compute disks bulk set-labels command to alpha, beta, ga, and preview release tracks.

Developer Connect

  • Promoted gcloud developer-connect insights-configs deployment-events list and describe commands to GA.

Kubernetes Engine

  • Added KCP_VPA option to --logging flag of gcloud container clusters create to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters create-auto to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters update to enable VPA Decision Logs feature.
  • Added node config options nodeVfioConfig to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains VFIO-related configurations for this node.
  • Added node config options diskIoScheduler to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains the configuration for the disk IO scheduler.
  • Promoted Rollbackable Upgrades (Two-Step Upgrades) to GA. Added --control-plane-soak-duration flag to gcloud container clusters upgrade and promoted gcloud container clusters complete-control-plane-upgrade to GA.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create-auto to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters update to enable Managed OpenTelemetry feature.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Looker

  • Promoted --release-channel and --accelerated-security-patch-enabled flags to GA for gcloud looker instances create and gcloud looker instances update.
  • Added RELEASE_CHANNEL and ACCELERATED_SECURITY_PATCH_ENABLED columns to gcloud looker instances describe output in GA track.

Network Security

  • Added support for project-level security profiles to gcloud network-security security-profiles wildfire-analysis commands in BETA.

Transfer

  • Deprecated --s3-compatible-mode flag in gcloud transfer agents install. It is no longer needed as Transfer Service automatically detects S3-compatible job.

Vmware Engine

  • Updated gcloud vmware private-clouds create command to use full resource names for --preferred-zone and --secondary-zone flags when creating a stretched private cloud. This update ensures compliance with VPC Service Controls.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.1 (2026-07-07)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.0 (2026-06-30)

Google Cloud CLI

  • Added any-reservation-then-fail argument for flag --reservation-affinity in gcloud container clusters node-pools create.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

AlloyDB

  • Added --failover flag to gcloud beta alloydb clusters promote to support cross-region failover.

Apigee

  • Added gcloud apigee apis import which allows customers to upload API Proxy bundles in archive ZIP or feature template YAML format.

Artifact Registry

  • Expose the Registry URL in the output of gcloud artifacts repositories describe and in the output of gcloud artifacts repositories create (upon synchronous creation).

Assured Workloads

  • Added SWITZERLAND_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS option to --compliance-regime flag of gcloud assured workloads create.

BigLake

  • Added gcloud biglake hive tables create to beta.

Cloud Access Context Manager

  • Exposed --service-account and --service-account-project-number for gcloud access-context-manager cloud-bindings commands in the GA track.

Cloud Bigtable

  • Added support for --tags flag to gcloud bigtable instances create to allow binding tags on instance creation.

Cloud Data Lineage

  • Added gcloud datalineage processes command group to manage data lineage processes.

Cloud Dataproc

  • Added --master-machine-types flag in gcloud dataproc clusters create.

Cloud IAM

  • Updated gcloud iam service-accounts create to print the created service account's email address.

Cloud Run

  • Made the FILE positional argument optional for all gcloud run * replace commands, defaulting to their respective standard filenames if not specified.
  • Promoted regional inference to beta for Cloud Run services, jobs, and worker pools. When --region or the run/region property is not specified, the command line looks for a resource with that name in all regions.
  • Added --sandbox-launcher flag to gcloud beta run deploy and gcloud beta run services update to allow setting a container as sandbox launcher.
  • Promoted --workdir flag for gcloud run commands to GA.
  • Promoted interactive project prompt when project is not specified in gcloud run deploy to GA.
  • Promoted suggesting project and region from Artifact Registry URL in gcloud run deploy to GA.
  • Added --tail flag to gcloud beta run jobs execute to tail logs of the running execution.
  • Added --dry-run flag to gcloud beta run deploy, gcloud beta run services update, gcloud beta run services delete, gcloud beta run worker-pools deploy, gcloud beta run worker-pools update, and gcloud beta run worker-pools delete to validate configuration without persisting changes.
  • Added gcloud run jobs executions describe-latest command to describe the latest execution of a job.
  • Call out proxy when deploying or updating services with gcloud run deploy or gcloud run services update that require authentication in all tracks.

Cloud SQL

  • Added --user and --password-secret-version to gcloud sql instances execute-sql.

Cloud Storage

Cloud Workstations

  • Promoted --pd-disk-size flag of gcloud workstations update to GA.

Cluster Director

  • Users must supply a staticNodeCount if they want one. This no longer defaults to 1.

Compute Engine

  • Added gcloud alpha compute instance-groups managed configure-accelerator-topologies command to configure accelerator topologies of a managed instance group.
  • Added gcloud compute instances set-machine-resources command to allow setting machine resources for a virtual machine instances in alpha, beta, and GA.
  • Added test-iam-permissions command to gcloud compute storage-pools to return permissions that a caller has on the specified storage pool.
  • Added gcloud compute reservations sub-blocks set-iam-policy command to beta and GA release tracks.
  • Added gcloud compute reservations blocks set-iam-policy command to set IAM policy on a reservation block in beta, preview, and GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests create for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests cancel for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests delete for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests describe for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests list for regional MIG to GA.
  • Added gcloud compute instance-templates test-iam-permissions command to test IAM permissions on an instance template in alpha, beta, GA, and preview.
  • Added gcloud compute target-https-proxies set-quic-override command in beta, preview, and GA.
  • Added gcloud compute reservations test-iam-permissions to test IAM permissions on Compute Engine reservations.
  • Added gcloud compute network-attachments set-iam-policy command to set IAM policy on a network attachment in alpha, beta, preview, and GA.
  • Added gcloud compute instances list-referrers command to alpha, beta, and GA release tracks.
  • Added gcloud compute reservations blocks test-iam-permissions command to test IAM permissions on a reservation block in beta.
  • Added gcloud compute interconnects attachments groups test-iam-permissions command to test IAM permissions on an interconnect attachment group in beta, preview, and GA.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in GA.

Database Migration

  • Added --source-database-name-override flag to gcloud database-migration conversion-workspaces seed|update to allow overriding the database name for the seed operation.

GKE Hub

  • Promoted gcloud container fleet rollouts to GA.
  • Promoted gcloud container fleet rolloutsequences to GA.

Kpt

Kubernetes Engine

  • Promoted GKE custom image flags (--image and --image-project) to GA, making them publicly visible in gcloud container clusters create, gcloud container clusters create-auto, and gcloud container node-pools create (and --image/--image-project in gcloud container clusters upgrade).
  • Added stack-type option to --additional-node-network flag of gcloud container node-pools create to configure the stack type (ipv4, ipv4-ipv6, or ipv6) for additional network interfaces.

Network Management

  • Added --source-cloud-run-job flag to gcloud network-management connectivity-tests.

Network Services

  • Updated gcloud edge-cache services import schemas to support specifying up to 100 allowed origins in CORSPolicy.allowOrigins and a client TTL of 0s in CDNPolicy.clientTtl.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

574.0.0 (2026-06-23)

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

Agent Identity

  • Added gcloud beta agent-identity auth-providers get-iam-policy|set-iam-policy|add-iam-policy-binding|remove-iam-policy-binding|test-iam-permissions commands.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

Backup For GKE

  • Made gcloud container backup-restore command groups compatible with non-default universe domains.

BigQuery

  • Fixed a bug where stderr messages from gcloud CLI output would be printed to stdout.
  • Added --gcloud_config_cache flag to enable caching data retrieved from the gcloud CLI.
  • Added display of container request concurrency of BigQuery Python UDF in bq show --routine.
  • Added information about AI Agent in the execution environment to the user-agent HTTP header in the API request.

Cloud Datastream

  • Added Regional Endpoints (REP) support for all Datastream commands.

Cloud Memorystore

  • Added --zone-distribution-config-zones flag to gcloud memorystore instances create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.
  • Added --zone-distribution-config-zones flag to gcloud redis clusters create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.

Cluster Director

  • Added support for creating clusters using --quickstart-cluster in gcloud beta cluster-director clusters create.

Colab

  • Added Hyperdisk options to --disk-type of gcloud colab runtime-templates create: HYPERDISK_BALANCED.

Compute Engine

  • Fixed an issue where gcloud compute url-maps import reset custom timeout and retryPolicy (specifically numRetries) values to defaults when updating an existing URL map.
  • Added --vsock-mode flag to gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances bulk create, and gcloud compute queued-resources create in ALPHA to support enabling/disabling VSOCK mode.
  • Promoted --purpose flag to gcloud compute public-delegated-prefixes create in beta.

Database Migration

  • Added Regional Endpoints (REP) support for all Database Migration Service (DMS) commands.

Kubernetes Engine

  • Updated default kubectl from 1.35.3 to 1.35.6.
  • Added new kubectl version 1.36.2 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Network Security

  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to beta.
  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

573.0.0 (2026-06-16)

Breaking Changes

  • (Anthos Multi-Cloud) Deprecated gcloud container attached clusters get-credentials. Use gcloud container fleet memberships get-credentials to get credentials for a running Attached cluster.

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.5.

AI

  • Added gcloud ai tuning-jobs command group to manage Vertex AI supervised fine-tuning jobs.

App Engine

Artifact Registry

  • Added gcloud artifacts image-streaming-cache command group to manage image streaming caches per region. This group includes create, describe, delete, and list commands.

BigLake

  • Promoted --unity-service-principal-application-id flag for gcloud biglake iceberg catalogs create and update to BETA, making it publicly visible.
  • Promoted BigLake catalogs and arguments for gcloud biglake iceberg catalogs to GA.

Cloud Data Lineage

  • Added gcloud datalineage command group to manage Cloud Data Lineage resources.
  • Added gcloud datalineage config describe and gcloud datalineage config update commands to manage Data Lineage configurations.

Cloud Datastream

  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow connection profiles to gcloud datastream connection-profiles create and update commands.
  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow streams to gcloud datastream streams create and update commands.

Cloud Run

  • Promoted --readiness_probe in gcloud run deploy and gcloud run services update to GA.

Cloud Services

  • API Keys: Updated gcloud services api-keys create and update commands' --api-target flag to accept a colon-separated list of methods inline (e.g. --api-target="service=foo,methods=m1:m2").

Cloud Storage

  • Promoted gcloud storage batch-operations bucket-operations commands to GA.

Cluster Director

  • Added support for creating clusters using blueprints in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted --action-on-vm-failed-health-check flag to GA for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Fixed an issue where waiting for asynchronous operations would fail for certain global nested resources (like cross-site-networks wire-groups).
  • Added any-reservation-then-fail choice to --reservation-affinity flag in beta for gcloud compute instances create, gcloud compute instances bulk create, gcloud compute instance-templates create, gcloud compute instances create-with-container, and gcloud compute instance-templates create-with-container commands.
  • Promoted --include-disks and --exclude-disks flags for gcloud compute machine-images create to the BETA release track.

Kubernetes Engine

  • Added --dataplane-optimization-mode flag to gcloud container clusters create to select scalability mode for Dataplane V2.
  • Deprecated None value of --release-channel flag from gcloud container clusters create and update command. Use RAPID, REGULAR, STABLE or EXTENDED instead.

Network Connectivity

  • Updated help text for --region flag in gcloud network-connectivity transports create to include supported regions list.

Network Security

  • Added gcloud network-security operations command group (describe, wait, list, cancel).
  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.
  • Promoted gcloud network-security security-profiles wildfire-analysis commands to BETA.
  • Promoted gcloud network-security firewall-endpoints wildfire-verdict-change-requests commands to beta.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints create command to BETA.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints update command to BETA.

Recaptcha

  • Fixed an issue where gcloud recaptcha keys create ignored --testing-score when creating Android or iOS keys.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

572.0.0 (2026-06-09)

Google Cloud CLI

  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.5 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

AI

  • Fixed gcloud ai endpoints deploy-model to honor --machine-type for Gemini on GDC connected deployments. Previously the flag was silently ignored.

App Engine

App Lifecycle Manager

  • Added validation to enforce required sub-fields within arguments for releases, unit-kinds, and unit-operations commands.

Cloud Access Context Manager

  • Modified --group-key flag of gcloud access-context-manager cloud-bindings create to be optional.

Cloud IAM

  • Remove deprecated from Extended Attributes parameters. Extended Attributes are marked as restricted.

Cloud Workstations

  • Added gcloud beta workstations update command to update a workstation's properties, such as its persistent directory disk size.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute forwarding-rules in beta.
  • Promoted --ip_addresses flag of gcloud compute forwarding-rules to beta.
  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute backend-services in beta.
  • Added folder share support to gcloud compute reservations update.
  • Promoted --ncc-gateway flag to GA.

Database Migration

  • Added support for seeding a conversion workspace from a Cloud Storage bucket via --gcs-path flag in gcloud database-migration conversion-workspaces seed.
  • Added --dry-run flag to gcloud database-migration conversion-workspaces apply to allow validation of apply process by applying the draft version to a copy of the destination database.
  • Decoupled --host and --port requirements in gcloud database-migration connection-profiles create postgresql for destination connection profiles leveraging Cloud SQL or AlloyDB.

Kubernetes Engine

  • Added --maintenance-window-duration flag to gcloud container clusters create command as an alternative to --maintenance-window-end.
  • Added --maintenance-window-duration flag to gcloud container clusters update command as an alternative to --maintenance-window-end.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways advertised-routes command group to GA, including create, delete, describe, and list commands.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.

Security Command Center

  • Added external-exposure service to the SUPPORTED_SERVICES list.

Service Extensions

  • Updated import and export schemas for gcloud service-extensions authz-extensions.

Workbench

  • Added --image-family flag to gcloud workbench instances upgrade.
  • Added NVIDIA_RTX6000 to --accelerator-type choices on gcloud workbench instances create and update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

571.0.0 (2026-06-02)

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Fixed issue where gcloud compute scp file transfers were extremely slow when using --tunnel-through-iap in PY 3.14.

AlloyDB

  • Added flag --labels to gcloud alloydb instances create|create-secondary commands to assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud alloydb instances update commands to update, remove, or clear labels for an instance.

BigLake

  • Promoted gcloud biglake hive tables to beta.

Cloud Dataproc

  • Added --confidential-compute-type flag to gcloud dataproc clusters create to allow specifying the Confidential Computing technology (e.g., SEV, SEV_SNP, TDX).
  • Deprecated --confidential-compute flag for gcloud dataproc clusters create. Use --confidential-compute-type flag instead.

Cloud Datastream

  • Added --sql-where-clause flag to gcloud datastream objects start-backfill, which starts a partial backfill on the specified object.

Cloud NetApp

  • Added gcloud netapp volumes start-split and get-split-status commands to alpha and beta tracks of the volumes group.
  • Added gcloud netapp storage-pool update-backup-config command to GA track.
  • Added --ontap-source flag to gcloud netapp backup-vaults backups create GA track.
  • Added gcloud netapp storage-pools list-backup-configs command to the GA track of the storage-pools group.
  • Added gcloud netapp storage-pools restore-volume command to GA track.

Cloud Run

  • Added regional endpoint support for gcloud beta run worker-pools and gcloud beta run jobs executions tasks commands. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.22.0 of the Cloud SQL Proxy.

Cloud Storage

  • Added --set-object-acls-from-file flag to gcloud storage batch-operations jobs create.

Compute Engine

  • Promoted --source-machine-image and --source-machine-image-disk-device-name flags for gcloud compute disks create in beta.

Network Security

  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, create, delete, delete-override, describe, list, list-overrides, update-override) to GA.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to GA.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

570.0.0 (2026-05-27)

Google Cloud CLI

  • Rebuilt Windows bundled Python for the gcloud CLI with cryptography 46.0.7 and pyOpenSSL 26.0.0.
  • Updated Linux bundled Python for the gcloud CLI to 3.14.5.
  • Updated the gcloud CLI authentication caching logic to natively store and refresh Regional Access Boundary (RAB) data.
  • Reverted Windows PuTTY executables to version 0.81 due to a breakage.

AlloyDB

  • Added flag --labels to gcloud beta alloydb instances create|create-secondary commands assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud beta alloydb instances update commands to update, remove, or clear labels for an instance.

Beyondcorp

  • Enabled IAM conditions support for add-iam-policy-binding and remove-iam-policy-binding commands under gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications. Added sample values for conditions in command help text.

BigLake

  • Promoted gcloud biglake hive catalogs to beta.
  • Promoted gcloud biglake hive databases to beta.
  • Promoted federated unity catalog flags of gcloud biglake iceberg catalogs to beta.
  • Promoted --primary-location flag of gcloud biglake iceberg catalogs to GA.

BigQuery

  • Remove --alpha=reservation_groups in bq mk, show, ls and rm --reservation_group operations.
  • Added support for table identifiers in the form of project.catalog.namespace.table.
  • Added support for dataset identifiers in the form of catalog.namespace.
  • Added support for showing and removing row access policies using the bq show and bq rm commands.
  • Fixed 'NoneType' error handling and short assignment ID parsing in bq mk --reservation_assignment when reservation_id is not specified.
  • Added support for specifying a reservation assignment name in bq mk --reservation_assignment.
  • Added support for principal field for the bq mk, bq ls, and bq show commands with the flag --reservation_assignment.
  • Removed the frozen dependency on an old version of absl.

Cloud Alerting

  • Fixing List Alerts gcloud CLI example commands.

Cloud Backup DR

  • Added --use-project-service-account flag for gcloud backup-dr backups restore compute and gcloud backup-dr backups restore disk.

Cloud Dataplex

  • Added --all-schema-fields flag to gcloud dataplex context lookup to include all schema fields in the context.

Cloud Key Management Service

  • Added --project flag to gcloud kms autokey-config describe to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support the key-project-resolution-mode field.

Cloud Run

  • Added interactive prompt instead of erroring out when project is not specified in gcloud beta run deploy.
  • Added support for suggesting project and region from Artifact Registry URL in gcloud beta run deploy.
  • Added --[no]--ssh flag to gcloud beta run deploy and gcloud beta run services update to enable or disable SSH access to the Cloud Run service's container instances.
  • Added --domain flag to gcloud beta run deploy to create domain mappings on the fly during service deployment.

Cloud Spanner

  • Add --labels flag to gcloud spanner instances create command to support specifying labels during instance creation.
  • Add --update-labels, --clear-labels and --remove-labels flags to gcloud spanner instances update command to support updating labels.

Cloud Storage

  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches update to support enabling cache ingest on write, and enabled rendering of the parsed property in the anywhere-caches describe command output.
  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches create to support enabling cache ingest on write.

Cloud Workstations

  • Added --disk-archive-timeout flag to gcloud workstations configs create and gcloud workstations configs update commands.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters create command.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters update command.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added centos/rhel/rocky 10, debian 13, ubuntu 24.04/25.10 to allowed list of values for osShortName and osVersion of gcloud compute instances ops-agents policies [create|update].
  • Promoted the --location flag of gcloud compute interconnects update to beta.
  • Promoted --post-quantum-key-exchange flag on gcloud compute ssl-policies create and gcloud compute ssl-policies update to GA.
  • Promoted gcloud compute advice capacity to beta.
  • Promoted gcloud compute advice capacity-history to beta.
  • Promoted --resource-manager-tags flag for gcloud compute commitments create to beta and GA.

  • Added --stabilization-period flag to gcloud compute instance-groups managed <set-autoscaling|update-autoscaling> to configure autoscaler load stabilization period before scale-in decisions.

  • Added --minimal-action flag to gcloud compute instances update.

  • Promoted --view flag of gcloud compute forwarding-rules describe to GA.

  • Promoted gcloud compute org-rollouts cancel to beta.

  • Promoted gcloud compute org-rollouts delete to beta.

  • Promoted gcloud compute org-rollouts describe to beta.

  • Promoted gcloud compute org-rollouts list to beta.

  • Promoted gcloud compute org-rollout-plans create to beta.

  • Promoted gcloud compute org-rollout-plans delete to beta.

  • Promoted gcloud compute org-rollout-plans describe to beta.

  • Promoted gcloud compute org-rollout-plans list to beta.

  • Removed validation on empty folder share list on gcloud compute reservations create.

  • Promoted --secondary-ipv6-range flag on gcloud compute networks subnets create, and --add-secondary-ipv6-range and --remove-secondary-ipv6-range flags on gcloud compute networks subnets update to beta.

  • Promoted --ipv6-aliases flag to gcloud compute instances create, gcloud compute instances network-interfaces [add|update], and gcloud compute instance-templates create in beta.

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in alpha.

Kubernetes Engine

  • Promoted --enable-agent-sandbox flag to GA for gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways command group to GA, including create and update commands.
  • Added support for HYBRID_INSPECTION preset topology to gcloud network-connectivity hubs create in GA.

Network Management

  • Added gcloud network-management network-monitoring-providers command group which manages the enablement state of the Network Insights service.
  • Added gcloud network-management network-monitoring-providers monitoring-points command group which manages agents within a network or application infrastructure that send probes.
  • Added gcloud network-management network-monitoring-providers network-paths command group which manages the hop-by-hop route and active network delivery quality between a monitoring point and a target destination.
  • Added gcloud network-management network-monitoring-providers web-paths command group which manages monitored web applications or URLs.

Network Security

  • Promoted gcloud network-security secure-access-connect command group to GA, including attachments and realms commands.
  • Restricted Symantec integration and localization arguments (such as --symantec-site and --country) to ALPHA and BETA tracks only.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

569.0.0 (2026-05-19)

Breaking Changes

  • (Google Cloud CLI) The anthoscli component is no longer included by default in Debian and RPM package installations to significantly reduce the default install size. Users who require anthoscli can install it manually by running gcloud components install anthoscli or sudo apt-get install google-cloud-cli-anthoscli.

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Updated Windows bundled Python for the gcloud CLI to 3.14.4.

AI

  • Fixed --format field selection in gcloud ai model-garden models list.

Anthos

  • Updated anthos-cli with newer go version and library dependencies.

App Engine

Certificate Authority Service

  • Added support for allowing requesters to specify the certificate validity start time, configurable via the CA pool's issuance policy.
  • Added --requested-not-before-time flag to gcloud privateca certificates create.

Cloud Dataproc

  • Added --resource-manager-tag flag to gcloud dataproc batches submit and gcloud dataproc sessions create commands to allow associating Resource Manager Tags with compute resources.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud kms inventory get-protected-resources-summary.
  • Updated gcloud kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.
  • Added --project flag to gcloud beta kms autokey-config describe and gcloud beta kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud beta kms autokey-config update to support the key-resolution-mode field.

Cloud SQL

  • Added MySQL 9.7 to supported database versions.

Cloud Storage

  • Promoted gcloud storage intelligence-findings commands to GA.

Compute Engine

  • Added --request-body-to-exclude flag to the alpha and beta levels of:
    • gcloud compute security-policies rules add-preconfig-waf-exclusion
    • gcloud compute security-policies rules remove-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules add-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules remove-preconfig-waf-exclusion
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.

Compute Firewall Policies

  • Promoted --target-type and --target-forwarding-rules flags of gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update to GA.

Database Migration

  • Allowed --ssl-type=REQUIRED without specifying certificates.

Kubernetes Engine

  • Added --add-maintenance-exclusion-until-end-of-support and --remove-maintenance-exclusion-until-end-of-support flag in gcloud container node-pools create/update.
  • Added --node-creation-mode flag to gcloud container clusters create, create-auto, and update to allow control plane node creation mode.
  • Added --enable-secret-sync, --enable-secret-sync-rotation and secret-sync-rotation-interval flags to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update for GA.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.12)
    • kubectl.1.34 (1.34.8)
    • kubectl.1.35 (1.35.5)
    • kubectl.1.36 (1.36.1)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

568.0.0 (2026-05-12)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.4 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

Apigee

  • Added support for DRZ endpoints for SA region.

App Optimize

  • Modified gcloud beta app-optimize reports read to show the Report data in a tabular format by default.

Cloud Backup DR

  • Added --compute-instance-properties flag to gcloud backup-dr backup-plans create and update to support workload-specific properties for Compute Engine instance backups.

Cloud Composer

  • Added --cloud-run-functions-routing flag to gcloud composer environments create and gcloud composer environments update (alpha and beta).

Cloud Firestore

  • Added search-config option to field-config flag in gcloud firestore indexes composite create in beta.
  • Added search-index-options option to gcloud firestore indexes composite create in beta.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap tcp IAM commands to beta.

Compute Engine

  • Promoted gcloud compute global-vm-extension-policies to GA.
  • Promoted PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP0 and PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP1 values of --purpose flag on gcloud compute addresses create to beta.
  • Promoted --view flag on gcloud compute forwarding-rules describe to beta.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in beta.

Kpt

Kubernetes Engine

  • Added --node-pool-upgrade-concurrency-config flag in gcloud container clusters create/create-auto/update.
  • Added --node-architecture-taint-behavior flag to gcloud container clusters create, gcloud container node-pools create and gcloud container node-pools update to control architecture taints for nodes specifically for ARM nodes.
  • Added gcloud container container workload profiles manifests create command. This command Provides optimized deployment manifests for non-inference workloads running on GKE.

Pubsub Emulator

  • Add support for keep alive pings.

Workbench

  • Added --data-disk-resource-policies flag to gcloud workbench instances update to support attaching and updating snapshot schedule resource policies on data disks.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

567.0.0 (2026-05-05)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI to resolve CVE-2024-9979.

AI

  • Added --system-labels flag to gcloud ai model-garden models deploy for custom weights deployments.

API Registry

AlloyDB

  • Added IAM_GROUP option to --type flag of gcloud alloydb users create to represent IAM groups.

App Engine

  • Removed --entrypoint flag from gcloud beta app migrate-to-run and updated the command to extract it from configuration files (app.yaml or version config) automatically.
  • Updated the Go SDK to version 1.9.78. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/go/release-notes.

Artifact Registry

  • Added gcloud artifacts projects command group, including gcloud artifacts projects describe and gcloud artifacts projects update, to view and manage project-level settings per location.
  • Added --clear-platform-logs, --disable-platform-logs, --enable-platform-logs, and --severity flags to gcloud artifacts projects update, gcloud artifacts repositories create, and gcloud artifacts repositories update to configure platform logging.

BigLake

  • Fixed issue where gcloud biglake iceberg catalogs list does not return replicas or storage-regions.

Cloud Dataplex

  • Added --context-format flag to gcloud dataplex context lookup to specify the output format (yaml, json, xml).
  • Added --options flag to gcloud dataplex context lookup to provide additional configurations via a JSON string.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.21.0
    • Added support for subqueries, subcollections, let(...) stage, and nested field modification in add_fields(...) & select(...) stages in the emulator.

Cloud Identity-Aware Proxy

  • Added support for --resource-type=agent-registry for gcloud beta iap web get-iam-policy command in alpha and beta.
  • Added --agent, --mcp-server and --endpoint flag to gcloud beta iap web get-iam-policy --resource-type=agent-registry.

Cloud Key Management Service

  • Added a new enum value external-mu to Digest.
  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud NetApp

  • Added gcloud netapp storage-pools restore-volume command to alpha and beta tracks of the storage-pool group.
  • Added --ontap-source flag to gcloud beta netapp backups create.
  • Added gcloud netapp storage-pools list-backup-configs command to alpha and beta tracks of the storage-pool group.
  • Added gcloud netapp storage-pools update-backup-config command to alpha and beta tracks of the storage-pool group.

Cloud Spanner

  • Added --clear-kms-keys flag to gcloud spanner databases update to support reverting a Cloud Spanner database from customer-managed encryption keys (CMEK) to Google-managed default encryption.

Cloud Storage

  • Introduced --delete-source-objects flag to gcloud storage objects compose command.
  • Enables the use of Objects:move API for intra-bucket gcloud storage mv operations.
  • Updated gsutil component to 5.37.

Cloud Workstations

  • Added --start-workstation flag to gcloud workstations start-tcp-tunnel and gcloud workstations ssh commands to automatically start the workstation if its stopped.

Compute Engine

  • Promoted --accelerator-topology-mode flag on gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement to V1.

Database Migration

  • For PostgreSQL migrations, added --postgres-max-additional-subscriptions to gcloud database-migration migration-jobs create and gcloud database-migration migration-jobs update to specify the maximum number of additional subscriptions to use for the migration job.

Kubernetes Engine

  • Added new kubectl version 1.36.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)
    • kubectl.1.36 (1.36.0)
  • Added --confidential-node-type flag to gcloud container clusters create-auto to allow creation of confidential nodes of types: sev, sev_snp, tdx on GKE Autopilot clusters.

Network Connectivity

  • Add --group flag to gcloud network-connectivity spokes linked-vpc-network create and gcloud network-connectivity spokes linked-producer-vpc-network create to allow creating spokes in other groups.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security firewall-endpoint-associations create command to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoints commands.
  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoint-associations commands.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to the beta track.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to the beta track.

Network Services

  • Promoted gcloud compute networks peerings cancel-request-delete to GA.

Service Health

  • Added gcloud service-health command group to GA.

Workbench

  • Added Hyperdisk options to --boot-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML.
  • Added Hyperdisk options to --data-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML, HYPERDISK_EXTREME, HYPERDISK_THROUGHPUT.
  • Added support for Gen-4 machine series (e.g. N4, C4, C4A, C4D, M4, X4, H4, Z4, G4, E4) in gcloud workbench instances create. When a Gen-4 machine type is used without an explicit --boot-disk-type / --data-disk-type, gcloud defaults the disk type to HYPERDISK_BALANCED since these machine series do not support Persistent Disk.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

566.0.0 (2026-04-28)

Google Cloud CLI

  • Made gcloud-man-pages component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using --help flag.

AI

  • Fixed region choice for custom weights deployment in gcloud ai model-garden models deploy.

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

  • Added gcloud beta ai semantic-governance-policy-engine command group. Commands in this group allow users to manage the semantic governance policy engine configuration in Vertex AI.

AlloyDB

  • Promoted --backupdr-backup-plan flag for gcloud alloydb clusters create to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.

Apigee

  • Added support for DRZ endpoints for US, IN and EU region.

App Engine

App Lifecycle Manager

  • Added Application Design Center integration flags to gcloud app-lifecycle-manager commands.
  • Added --application-template, --application-template-revision, and --clear-application-template flags to gcloud app-lifecycle-manager saas create and update to manage Application Templates.
  • Added --app-params-group, --scope-type, and --clear-app-params flags to gcloud app-lifecycle-manager unit-kinds create and update to manage Application parameters.
  • Added --application and --clear-application flags to gcloud app-lifecycle-manager units create and update to manage Application references.
  • Added gcloud beta app-lifecycle-manager flags command group to support Feature Flags.

Assured Workloads

  • Added SPAIN_DATA_BOUNDARY_BY_TELEFONICA as option for --partner for gcloud assured workloads create.

Certificate Authority Service

  • Added --filter flag to gcloud privateca root list. The flag is able to allow filtering results based on specified boolean expression.

Cloud Backup DR

  • Promoted gcloud backup-dr to beta.

Cloud Bigtable

  • Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726, CVE-2026-34986, CVE-2025-58181, and CVE-2026-24051.

Cloud Dataflow

  • Added --launcher-vm-timeout-secs flag to gcloud dataflow flex-template run command, allowing users to configure the timeout duration for the launcher VM.

Cloud Dataplex

  • Added gcloud dataplex entries modify command.
  • Added --use-user-credential and --service-account flags to gcloud dataplex datascans create data-quality command.

Cloud Dataproc

  • Removed legacy --tier flag from gcloud dataproc clusters create. Please use the new flag --engine to create clusters with Lightning Engine or the default engine.

Cloud Firestore

  • Added --concurrency-mode flag to gcloud firestore databases create and gcloud firestore databases update commands to allow configuring the concurrency control mode of a Firestore database.
  • Added --expiration-offset flag to gcloud firestore fields ttls update (when used with --enable-ttl) to allow an offset to be specified when updating TTL configuration.

Cloud Key Management Service

  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud Logging

  • Added list command to gcloud logging recent-queries.
  • Added create, delete, describe, list, and update commands to gcloud logging saved-queries.

Cloud NetApp

  • Added --cross-project-vault to gcloud beta netapp backup-vaults create.

Cloud Run

  • Fixed an issue where GPU zonal redundancy setting is not cleared when --gpu=0 flag is specified to clear GPU settings.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.3 of the Cloud SQL Proxy.

Cloud Storage

  • Updated gcloud-crc32c with latest version of golang go1.26.2.

Cloud Workstations

  • Added --enable-http2 flag to gcloud workstations cluster create command.
  • Added --enable-http2 and --no-enable-http2 flags to gcloud workstations cluster update command.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.
  • Promoted --resource-manager-tags flag for gcloud compute future-reservations create to beta and GA.
  • Promoted gcloud compute rollouts commands to GA.
  • Promoted gcloud compute rollout-plans commands to GA.
  • Promoted cachePolicy support for gcloud compute url-maps to GA.
  • Promoted gcloud compute instant-snapshot-groups create to GA.
  • Promoted gcloud compute instant-snapshot-groups delete to GA.
  • Promoted gcloud compute instant-snapshot-groups describe to GA.
  • Promoted gcloud compute instant-snapshot-groups list to GA.
  • Promoted gcloud compute disks bulk create to beta.
  • Added --identity, --identity-certificate and --most-disruptive-allowed-action flags to gcloud compute instances update in alpha.
  • Promoted --discard-local-ssd flag on gcloud compute instances update-from-file to beta and GA.
  • Promoted gcloud compute disks bulk create to GA.

GKE Hub

  • Added support for container/use_application_default_credentials property in gcloud container fleet memberships get-credentials. When set to true, generated kubeconfig includes --use-application-default-credentials flag for gke-gcloud-auth-plugin.

Kubernetes Engine

  • Promoted --enable-pod-snapshots and --disable-pod-snapshots flags of gcloud container clusters create to GA.
  • Promoted --control-plane-egress flag of gcloud container clusters create command and gcloud container clusters update command to GA.
  • Added --subnetwork flag to gcloud container node-pools create.
  • Add --enable-autoprovisioning to gcloud container clusters create|update commands to support configuring auto-provisioning settings without enabling NAP.
  • Updated default kubectl from 1.34.6 to 1.35.3.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)

Network Services

  • Added AgentGateway support in beta.

Privileged Access Manager

  • Added --scheduled-activation-time flag to gcloud beta pam grants create to support scheduled activation times for grants.

Security Command Center

  • Added gcloud scc sources list command to list Security Command Center sources.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

565.0.0 (2026-04-14)

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

Beyondcorp

  • Added add-iam-policy-binding and remove-iam-policy-binding commands to gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications.

BigLake

  • Promoted gcloud biglake iceberg tables to GA.

Cloud Bigtable

  • Added --edition flag to gcloud bigtable instances create and gcloud bigtable instances update to support Bigtable Editions.
  • Added gcloud beta bigtable memory-layers describe and gcloud beta bigtable memory-layers update commands to read, enable, or disable Cloud Bigtable memory layers.
  • Added --use-memory-layer and --no-use-memory-layer flags to gcloud beta bigtable app-profiles create and gcloud beta bigtable app-profiles update to support enabling and disabling memory layer usage for app profiles.

Cloud Dataproc

  • Added --master-attached-disks, --worker-attached-disks, and secondary-worker-attached-disks flags to gcloud dataproc clusters create to allow attaching non-boot disks to group of instances.
  • Added --engine flag to gcloud dataproc clusters create to allow creating clusters with Lightning Engine or the default engine.

Cloud Interconnect

  • Add a new section "DEFAULTABLE PER-INTERCONNECT FLAGS" for gcloud compute interconnects groups create-members.

Cloud Memorystore

  • Added new node types (redis-highcpu-medium, redis-standard-large, redis-highmem-2xlarge) for Memorystore for Redis Cluster.
  • Added new node types (custom-pico, custom-micro, custom-mini, highcpu-medium, standard-large, highmem-2xlarge) for Memorystore for Valkey.

Cloud NetApp

  • Added --scale-type flag to gcloud netapp storage-pools create to specify the storage pool scale-type (e.g., SCALEOUT) upon creation.
  • Added --large-capacity-config flag to gcloud netapp volumes create to specify the large-capacity-config upon creation.
  • Added --mode flag to GA track for gcloud netapp storage-pools create.
  • Added gcloud netapp storage-pool execute command to GA track of the storage-pool group.

Cloud Run

  • Promoted volumes shortcut (allowing optional name parameter in --add-volume flag when mount-path is provided) to gcloud run command groups.
  • Promoted gcloud run flags --scaling-cpu-target and --scaling-concurrency-target to beta.
  • Promoted gcloud run worker-pools, gcloud run worker-pools revisions and gcloud run worker-pools logs to GA.

Cloud Storage

  • Updated gcloud-crc32c to support computing CRC32C checksums for data chunks.

Compute Engine

  • Promoted gcloud compute addresses update to GA.
  • Promoted regional backend buckets and aggregated list support in gcloud compute backend-buckets to GA.
  • Promoted regional backend bucket support in gcloud compute url-maps to GA.
  • Promoted gcloud compute zone-vm-extension-policies to GA.

Database Migration

  • Added --use-postgres-native flag to gcloud database-migration migration-jobs create command to allow users to create native postgres migrations.

Network Connectivity

  • promoting gcloud networkconnectivity transports from beta.
  • added transports create flag group in beta for NCC Hub fields.
  • set transports create --stack_type default value to ipv4-only because API requires it is set.

Network Security

  • Added describe command to gcloud network-security security-profiles threat-prevention.

Service Health

  • Added gcloud service-health command group to beta.
  • Added --encryption-spec-crypto-key-name flag to gcloud vector-search collections create to allow creating collections with CMEK encryption.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

564.0.0 (2026-04-07)

Breaking Changes

  • (Saas Runtime) Deprecated gcloud saas-runtime command group. Use gcloud app-lifecycle-manager instead.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.11 with grpcio v1.80.0.
  • Updated Windows bundled Python for the gcloud CLI with grpcio v1.80.0 and setuptools v80.10.2 which fixed CVE-2026-23949.
  • Added --check-certs flag to gcloud info --run-diagnostics to troubleshoot certificate validation failures when using proxy servers and custom CA certs.
    • For example, to troubleshoot certificate verification failures for compute.googleapis.com, run: gcloud info --run-diagnostics --check-certs=compute.googleapis.com

App Lifecycle Manager

  • Added gcloud app-lifecycle-manager command group to replace gcloud saas-runtime.

BigLake

  • Added list pagination to gcloud biglake iceberg catalogs.
  • Added --description flag to gcloud biglake iceberg catalogs create/update.

Cloud Data Fusion

  • Added regional endpoint support for gcloud beta data-fusion. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud Firestore

  • Added support for search indexes in gcloud firestore indexes composite and gcloud firestore indexes describe.

Cloud Run

  • Added support for volumes with type=ephemeral-disk to gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs update, gcloud run worker-pools deploy and gcloud run worker-pools update in beta.
  • Added regional endpoint support for the following gcloud beta run commands:
    • gcloud beta run deploy
    • gcloud beta run services
    • gcloud beta run revisions
    • gcloud beta run jobs
    • gcloud beta run executions Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Supported build arguments in gcloud run compose up.

Cloud Storage

  • Promoted --destination-kms-key-name flag of gcloud storage buckets relocate to GA.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted --resource-manager-tags flag for gcloud compute reservations create to beta and GA.
  • Promoted gcloud compute reservations slots get-version to GA.
  • Promoted gcloud compute reservations sub-blocks get-version to GA.

Network Connectivity

  • Added --bandwidth=BANDWIDTH flag to gcloud beta network-connectivity transports update.
  • Added --stack-type=STACK_TYPE flag to gcloud beta network-connectivity transports update.
  • Removed default behaviour of --auto-accept flag for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

563.0.0 (2026-03-31)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.13.12.

AlloyDB

  • Added gcloud beta alloydb connect which provides a secure connection to your instance using the AlloyDB Auth Proxy and psql.
  • Added support for c4a-highmem-2-lssd machine-type in gcloud alloydb instances create and gcloud alloydb instances update.

App Engine

  • Reduced the flags to only those that were needed for migrate-to-run command.

Beyondcorp

  • Added --service-discovery flag to gcloud beyondcorp security-gateways create and update commands.

BigLake

  • Added gcloud biglake iceberg tables create to beta.
  • Promoted gcloud biglake iceberg catalogs to GA.
  • Promoted gcloud biglake iceberg namespaces to GA.
  • Added gcloud biglake iceberg tables update to beta.

BigQuery

  • Fixed a bug that would fail to load Cloud CLI configs when reauthentication is required of the user.
  • Improved authentication performance for user account credentials. Note that changing the active Cloud CLI account during a long-running bq command may cause the command to fail if the new account has no access to the corresponding resource.

Certificate Authority Service

  • Added rdn sequence subject argument to gcloud privateca certificates create to use exact distinguished name from CSR.

Cloud Identity-Aware Proxy

  • Added get-iam-policy, set-iam-policy, add-iam-policy-binding, and remove-iam-policy-binding commands to gcloud alpha iap tcp.

Cloud Memorystore

  • Added maintenance_version, available_maintenance_versions, and effective_maintenance_version fields to the output of gcloud memcache instances describe.
  • Added --maintenance-version flag to gcloud memcache instances update to support self-service updates.

Cloud Observability

Cloud SQL

  • Promoted gcloud sql instances perform-storage-shrink to the GA track.
  • Promoted gcloud sql instances get-storage-shrink-config to the GA track.
  • Updated 'cloud-sql-proxy' packaged component to use 2.21.2 of the Cloud SQL Proxy.
  • Added Microsoft Entra ID authentication support for Cloud SQL instances.
  • Added --entra-id-tenant-id and --entra-id-application-id flags to gcloud sql instances create.
  • Added --entra-id-tenant-id, --entra-id-application-id, and --clear-entra-id-config flags to gcloud sql instances patch.
  • Added Entra ID certificate management commands:
    • gcloud sql ssl entraid-certs create
    • gcloud sql ssl entraid-certs list
    • gcloud sql ssl entraid-certs rotate
    • gcloud sql ssl entraid-certs rollback

Cloud Services

  • Updated gcloud services mcp enable command to only perform service enablement, as MCP enablement is no longer required.
  • Updated gcloud services mcp disable command to be a no-op, as MCP enablement is no longer required.
  • Updated gcloud services mcp list command to list enabled services with MCP configuration. No behavior change to --available.

Compute Engine

  • Promoted --service flag for gcloud compute backend-services add-backend, gcloud compute backend-services update-backend, and compute backend-services remove-backend to beta.
  • Fixed typo in --resource-manager-tags flag for Regional Backend Services.
  • Promoted gcloud compute disks update-kms-key to GA.
  • Promoted gcloud compute snapshots update-kms-key to GA.

Database Migration

  • Added --auto-conversion, --quality-assessment --conversion-assistance, and --pattern-matching flags to gcloud database-migration conversion-workspaces create and update to control Gemini settings.

Developer Connect

  • Added dataform option to --github-config-app of gcloud developer connect connections create.

Kubernetes Engine

  • Updated default kubectl from 1.34.5 to 1.34.6.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.10)
    • kubectl.1.34 (1.34.6)
    • kubectl.1.35 (1.35.3)
  • Added --accelerator-network-profile flag to gcloud container node-pools create command.

Network Connectivity

  • Added --auto-accept, --hub, and --psc-routing-enabled flags to gcloud beta network-connectivity transports create.
  • Made --network flag optional for gcloud beta network-connectivity transports create.

Secure Source Manager

  • Added --custom-hostname-api, --custom-hostname-git-http, --custom-hostname-git-ssh, and --custom-hostname-html flags to gcloud source-manager instances create command to allow users to specify custom hostnames for Git HTTP/SSH, API and HTML access when creating a private instance.

Service Extensions

  • Added --kms-key-name flag to gcloud beta service-extensions wasm-plugins command group to enable CMEK support.

Vector Search

  • Modified --use-index flag of gcloud vector-search collections data-objects search to accept index ID as a value.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

562.0.0 (2026-03-24)

BigQuery

  • Added regional endpoint support for bq migration-workflows. Use global flag --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Fixed a bug where an actual authorization error may be masked by a "missing x-goog-user-project header" error.
  • Errors with the reason alreadyExists are now thrown as BigqueryDuplicateError instead of BigqueryServiceError.
  • Fixed quota project HTTP header fallback value when using legacy auth.
  • Updated the data source for Cloud CLI properties when --use_gcloud_config is set.
  • Add information about the resource that is being managed to the user-agent HTTP header in the API request.

Cloud Backup DR

  • Unhide --disk-properties flag in gcloud backup-dr backup-plans create and gcloud backup-dr backup-plans update to allow configuring disk-level properties like guest-flush.

Cloud DNS

  • Improved robustness of gcloud dns record-sets transaction commands by allowing transaction files to be empty or omit sections, and added a "Nothing to do" message for transactions with no changes.

Cloud Dataplex

  • Promoted dataplex context to GA.
  • Added --semantic-search flag to gcloud dataplex entries search to enable search based on meaning and intent, rather than just keywords.

Cloud Dataproc

  • Fixed a security issue where a race condition could allow local files staged for job submission to be modified before job execution.

Cloud IAM

  • Added gcloud iam workload-identity-pools add-attestation-rule|remove-attestation-rule|set-attestation-ruleslist-attestation-rules which is part of the Managed Workload Identity feature.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud beta kms inventory get-protected-resources-summary.
  • Updated gcloud beta kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.

Cloud Run

  • Promoted gcloud run compose up command to GA.

Cloud SQL

  • Upgraded --reconcile-psa-networking flag for gcloud sql instances patch command to GA. This field reconciles the instance's PSA networking configuration. If the instance is already on a PSA network, the DNS zone and records associated with the PSA write endpoint are either added if missing or updated if incorrect.

Cloud Storage

  • Updated gcloud storage cp, gcloud storage mv and gcloud storage rsync to support Rapid Bucket see https://docs.cloud.google.com/storage/docs/rapid/rapid-bucket.
  • Added a new predefined key, storage-class to the existing --rewrite-object flag in gcloud storage batch-operations jobs create to rewrite object storage classes.

Compute Engine

  • Added --load-balancing-scheme flag to gcloud beta compute target-tcp-proxies create.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create command in GA.
  • Promoted health-aggregation-policies command in gcloud compute to GA.
  • Promoted health-sources command in gcloud compute to GA.
  • Promoted composite-health-checks command in gcloud compute to GA.
  • Promoted --target-size-policy-mode flag for gcloud compute instance-groups managed create to GA.

Compute Network Policies

  • Promoted compute network-policies to beta.

Gemini

  • Added gcloud gemini gda-observability-settings API.
  • Added gcloud gemini gda-observability-settings setting-bindings API.
  • Added gcloud gemini gibq-observability-settings API.
  • Added gcloud gemini gibq-observability-settings setting-bindings API.

Kubernetes Engine

  • Added --enable-scheduled-upgrades to gcloud alpha|beta container clusters create|update command.
  • Added --disable-scheduled-upgrades to gcloud alpha|beta container clusters update command.

Model Armor

  • Added support for --google-mcp-server-apis, --add-google-mcp-server-apis, --remove-google-mcp-server-apis, and --clear-google-mcp-server-apis flags to manage Google MCP server APIs in floor settings.
  • Added support for repeated --add-integrated-services and --remove-integrated-services flags to gcloud model-armor floorsettings update.

Network Connectivity

  • Modified --include-import-ranges flag, and added --exclude-import-ranges, --include-export-ranges, --exclude-export-ranges flags to gcloud network-connectivity spokes linked-router-appliances create, gcloud network-connectivity spokes linked-router-appliances update, gcloud network-connectivity spokes linked-interconnect-attachments create, gcloud network-connectivity spokes linked-interconnect-attachments update, gcloud network-connectivity spokes linked-vpn-tunnels create, gcloud network-connectivity spokes linked-vpn-tunnels update to support hybrid spoke filters.

Network Management

  • Removed deprecated 'alpha network-management simulation'.

Network Security

  • Added command group network-security security-profiles url-filtering and promoted it to GA.
  • Added flag --url-filtering-profile to command network-security security-profile-groups create in the GA track.
  • Moved flag --threat-prevention-profile to a mutex with flag --clear-threat-prevention-profile for command network-security security-profile-groups update in the GA track.
  • Added mutex with flags --url-filtering-profile and --clear-url-filtering-profile to command network-security security-profile-groups update in the GA track.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

561.0.0 (2026-03-17)

AI

  • - Added europe-north2 to online prediction supported regions.
  • Added us-west8 to online prediction supported regions.

AlloyDB

  • Added the --[no-]observability-config-track-active-query-plan flag to gcloud beta alloydb instances create and gcloud beta alloydb instances update to enable or disable the tracking of active query plans.

BigLake

  • Promoted gcloud biglake iceberg namespaces to beta. Create, Update, Delete, Describe, and List commands are now available in beta.
  • Promoted gcloud biglake iceberg tables to beta. Delete, Describe, Get-Iam-Policy, List, Register, and Set-Iam-Policy commands are now available in beta.

Cloud DNS

  • Added --skip-soa-update flag to gcloud dns record-sets transaction start and gcloud dns record-sets import to allow initiating transactions without automatically staging an SOA serial number increment.

Cloud Filestore

  • Add source-backup-project flag to gcloud filestore instances create.

Cloud IAM

  • Deprecated the extended-attributes flags used in gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc in favor of SCIM.

  • Added the --[no-]use-default-shared-ca flag to gcloud iam workload-identity-pools create and update commands to let you provision certificates from default shared certificate authorities (CAs).

Cloud Key Management Service

  • Added support for post-quantum asymmetric signing algorithms: ML-DSA-44, ML-DSA-88, and the external-mu ML-DSA variants.

Cloud SQL

  • Added support in gcloud sql instances point-in-time-restore to perform cross-project PITR with flags: --activation-policy, --assign-ip, --network, --authorized-networks, --enable-google-private-path, --availability-type, --backup, --backup-location, --backup-start-time, --collation, --cpu, --database-version, --enable-bin-log, --enable-point-in-time-recovery, --maintenance-release-channel, --maintenance-window-day, --maintenance-window-hour, --deny-maintenance-period-start-date, --deny-maintenance-period-end-date, --deny-maintenance-period-time, --insights-config-query-insights-enabled, --insights-config-query-string-length, --insights-config-record-application-tags, --insights-config-record-client-address, --insights-config-query-plans-per-minute, --memory, --region, --zone, --secondary-zone, --require-ssl, --retained-backups-count, --retained-transaction-log-days, --storage-auto-increase, --storage-size, --storage-provisioned-iops, --storage-provisioned-throughput, --storage-type, --tier, --t, --edition, --disk-encryption-key, --active-directory-domain, --audit-bucket-path, --audit-retention-interval, --audit-upload-interval, --deletion-protection, --time-zone, --connector-enforcement, --timeout, --enable-private-service-connect, --allowed-psc-projects, --ssl-mode, --final-backup, --final-backup-retention-days, --clear-network, --active-directory-mode, --active-directory-dns-servers, --active-directory-organizational-unit, --active-directory-secret-manager-key, --clear-active-directory-dns-servers, --clear-active-directory, --clear-disk-encryption.

Cloud Storage

  • Promoted object-contexts feature to GA.

Compute Engine

  • Promoted endpoint-based connection policies feature for gcloud compute service-attachments update to GA. This feature allows specifying endpoint URLs in --consumer-accept-list and --consumer-reject-list.
  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud compute service-attachments update to cleanup obsolete entries.
  • Promoted cachePolicy support for gcloud compute url-maps to beta.
  • Promoted --zonal-affinity-spillover and --zonal-affinity-spillover-ratio of gcloud compute backend-services create|update commands to GA.
  • Promoted --preemption-notice-duration flag to gcloud compute instances in beta.

Database Migration

  • Added --enable-iam-authentication and --disable-iam-authentication to gcloud database-migrate connection-profiles create and gcloud database-migrate connection-profiles update. The flag enabled or disables IAM authentication using DMS service agent to the destination instance. Currently supported only for Postgres destinations (Cloud SQL & AlloyDB).

Kubernetes Engine

  • Added support for enabling PTP-KVM time synchronization in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Looker

  • Added --catalog-integration-opt-out flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Network Services

  • Updated gcloud network-services tls-routes import and gcloud network-services tls-routes export to support targetProxies field.

Vector Search

  • Promoted gcloud vector-search collections export-data-objects to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

560.0.0 (2026-03-10)

Google Cloud CLI

  • Fixed issue where API enablement was checked on the wrong project for some commands depending on where --project was specified on the command line.

AlloyDB

  • Added --enable-dataplex-integration flag to gcloud alloydb clusters create|update|create-secondary|restore|migrate-cloud-sql to enable or disable Dataplex integration.

App Engine

Auth Login

  • Fixed an issue where auth/token_host property was ignored when context_aware/use_client_certificate was set to True.

BigQuery

  • Added new --reservation_group flag that can be used in bq mk, show, ls and rm operations.
  • Added information about command that is being executed to the user-agent header.
  • Added new --reservation_group_name flag that can be used in bq update reservation operation.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager supported-permissions describe ROLE_ID to beta and GA.
  • Promoted gcloud access-context-manager supported-permissions list to beta and GA.

Cloud Build

  • Added --publish flag to gcloud builds submit for pack builds, which will directly build images on Artifact Registry and not on local Docker.

Cloud Datastream

  • Fixed an issue where gcloud datastream streams update did not properly handle --rule-sets flag.

Cloud Firestore Emulator

  • Added --edition flag to gcloud emulators firestore start to allow starting the emulator in both 'enterprise' and 'standard' edition.

Cloud IAM

  • Added azure-ad-groups-display-name field to --extra-attributes-type flag to gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc which allow user to setup attributes type for extra attributes oauth2 that fetches azure ad group display name property.

Cloud SQL

  • Added gcloud sql instances execute-sql in GA.

Cloud Storage

  • Promoted --update-object-custom-contexts, update-object-custom-contexts-file, clear-object-custom-contexts, and clear-all-object-custom-contexts flags in gcloud storage batch-operations jobs create to GA.
  • Updated gsutil component to 5.36.
  • Promoted --encryption-enforcement-file flag of gcloud storage buckets create and gcloud storage buckets update to GA.

Compute Engine

  • Updated gcloud compute images list to include public images from the almalinux-cloud project in the default search.
  • Promoted gcloud compute storage-pools list support for Exapools to GA.
  • Added --forward-proxy-direct-forwarding flag to gcloud compute backend-services create in beta.
  • Added --forward-proxy-cloud-run flag to gcloud compute backend-services create in beta.
  • Promoted --early-access-maintenance in gcloud compute reservations update to GA.
  • Promoted the following gcloud compute routers command groups to beta: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.

Config Connector

Database Migration

  • Added gcloud database-migration connection-profiles fetch-static-ips command to fetch the static IP addresses that need to be allowlisted for static IP connectivity.

Kubernetes Engine

  • Added flag option --autopilot-privileged-admission to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update commands. This flag allows specifying Cloud Storage or GKE-specific object paths pointing to privileged workload allowlists to be authorized for use in Autopilot mode.
  • Added support for setting max container restart period in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.
  • Updated default kubectl from 1.34.4 to 1.34.5.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.9)
    • kubectl.1.34 (1.34.5)
    • kubectl.1.35 (1.35.2)
  • Added --enable-agent-sandbox flag to gcloud container clusters create and update commands to enable or disable GKE Agent Sandbox feature.

Vector Search

  • Added gcloud vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources via v1 API.
  • Added support for Data Objects aggregation, query and search via v1 API.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

559.0.0 (2026-03-03)

Breaking Changes

  • (Compute Engine) The command gcloud compute project-info set-usage-bucket has been deprecated. Please use BigQuery Export instead.

Google Cloud CLI

  • Adjusted the maximum wait time between poll retries for async Long-Running Operations from 3 minutes to 20 seconds for some commands.

AI

  • Modified --region flag of gcloud ai custom-jobs to include new custom job regions.

AlloyDB

  • Added support for POSTGRES_18 as a version in alloydb clusters create for GA track.
  • Added support for POSTGRES_18 as a version in alloydb clusters migrate-cloud-sql for GA track.
  • Added support for POSTGRES_18 as a target version using alloydb clusters upgrade for GA track.

BigLake

  • Modified gcloud biglake iceberg catalogs delete to prompt for confirmation by default. Use --quiet flag to get the old behavior.

Certificate Authority Service

  • Added gcloud privateca operations command group to manage long-running operations.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.4
    • Minor bug fixes in Firestore Native mode

Cloud Key Management Service

  • Added gcloud beta kms kaj-config to help users view and updates KAJ default policy on a project/folder/organization.
  • Added gcloud beta kms kaj-enrollment to help users view the KAJ enrollment config of a project.

Cloud NetApp

  • Added gcloud netapp storage-pool execute command to the storage-pool group. This command allows execution of ONTAP CLI commands on the storage pool.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.1 of the Cloud SQL Proxy.

Cluster Director

  • Added id field to all storage resources. Users can set an identifier for storage resources when creating a cluster.

Compute Engine

  • Promoted --resolve-subnet-mask flag for gcloud compute networks subnets create to GA.
  • Added --resource-manager-tags flag to gcloud compute instant-snapshots create in beta and GA.

Database Migration

  • Added --original-migration-name flag to gcloud database-migration migration-jobs create command to allow users to create failback migration jobs.
  • Added --psc-service-attachment flag to gcloud database-migration connection-profiles create sqlserver command to allow users to create SQL Server connection profile for failback migration jobs.
  • Added --private-connection flag to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Private Connection connectivity method.
  • Added --forward-ssh-hostname, --forward-ssh-port, --forward-ssh-username, --forward-ssh-password, and --forward-ssh-private-key flags to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Forward SSH Tunnel connectivity method.

Kubernetes Engine

  • Added --consolidation-delay flag to gcloud container node-pools create and update to control when the Cluster Autoscaler can scale down underutilized nodes.
  • Added flag option --disable-multi-nic-lustre to add support for enabling/disabling the Lustre MultiNIC on GKE Standard and Autopilot clusters.

Network Security

  • Updated import and export schemas for gcloud network-security security-profile-groups.
  • Updated import and export schemas for gcloud network-security security-profiles.
  • Promoted the network-security security-profiles list command to GA.
  • Promoted the network-security security-profiles describe command to GA.
  • Promoted the network-security security-profiles export command to GA.
  • Promoted the network-security security-profiles import command to GA.
  • Add network-security security-profiles delete command.

Vector Search

  • Removed unsupported Vertex Ranker flags from gcloud beta vector-search collections data-objects batch-search command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

558.0.0 (2026-02-24)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added new value POSTGRES_18 to --version flag from gcloud alpha|beta alloydb clusters upgrade to support for upgrading AlloyDB clusters to PostgreSQL 18.

Apihub

  • Promoted gcloud apihub surface to GA which allows management of Apihub resources.

Cloud Functions

  • Promoted Direct VPC support for gcloud functions deploy to GA. Use flags --network, --subnet, --network-tags, and --direct-vpc-egress to configure Direct VPC egress for functions.

Cloud Identity-Aware Proxy

  • Promoted cloud-run resource-type support for IAP CLI to GA.

Cloud Key Management Service

  • Added gcloud kms keys versions delete command to support deletion of CryptoKey Versions.
  • Added gcloud kms keys delete command to support deletion of CryptoKeys.
  • Added gcloud kms retired-resources describe command to support retrieval of a RetiredResource.
  • Added gcloud kms retired-resources list command to support retrieval of RetiredResources.

Cloud NetApp

  • Added --mode flag to gcloud netapp storage-pools create.

Cloud Run

  • Promoted --[no-]iap flag to GA for commands gcloud run deploy, gcloud run services update and gcloud run multi-region-services update.

Cloud SQL

  • Added --data-api-access flag to gcloud sql instances create and patch in GA.

Cluster Director

  • Promoted gcloud alpha cluster-director to beta.

Compute Engine

  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud beta compute service-attachments update to remove entries for Private Service Connect endpoints that are no longer connected.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create to beta.
  • Added --instance-flexibility-policy flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update commands in beta.
  • Added CHIP_ERROR as a valid value for --fault-reasons in gcloud compute instances report-host-as-faulty in alpha, beta, and GA.
  • Promoted --target-service flag for gcloud compute service-attachments update to GA.
  • Added --resource-manager-tags flag to gcloud compute images create in beta and GA.
  • Promoted --network-ddos-adaptive-protection, --network-ddos-impacted-baseline-threshold, and --clear-network-ddos-impacted-baseline-threshold flags for gcloud compute security-policies update to beta.
  • Added --resource-manager-tags flag to gcloud compute disks create in beta and GA.
  • Added --resource-manager-tags flag to gcloud compute snapshots create in beta and GA.

GKE Hub

  • Promoted container fleet workload-identity methods to GA.

Kubernetes Engine

  • Added --maintenance-minor-version-disruption-interval and --maintenance-patch-version-disruption-interval flag in gcloud container clusters create/create-auto/update.

  • Updated default kubectl from 1.33.5 to 1.34.4.

  • Additional kubectl versions:

    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.12)
    • kubectl.1.33 (1.33.8)
    • kubectl.1.34 (1.34.4)
    • kubectl.1.35 (1.35.1)

Vector Search

  • Introduced etag support to gcloud beta vector-search data-objects methods.
  • Added configuration management support to gcloud beta vector-search collections indexes create method.
  • Added --dense-scann-search-leaves-pct and --dense-scann-initial-candidate-count flags to gcloud beta vector-search collections data-objects search to support dense ScaNN parameters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

557.0.0 (2026-02-18)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.2 to fix CVE CVE-2026-24049.
  • Update gcloud feedback to remove Stack Overflow and IRC as communication channels.

App Engine

Cloud Backup DR

  • Added --cloudsql-edition flag to gcloud backup-dr service-config init to support initializing Cloud SQL instances.

Cloud Bigtable

  • Rebuilt with Go 1.24.11 to fix CVE-2025-61727 and CVE-2025-61729.

Cloud DNS

  • Enforce version 3 in setIamPolicy managed zone command.

Cloud Interconnect

  • Deprecate --subzone flag of gcloud compute interconnects create.

Compute Engine

  • Added --template flag for gcloud compute instance-groups managed update command in GA.
  • Promoted gcloud compute instant-snapshot-groups create to beta.
  • Promoted gcloud compute instant-snapshot-groups delete to beta.
  • Promoted gcloud compute instant-snapshot-groups describe to beta.
  • Promoted gcloud compute instant-snapshot-groups list to beta.
  • Promoted gcloud compute rollouts describe to beta.
  • Promoted gcloud compute rollouts list to beta.
  • Promoted gcloud compute rollouts cancel to beta.
  • Promoted gcloud compute rollouts delete to beta.
  • Added min-cpu-platform field in --instance-selection flag of gcloud compute instance-groups managed create and gcloud compute instance-groups managed update in beta.
  • Added --discard-local-ssd flag to gcloud compute instances create in alpha.
  • Updated the network troubleshooting logic within gcloud compute ssh --troubleshoot to handle IAP and IPv6 connectivity scenarios.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --priority and --associated-policy-to-be-replaced flags of gcloud compute network-firewall-policies associations create to beta.
  • Promoted gcloud compute network-firewall-policies associations update command to beta.

Container Registry

  • Fixed an issue where gcloud container images list-tags would crash with a stack trace when receiving a non-JSON response from the server (e.g. an HTML error page). It now displays a user-friendly error message.

Eventarc

  • Added --clear-max-retry-attempts to gcloud eventarc triggers update to support unsetting a RetryPolicy delivery attempt setting.

Looker

  • Added --catalog-integration-enabled flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Pubsub Emulator

  • Add support for AI Inference Single Message Transforms (SMTs).
  • Fix race condition in unit tests.

Workbench

  • Promoted gcloud workbench executions and gcloud workbench schedules to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

556.0.0 (2026-02-10)

Google Cloud CLI

  • Fixed --filter parsing errors in gcloud compute list commands when filter expression contained "region" or "zone" as a substring somewhere in a parenthesized sub-expression.

AI

  • Added support for --disable-dedicated-endpoint to gcloud ai model-garden models deploy.

App Engine

BigQuery

  • Added a queryId in the execution metadata of RunQueryRpc return value if a job was not created.
  • Added support for labels in RunQueryRpc method.
  • Improved stack trace format for Python UDF error messages.
  • Fixed a bug where Google Cloud CLI config properties would not be read correctly.
  • Fixed a bug where a failed Data Transfer config update would display a Success message.

Cloud Backup DR

  • Added --clear-encryption-key flag to gcloud backup-dr backups restore compute to revert the CMEK encryption of disks of a VM to GMEK encryption.
  • Added kms-key property to --create-disk flag to support encryption of restored disk with a Customer Managed Encryption Key (CMEK).

Cloud Run

  • Added warning message for orgless project while deploying cloud-run service with IAP enabled.

Cloud SQL

  • Promoted --server-certificate-rotation-mode flag to GA in gcloud sql instances create and patch command.
  • Updated help text for --server-certificate-rotation-mode flag.

Compute Engine

  • Unhided gcloud compute advice capacity command in alpha.
  • Fix bug with updating standby target size to 0 when calling gcloud beta compute instance-groups managed update with flags --stopped-size or --suspended-size.
    • Added --resource-manager-tags flag to gcloud compute machine-images create in beta.
  • Added --resource-manager-tags flag to gcloud compute machine-images create in v1.
  • Promoted gcloud compute rollout-plans command group to beta.

Compute Firewall Policy Rules

  • Promoted new values for --policy-type flag of gcloud compute network-firewall-policies create to beta.

Developer Connect

  • Added flag --secure-source-manager-instance-config to gcloud developer-connect connections create and gcloud developer-connect connections update.
  • Non-scm providers for developer-connect account-connectors will not be deprecated.

GKE Hub

  • Promoted container fleet workload-identity methods to beta.

Kpt

Kubernetes Engine

  • Announced General Availability (GA) of support for the Image Streaming and Secondary Boot Disk feature on Ubuntu node images (UBUNTU_CONTAINERD) within Google Kubernetes Engine. This allows clusters using Ubuntu nodes to benefit from faster container startups by streaming image data.
  • Updated the help text for --enable-image-streaming flag (in gcloud container clusters create/update and gcloud container node-pools create/update). The enhanced help text now directs users to the public documentation for detailed version requirements and usage instructions for Image Streaming with both UBUNTU_CONTAINERD and COS_CONTAINERD node images.
  • Updated the help text for --secondary-boot-disk flag (in gcloud container node-pools create). The help text now provides links to the public documentation for detailed version requirements and usage instructions across different node image types, including UBUNTU_CONTAINERD.
  • Added flag option --autopilot-general-profile to gcloud container clusters create, create-auto and updatecommands. Accepted values are: none, no-performance. This flag allows specifying the Autopilot general compute profile for a cluster, available on clusters running version 1.32 or later. For more information, see https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#autopilot-compute-platform.

Network Connectivity

  • Fix gcloud beta network-connectivity transports profiles by adding REGION as a column on list, and align on --region flag for describe.
  • Marked advertised-routes as optional in gcloud beta network-connectivity transports create.

Vector Search

  • Added gcloud beta vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources.
  • Added support for Data Objects aggregation, query and search.
  • Added vector_search/location property to set default region for gcloud beta vector-search commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

555.0.0 (2026-02-03)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.1 to fix CVE GHSA-58pv-8j8x-9vj2.

Cloud Run

  • To reduce delay between the end of the build phase and the beginning of the service deployment phase, gcloud run deploy --source commands poll the build for completion more frequently. This reduces overall latency for the command.

Cloud SQL

  • Added gcloud sql users assign-roles which allows granting new roles and revoking existing roles to/from Postgres/MySQL users.
  • Added --database-roles flag to gcloud sql users create to allow granting additional database roles during user creation for Postgres/MySQL.
  • Added --destination-project and --destination-network flags to gcloud sql instances clone for cross-project clone operations. Both flags must be specified together to perform a cross-project clone.

Cloud Services

  • Add --group flag to gcloud services enable in beta.

Compute Engine

  • Added gcloud compute reservations slots list command in beta.
  • Added gcloud compute reservations slots describe command in beta.
  • Added gcloud compute reservations slots list command in v1.
  • Added gcloud compute reservations slots describe command in v1.
  • Deprecated --user-licenses in gcloud compute disks create and gcloud compute images create.
  • Deprecated --update-user-licenses and --clear-user-licenses in gcloud compute disks update and gcloud compute images update.
  • Promote --instance-selection and --instance-selection-machine-types flags of gcloud compute instances bulk create to GA.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in beta.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in v1.

Developer Connect

  • Deprecate non-scm account-connector OAuth providers.

Kpt

Kubernetes Engine

  • Added kubelet config options shutdownGracefulPeriodSeconds and shutdownGracefulPeriodCriticalPodsSeconds to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which allows user customization on node graceful shutdown.

Network Connectivity

  • Fix list and describe for gcloud beta network-connectivity transports.
  • Added gcloud beta network-connectivity transports update command.
  • Clarify --region flag for gcloud beta network-connectivity transports delete.

Network Management

  • Added --source-gke-pod and --destination-gke-pod flags to gcloud network-management connectivity-tests to allow executing Connectivity Tests to or from GKE Pods.
  • Updated comments and enum options for network, network-type, and project arguments of gcloud network-management connectivity-tests.

Pubsub Emulator

  • Add support for filtering to the Pub/Sub emulator.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

554.0.0 (2026-01-27)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.9. The minimum supported Python version is Python 3.10.
  • (Dataproc Metastore) Deprecated --read-write-regions and --read-only-regions flags of gcloud metastore services create. Use single region metastore instead.

BigLake

  • Promoted gcloud biglake iceberg to beta.

Cloud Dataflow

  • Added support for various flags --additional-experiments, --additional-pipeline-options, --additional-user-labels, --disable-public-ips, --temp-location, --staging-location, --num-workers, --max-workers, --worker-machine-type, --launcher-machine-type, --dataflow-kms-key, --enable-streaming-engine, --update, --transform-name-mappings to gcloud dataflow yaml run command.

Cloud Managed Kafka

  • Added --view flag to gcloud managed-kafka consumer-groups list to allow for full and basic views of consumer groups.

Cloud Resource Manager

  • Added Dynamic tags support to gcloud resource-manager tags bindings delete command. This command can be used to detach a tag from a resource.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.0 of the Cloud SQL Proxy.
  • Modified gcloud sql connect command to use Cloud SQL Proxy V2 API.
    • Added support for --auto-iam-authn, --private-ip, --psc, --auto-ip, --run-connection-test and --debug-logs flags.

Compute Engine

  • Added 400g as an additional option for --bandwidth of gcloud compute interconnects attachments dedicated create and gcloud compute interconnects attachments dedicated update.
  • Added --resource-manager-tags flag for alpha to gcloud compute storage-pools create to allow users to add Resource Manager tags to the storage pool resource during creation.
  • Added support to update graceful shutdown configuration in gcloud beta compute instances update-from-file command.

Kubernetes Engine

  • Added support for setting kernel module signature enforcement in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Network Connectivity

  • Fix flags for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

553.0.0 (2026-01-21)

AI

  • Added support for the 'dcgm-fi-dev-gpu-util', 'vllm-gpu-cache-usage-perc', and 'vllm-num-requests-waiting' autoscaling metrics to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

Auth Login

  • Added a warning message for scopes that will be blocked soon for the default client ID generated by gcloud auth application-default login. Scopes include:
    • https://www.googleapis.com/auth/drive
    • https://www.googleapis.com/auth/spreadsheets
    • https://www.googleapis.com/auth/drive.readonly
    • https://www.googleapis.com/auth/analytics.readonly
    • https://www.googleapis.com/auth/spreadsheets.readonly
    • https://www.googleapis.com/auth/calendar
    • https://www.googleapis.com/auth/adwords
    • https://www.googleapis.com/auth/calendar.readonly
    • https://www.googleapis.com/auth/analytics.edit
    • https://www.googleapis.com/auth/drive.metadata.readonly
    • https://www.googleapis.com/auth/content
    • https://www.googleapis.com/auth/analytics
    • https://www.googleapis.com/auth/contacts.readonly
    • https://www.googleapis.com/auth/drive.metadata
    • https://www.googleapis.com/auth/contacts
    • https://www.googleapis.com/auth/youtube
    • https://www.googleapis.com/auth/calendar.events.readonly
    • https://www.googleapis.com/auth/drive.scripts
    • https://www.googleapis.com/auth/docs
    • https://www.googleapis.com/auth/drive.photos.readonly
  • For more information, see https://docs.cloud.google.com/docs/authentication/troubleshoot-adc#access_blocked_when_using_scopes.

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.
  • [Backup DR] Added --update-labels, --remove-labels, and --clear-labels flags to gcloud backup-dr backups update to support label management.
  • Made --backup-rule optional in gcloud backup-dr backup-plans create.

Cloud Dataproc

  • Added --auto-zone-exclude-zones flag to gcloud dataproc clusters create to allow excluding specific zones when using auto zone placement.
  • Added --auto-zone-exclude-zones flag to gcloud dataproc workflow-templates set-managed-cluster to allow managed clusters to be to allow excluding specific zones when using auto zone placement.

Cloud Datastream

  • Added Spanner as a supported source in gcloud datastream connection-profiles and gcloud datastream streams command groups.
  • Added flags for Spanner source in gcloud datastream connection-profiles command group.
  • Added flags for Spanner source in gcloud datastream streams command group.

Cloud NetApp

  • Added gcloud netapp volumes establish-peering command to establish peering for cache volumes.

Cloud Resource Manager

  • Promoted --allowed-values-regex flag of gcloud resource-manager tags keys create/update to GA. This will allow the Tag Values shortName confining to the regex getting created during the time of Binding creation.

Cloud Run

  • Modified gcloud run compose up to support caching in source builds.

Cloud Storage

  • Updated gcloud storage batch-operations jobs list to return a new column "DRY_RUN" to indicate the mode of the jobs.

Compute Engine

  • Added --accelerator-topology-mode flag to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.
  • Added RESERVATION_BOUND and FLEX_START options to --provisioning-model flag in gcloud compute instances update-from-file command.
  • Promoted --allow-cidr-routes-overlap flag of gcloud compute networks subnets update to GA.
  • Added --allow-cidr-routes-overlap flag to gcloud compute networks subnets create to allow creating subnetworks with IP ranges that can overlap with custom routes within the VPC.
  • Promoted --capacity-tier flag to beta.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.
  • Updated gcloud developer-connect create to support --github-enterprise-config-organization flag.

Kubernetes Engine

  • Added --subnet to gcloud container node-pools create command.

Oracle Database

  • Removed unsupported fields from Autonomous Database Update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

552.0.0 (2026-01-13)

BigQuery

  • Added --managed_table_type in bq mk --transfer_config to support destination table type in Data Transfer Service.
  • Fixed the bug where bq command would stop responding indefinitely when the Cloud Resource Manager API was not enabled in the project.

Cloud Composer

  • Updated warning message to reflect Composer 3 as the default version.

Cloud Firestore

  • Promoted enable-firestore-data-access, enable-mongodb-compatible-data-access and enable-realtime-updates to beta and GA.

Cloud Infrastructure Manager

  • Added gcloud infra-manager automigrationconfig describe, gcloud infra-manager automigrationconfig enable-auto-migration, and gcloud infra-manager automigrationconfig disable-auto-migration commands to manage Infrastructure Manager AutoMigrationConfig.

Cloud Run

  • Added --region flag to gcloud beta run worker-pools logs command group.
  • Added --instances flag to gcloud beta run worker-pools deploy/update to replace --scaling flag.
  • Deprecated --scaling flag from gcloud beta run worker-pools deploy/update.
  • Added gcloud run compose up command to alpha and beta.
  • Added --[no-]iap to gcloud beta run multi-region-services.

Cloud Storage

  • Promoted --activity-data-retention-period-days flag in gcloud storage insights dataset-configs to GA.
  • Added --dry-run flag to gcloud storage batch operations jobs create to support creating dry run jobs.

Cloud Workstations

  • Promoted --instance-metadata flag of gcloud workstations configs create and gcloud workstations configs update to GA.

Compute Engine

  • Add --accelerator-topology-mode support to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.

Design Center

  • Added --create-sa flag to gcloud design-center spaces applications deploy command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application deployment. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.
  • Added --create-sa flag to gcloud design-center spaces applications preview command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application preview. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.

Kubernetes Engine

  • Added new kubectl version 1.35.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.11)
    • kubectl.1.33 (1.33.7)
    • kubectl.1.34 (1.34.3)
    • kubectl.1.35 (1.35.0)

Network Services

  • Added gcloud compute networks peerings cancel-request-delete command to alpha and beta. This command is used to cancel a pending request to delete a consensus peering between two networks.

Vmware Engine

  • Added datastores command to gcloud vmware to create, delete, update, describe and list datastores.
  • Added mount-datastore and unmount-datastore command to gcloud vmware private-clouds clusters to mount and unmount datastore on the given cluster.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

551.0.0 (2026-01-06)

Breaking Changes

  • (Google Cloud CLI) Removed the deprecated Cloud Tools for PowerShell component from "gcloud CLI".
    • Starting this release, Cloud Tools for PowerShell is no longer available in Google Cloud CLI. The component is removed from distribution. Cloud Tools for PowerShell has not been installed by default since April 2025 and this change will likely not affect you.
    • We recommend migrating any workflows dependent on these tools to the "gcloud CLI" or the Client Libraries to ensure future compatibility and support.
    • If you require Cloud Tools for PowerShell, you can install it manually from an archived Google Cloud CLI install version 550.0.0 or older.

AI

  • Added --min-gpu-driver-version flag to gcloud beta ai endpoints deploy-model for specifying the minimum GPU driver version.

App Engine

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans dataprofile create/update command groups.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.3
    • Fixed transaction lock timeout error.
    • Fixed bug where import job did not properly reserve imported ids.

Cloud Functions

  • Added flags --network, --subnet, --network-tags, and --direct-vpc-egress to gcloud functions deploy in alpha and beta tracks for supporting Direct VPC.

Cloud Memorystore

  • Add --labels flag to gcloud redis clusters create.
  • Add --update-labels flag to gcloud redis clusters update.
  • Add --remove-labels flag to gcloud redis clusters update.
  • Add --clear-labels flag to gcloud redis clusters update.

Cloud Run

  • Added gcloud beta run worker-pools logs command group, including read and tail commands, to support viewing logs for worker pools.
  • Fixed an issue where gcloud run services logs and gcloud run jobs logs command groups, including read and tail commands, would crash if a request log had a missing attribute value.

Cloud Spanner

  • Add autoscaler flags to gcloud spanner instance-partitons create and gcloud spanner instance-partitions update commands in beta and GA.
  • Add total CPU based autoscaling flags to gcloud spanner instances create and gcloud spanner instances update commands in beta and GA.
  • Promote disable downscaling flag options for gcloud spanner instances create and gcloud spanner instances update commands for GA.

Cloud Storage

  • gcloud storage cp:
    • Skipping copying files which goes outside of destination directory.

Cloud Workstations

  • Added --disk-type, --disk-size, --disk-reclaim-policy, and --disk-source-snapshot to gcloud workstations configs create and gcloud workstations configs update.
  • Added support for Hyperdisk with --disk-type=hyperdisk-balanced-ha.

Compute Engine

  • Added --resource-manager-tags flag for alpha to gcloud compute snapshots create to allow users to add Resource Manager tags to the snapshot resource during creation.
  • Added --resource-manager-tags flag for alpha to gcloud compute disks create to allow users to add Resource Manager tags to the disk resource during creation.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to beta.

Gemini

  • Promoted gcloud gemini cloud-assist investigations commands to beta.

Kubernetes Engine

  • Added --node-drain-grace-period-seconds, --node-drain-pdb-timeout-seconds, and --respect-pdb-during-node-pool-deletion to gcloud container node-pools create and gcloud container node-pools update commands.

Workbench

  • Added NVIDIA_H200_141GB and NVIDIA_B200 option to --accelerator-type flag of gcloud workbench instances create and gcloud workbench instances update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

550.0.0 (2025-12-16)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.10 with pip v25.3.

App Engine

Artifact Registry

  • Made the show-package-vulnerability flag public for gcloud artifacts versions describe.

BigQuery

  • Added an error message on how to set a quota project ID when expected by the API.