Google Cloud CLI - Release Notes

Copyright 2014-2026 Google Inc. All rights reserved.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

581.0.0 (2026-08-18)

Breaking Changes

  • (Cloud Services) Removed gcloud beta services mcp enable, gcloud beta services mcp disable, and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

  • Promoted gcloud ai semantic-governance-policies (create, describe, update, delete, list) and gcloud ai semantic-governance-policy-engine (describe, update, deprovision) commands from beta to GA.

BigQuery

  • Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.
  • Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.

Cloud Auth

  • Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.

Cloud Bigtable

  • Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.

Cloud IAM

  • Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).
  • Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.

Cloud Services

  • API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.

Cluster Director

  • Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.
  • Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.
  • Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.

Compute Engine

  • Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta, preview, and GA.
  • Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta, preview, and GA.
  • Added gcloud compute packet-mirrorings test-iam-permissions command for beta, preview and GA tracks.

Container

  • Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong, to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.

Database Migration

  • Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.
  • Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.

Kubernetes Engine

  • Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.

Oracle Database

  • Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type, --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

580.0.0 (2026-08-11)

Breaking Changes

Google Cloud CLI

  • Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.

Apihub

  • Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.

Certificate Authority Service

  • Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool, --issuer-location, and --issuer-ca flags.
  • Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.

Certificate Manager

  • Added --tags flag to gcloud certificate-manager create commands (certificates create, dns-authorizations create, issuance-configs create, maps create, and trust-configs create).

Cloud Backup DR

  • Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.
  • Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.

Cloud Composer

  • Enabled the 'backfill' Airflow CLI sub-command for Composer environments running Airflow 3.
  • Enabled the 'config lint' Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.

Cloud Dataflow

  • Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.
  • Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.

Cloud IAM

  • Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.

Cloud Spanner

  • Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.

Cloud Storage

  • gcloud storage rsync:
    • Skipping syncing files which goes outside of destination directory.

Cluster Director

  • Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.

Compute Engine

  • Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA, beta, preview, and alpha.
  • Added gcloud compute snapshot-groups set-iam-policy command in beta.
  • Added --kms-key-service-account to gcloud compute disks create, gcloud compute images create, gcloud compute machine-images create and gcloud compute snapshots create for beta track.
  • Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.
  • Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.
  • Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.
  • Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta, preview, and GA.
  • Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.
  • Added gcloud compute firewall-policies test-iam-permissions command.
  • Promoted --graceful-shutdown, --graceful-shutdown-max-duration, and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.
  • Added --identity-type flag to gcloud compute instances create, gcloud compute instances update, and gcloud compute instance-templates create in alpha.
  • Promoted exapool capacity flags to beta and GA tracks for gcloud compute storage-pools update command.
  • Added --maintenance-freeze-duration and --clear-maintenance-freeze-duration flags to gcloud compute instances set-scheduling and gcloud compute instances create in beta.
  • Added gcloud compute images test-iam-permissions command to test IAM permissions on a Compute Engine image in beta, preview, and GA.

Device Run

  • Promoted gcloud device-run sessions wait command to beta.
  • Updated --instrumentation-timeout flag of gcloud beta device-run sessions submit instrumentation to allow a maximum duration of 3 hours.
  • Updated gcloud device-run devices describe to display hardware_type instead of form.
  • Updated gcloud device-run devices list to display HARDWARE_TYPE column instead of FORM.

GKE Hub

  • Promoted API field schema for --fleet-default-member-config flag on gcloud container fleet|hub config-management enable command to beta.

Metastore

  • Updated gcloud beta metastore services migrations start to support migrations to Lakehouse runtime catalog(s).
  • Deprecated Cloud SQL migration arguments in gcloud beta metastore services migrations start.

Network Connectivity

  • Added --export-psc-published-services-and-regional-google-apis and --export-psc-global-google-apis flags to gcloud beta network-connectivity hubs create and gcloud beta network-connectivity hubs update commands.

Network Security

  • Promoted mcp and policyProfile fields to GA in gcloud network-security authz-policies import and export commands.
  • Made loadBalancingScheme optional in gcloud network-security authz-policies import and export commands.

Network Services

  • Promoted gcloud network-services telemetry-policies delete command to BETA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

579.0.0 (2026-08-04)

Breaking Changes

  • (API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.
  • (Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.

AI

  • Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.

Agent Identity

  • Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.

Cloud Auth

  • Enabled ECP HTTP Proxy support for external users (disabled by default).
  • Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.

Cloud Dataproc

  • Promoted --master-instance-selection, --master-instance-flexibility-policy-file, --worker-instance-selection, --worker-instance-flexibility-policy-file, --secondary-worker-instance-selection, and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.

Cloud Firestore Emulator

  • Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.

Cloud Functions

  • Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.
  • Promoted gcloud functions upgrade command to GA.

Cloud NetApp

  • Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.

Cloud Quotas

  • Promoted gcloud quotas surface (info, preferences, and adjuster settings) to General Availability (GA).

Cloud SQL

  • Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances, removing the previous downtime warning. Instances using C4, C4A, or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.

Cloud Services

  • Updated gcloud beta services mcp enable command to be a no-op, as MCP enablement is no longer required.

Cluster Director

  • Fixed an issue where the default zone for cluster resources (storage, network, etc.) was always set to the location's "b" zone, overriding the user-specified zone in compute flags.
  • Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.
  • Added support for 3500GB, and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.
  • Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.
  • Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.
  • Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.
  • Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA, beta, and preview.
  • Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta, preview, and GA.
  • Added --exapool-capacity-optimized-capacity, --exapool-read-optimized-capacity, and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.
  • Added Arm CCA support to the confidential-compute-type option in gcloud compute instance create.
  • Added gcloud compute network-firewall-policies test-iam-permissions command.
  • Added gcloud compute disks test-iam-permissions command to test IAM permissions on a Compute Engine disk.
  • Promoted --ipv6-network-tier flag of gcloud compute networks subnets create and gcloud compute networks subnets update to beta.
  • Added STANDARD option to --ipv6-network-tier flag of gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances network-interfaces add, and gcloud compute instances network-interfaces update in beta.
  • Added gcloud compute routers test-iam-permissions command to test specific IAM permissions on a Compute Engine router in beta.

Compute Firewall Policies

  • Promoted new ULL_POLICY value for --policy-type flag of gcloud compute network-firewall-policies create to GA.

Distributed Cloud Edge

  • Promoted gcloud edge-cloud zones list to GA.

GKE Hub

  • Promoted gcloud container fleet|hub config-management update command to beta.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud iam policy-bindings create.

Kpt

Kubernetes Engine

  • Updated default kubectl to 1.35.6.
  • Additional kubectl versions:
    • 1.30.14
    • 1.31.14
    • 1.32.13
    • 1.33.13
    • 1.34.10
    • 1.35.7
    • 1.36.3

Network Services

  • Deprecated clientTlsPolicy field in gcloud network-services endpoint-policies.
  • Updated gcloud network-services endpoint-policies resource name pattern to support regional locations.

Vmware Engine

  • Added --kms-key flag to gcloud vmware private-clouds create. Specifying this flag with a valid KMS key resource name enables CMEK.
  • Added --encryption-type and --kms-key flags to gcloud vmware private-clouds update. --kms-key (valid KMS key resource name) is required when --encryption-type is CMEK.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

578.0.0 (2026-07-28)

Breaking Changes

  • (Database Migration) Made --auto-commit flag the default for gcloud database-migration conversion-workspaces seed|convert|import-rules operations. To disable auto-committing, use --no-auto-commit flag.

  • The run_bq_command tool exposes the BigQuery CLI (bq) within the Cloud CLI remote MCP server. You can send natural language prompts to your AI application to execute specific BigQuery SQL commands on your behalf.

    For more information, see Use the Cloud CLI remote MCP server.

Google Cloud CLI

  • Fixed an issue where running gcloud init crashed when Enterprise Certificate Proxy (ECP) binaries were missing from configuration.
  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.6.

AlloyDB

  • Promote AlloyDB Backup DR restore flags (--backupdr-backup and --backupdr-data-source) to the GA track.

BigLake

  • Fixed a bug where gcloud biglake iceberg tables commands failed to send the X-Iceberg-Access-Delegation: vended-credentials header.

BigQuery

  • Added -f/--force support to bq rm --connection to ignore NOT_FOUND errors if the connection does not exist.
  • Fixed reading configuration from gcloud CLI with --nouse_google_auth flag.
  • Added a predefined label for jobs created in specific metrics environments.
  • Updated the help text for several global flags.
  • Updated command format in the user-agent HTTP header of API requests.

Cloud Backup DR

  • Added --log-retention-days flag across gcloud backup-dr backup-plans create and update across all release tracks to enable Point-in-Time Recovery (PITR) log retention configuration.

Cloud Bigtable

  • Added --ignore-warnings flag to gcloud bigtable instances tables update and gcloud bigtable tables update.
  • Promoted --ignore-warnings flag of gcloud bigtable materialized-views create to GA.

Cloud Composer

  • Enabled Airflow CLI commands for Composer environments running Airflow 3.2.

Cloud IAM

  • Promoted enabled-for-users-groups option for --scim-usage flag to beta in gcloud beta iam workforce-pools providers.

Cloud Run

  • Added --sandbox-launcher flag to gcloud beta run jobs and gcloud beta run worker-pools command groups to allow setting a container as sandbox launcher when creating or updating a Cloud Run job or a worker pool.

Cloud Workstations

  • Added --idle-action flag to gcloud alpha workstations configs create, gcloud alpha workstations configs update, gcloud beta workstations configs create, and gcloud beta workstations configs update commands.

Compute Engine

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in beta.
  • Added --metadata-filter flag to gcloud compute forwarding-rules create command across all release tracks.
  • Added --metadata-filter flag to gcloud compute forwarding-rules update commands across all release tracks.
  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added gcloud compute instant-snapshot-groups set-iam-policy command to set the IAM policy for a Compute Engine instant snapshot group.
  • Added gcloud compute networks subnets test-iam-permissions command in beta, preview, and GA.
  • Added gcloud compute image-views describe command in beta.
  • Added gcloud compute snapshots test-iam-permissions to test IAM permissions for Compute Engine snapshots.
  • Added gcloud compute interconnects attachments groups set-iam-policy command to set IAM policy on an interconnect attachment group in beta, preview, and GA.
  • Added --internal-range flag to gcloud compute addresses create to support allocating global internal IP addresses from an Internal Range for Private Service Connect.
  • Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.

Developer Connect

  • Updated gcloud beta developer-connect account-connectors commands to support Bring Your Own (BYO) and Bitbucket Cloud (BBC) connection types.

GKE Hub

  • Promoted --view, --memberships, --filter, and --sort-by flags on gcloud container fleet|hub config-management describe command to beta.

Network Management

  • Added --source-dms-private-connection flag to gcloud network-management connectivity-tests.

Secret Manager

  • Added the --secret-type flag to gcloud secrets create to support creating secrets of different types (e.g. Cloud SQL credentials).
  • Added the gcloud secrets enable-managed-rotation command to enable managed rotation for a secret using Cloud SQL credentials.
  • Added the gcloud secrets rotate-secret command to rotate a secret.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

577.0.0 (2026-07-21)

Agent Identity

  • Promoted gcloud agent-identity auth-providers and gcloud agent-identity access-summaries to GA.

AlloyDB

  • Modify flag --no-enable-autoscaler of gcloud beta alloydb instances create|update commands to only set the enabled field to false and not clear autoscaling config.
  • Modify gcloud beta alloydb instances update command to only allow one of --autoscaler-delete-schedule, --autoscaler-disable-schedule, --autoscaler-enable-schedule, or --autoscaler-set-schedule to be specified.

Artifact Registry

  • Added connector-repository mode to gcloud artifacts repositories create.

BigQuery

  • Added support for --s3_service_directory_service flag to pass custom Service Directory endpoints for AWS connection make and update operations. This is used for routing traffic over a private network connection through Cross-Cloud Interconnect.
  • Updated the data source of agent name value set in the user agent HTTP header.
  • Stopped enforcing bq init when --oauth_access_token is provided.

Cloud Bigtable

  • fix: cbt cli escape row keys and column qualifiers in printRow.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.22.0
    • Added DML support for the Firestore Pipelines API
    • Added ability to model when composite indexes are required in Datastore mode using new --require-indexes and --index-file flags
    • Added depreciation warning for JRE versions <25

Cloud Key Management Service

  • (GA) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.

Cloud Workstations

  • Added gcloud beta workstations suspend and gcloud alpha workstations suspend commands.

Compute Engine

  • Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta, preview, and GA.
  • Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.
  • Promoted the following gcloud compute routers command groups to GA: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.
  • Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.
  • Added --logging-http-request-headers and --logging-http-response-headers flags to gcloud compute backend-services create and update commands to configure Cloud Logging HTTP headers for external L7 load balancers.
  • Added --local-ssd-encryption-mode flag to gcloud compute instances create to specify the encryption mode for Local SSDs.
  • Deprecated customer-supplied encryption keys (CSEK) flags --csek-key-file, --require-csek-key-create, --source-machine-image-csek-key-file, --source-disk-csek-key, --source-disk-key-file, and --source-instant-snapshot-key-file for gcloud compute commands.

GKE Hub

  • Changed both --config flag on gcloud beta container fleet|hub config-management apply command and --fleet-default-member-config flag on gcloud beta container fleet|hub config-management enable command to no longer default spec.upgrades: manual population since auto-upgrades is no longer supported from Config Sync version 1.21.0 and spec.upgrades: manual is behaviorally equivalent to not setting this field.

Kubernetes Engine

  • Fix overwriting autoscaling settings in gcloud container clusters update.

Network Security

  • Updated gcloud beta network-security authz-policies import to support networkRules and snis fields.

Recaptcha

  • Added --universal option to gcloud recaptcha keys create and gcloud recaptcha keys update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

576.0.0 (2026-07-14)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage rsync to default decompresses downloaded gzip files to match the behavior of gcloud storage cp. To retain the previous behavior, use the new --do-not-decompress flag.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

  • The Cloud CLI remote MCP server provides a secure environment that lets you send natural language prompts to your AI application to execute command-line interface (CLI) commands on your behalf. Only gcloud commands are supported.

    For more information, see Use the Cloud CLI remote MCP server.

Artifact Registry

  • Fixed a performance regression in gcloud artifacts docker images list when listing a large number of image versions.

BigLake

  • Promoted gcloud biglake delta-sharing <catalogs|shares|schemas|tables> to GA.
  • Promoted gcloud biglake data-product-sharing publish to GA.
  • Added lakehouse option to --catalog=type flag to gcloud biglake iceberg catalogs.
  • Added gcloud biglake hive tables update to beta.

BigQuery

  • Added environment information to the user-agent HTTP header.
  • Added support for --label flag in bq cp, bq extract, and bq load commands to configure job-level labels.
  • Fixed 'bq show' command failures displaying timestamps without fractional seconds.

Cloud Data Lineage

  • Added gcloud datalineage runs command group to manage data lineage runs.
  • Added gcloud datalineage lineage-events command group to manage data lineage runs.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans create data-documentation and gcloud dataplex datascans update data-documentation commands.
  • Added --mode flag to gcloud dataplex datascans create data-profile and gcloud dataplex datascans update data-profile commands to support specifying profiling mode.

Cloud Dataproc

  • Promoted gcloud dataproc batches submit pyspark-notebook to GA.

Cloud Identity-Aware Proxy

  • Promoted support for agent-registry resource type in gcloud iap web IAM commands to GA.

Cloud Key Management Service

  • (Alpha, Beta) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional, defaulting to the current project.
  • Added --hsm-trusted-wrapping flag to gcloud kms keys create and gcloud kms keys versions import to enable trusted wrapping capabilities.
  • Promoted gcloud kms keys versions export-trusted-key-wrapped and gcloud kms keys versions import-trusted-key-wrapped to GA.
  • Added --crypto-key-version-name and --two-factor-public-key-pem flags to gcloud kms single-tenant-hsm proposal create for --operation-type=upgrade_key_trust.

Cloud Managed Kafka

  • Added util function to validate and remove byte units from broker disk input.

Cloud Run

  • Modified gcloud run services proxy to fail immediately if the service has its default URL disabled.

Cloud SQL

  • Upgraded --storage-auto-increase-limit flag for gcloud sql instances create and gcloud sql instances patch commands to GA.

Cloud Storage

Cluster Director

  • Added support for Lustre dynamic tier in gcloud cluster-director clusters commands.

Compliance Manager

  • Updated gcloud compliance-manager commands to support project-level resources.

Compute Engine

  • Promoted --nat-ips-per-endpoint flag to GA in gcloud compute service-attachments create and gcloud compute service-attachments update.
  • Promoted gcloud compute hosts and gcloud compute reservations hosts to beta.
  • Added gcloud compute sole-tenancy node-templates test-iam-permissions command to test IAM permissions on a node template in beta, preview, and GA.
  • Added gcloud compute instant-snapshots set-iam-policy command to support setting IAM policy bindings for instant snapshots in alpha, beta, preview, and GA.
  • Added gcloud compute network-attachments test-iam-permissions command to test IAM permissions on a network attachment in beta, preview, and GA.
  • Added gcloud beta compute instance-groups managed adopt-instances to support adopting instances into regional managed instance groups.
  • Added gcloud compute instant-snapshots test-iam-permissions command to test IAM permissions on an instant snapshot in beta, preview, and GA.
  • Added get-iam-policy and set-iam-policy commands to gcloud compute firewall-policies and gcloud compute network-firewall-policies to manage policy-level IAM policy.
  • Promote the --location flag of gcloud compute interconnects update to GA.
  • Added gcloud compute backend-buckets test-iam-permissions command to test IAM permissions on backend buckets.
  • Promoted --on-repair-allow-changing-zone flag to GA in gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Added gcloud compute interconnects test-iam-permissions command to test IAM permissions on a Compute Engine interconnect in beta.
  • Added gcloud compute instant-snapshot-groups test-iam-permissions command.
  • Added test-iam-permissions command to gcloud compute target-tcp-proxies to test IAM permissions on a target TCP proxy. Global proxies are supported in all tracks, and regional proxies are supported in alpha and beta tracks.
  • Added support for displaying dynamic field GRACEFUL_SHUTDOWN_TIMESTAMP to gcloud compute instance-groups managed list-instances in GA, beta and alpha.
  • Added gcloud compute service-attachments set-iam-policy command to set IAM policy on a service attachment in beta, preview, and GA.
  • Added --async flag to gcloud compute instance-groups managed delete.
  • Promoted --load-balancing-scheme flag to GA in gcloud compute target-tcp-proxies create.
  • Promoted --instances flag of gcloud create instance-groups managed resize-requests create to GA to support specific instance names.
  • Added gcloud compute reservations sub-blocks test-iam-permissions command to beta, preview and GA release tracks.
  • Added on-update-action enum class to --create-disk flag for an instance creation. And it is added to the following release tracks alpha, beta, preview, and GA.
  • Added gcloud compute external-vpn-gateways test-iam-permissions command to test IAM permissions on an external VPN gateway.
  • Added gcloud compute sole-tenancy node-groups test-iam-permissions command to test IAM permissions on a node group in alpha, beta, GA, and preview.
  • Promoted --identity, --identity-certificate and --most-disruptive-allowed-action flags to GA.
  • Added gcloud compute disks bulk set-labels command to alpha, beta, ga, and preview release tracks.

Developer Connect

  • Promoted gcloud developer-connect insights-configs deployment-events list and describe commands to GA.

Kubernetes Engine

  • Added KCP_VPA option to --logging flag of gcloud container clusters create to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters create-auto to enable VPA Decision Logs feature.
  • Added KCP_VPA option to --logging flag of gcloud container clusters update to enable VPA Decision Logs feature.
  • Added node config options nodeVfioConfig to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains VFIO-related configurations for this node.
  • Added node config options diskIoScheduler to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which contains the configuration for the disk IO scheduler.
  • Promoted Rollbackable Upgrades (Two-Step Upgrades) to GA. Added --control-plane-soak-duration flag to gcloud container clusters upgrade and promoted gcloud container clusters complete-control-plane-upgrade to GA.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters create-auto to enable Managed OpenTelemetry feature.
  • Promoted --managed-otel-scope flag to GA in gcloud container clusters update to enable Managed OpenTelemetry feature.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Looker

  • Promoted --release-channel and --accelerated-security-patch-enabled flags to GA for gcloud looker instances create and gcloud looker instances update.
  • Added RELEASE_CHANNEL and ACCELERATED_SECURITY_PATCH_ENABLED columns to gcloud looker instances describe output in GA track.

Network Security

  • Added support for project-level security profiles to gcloud network-security security-profiles wildfire-analysis commands in BETA.

Transfer

  • Deprecated --s3-compatible-mode flag in gcloud transfer agents install. It is no longer needed as Transfer Service automatically detects S3-compatible job.

Vmware Engine

  • Updated gcloud vmware private-clouds create command to use full resource names for --preferred-zone and --secondary-zone flags when creating a stretched private cloud. This update ensures compliance with VPC Service Controls.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.1 (2026-07-07)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

575.0.0 (2026-06-30)

Google Cloud CLI

  • Added any-reservation-then-fail argument for flag --reservation-affinity in gcloud container clusters node-pools create.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

AlloyDB

  • Added --failover flag to gcloud beta alloydb clusters promote to support cross-region failover.

Apigee

  • Added gcloud apigee apis import which allows customers to upload API Proxy bundles in archive ZIP or feature template YAML format.

Artifact Registry

  • Expose the Registry URL in the output of gcloud artifacts repositories describe and in the output of gcloud artifacts repositories create (upon synchronous creation).

Assured Workloads

  • Added SWITZERLAND_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS option to --compliance-regime flag of gcloud assured workloads create.

BigLake

  • Added gcloud biglake hive tables create to beta.

Cloud Access Context Manager

  • Exposed --service-account and --service-account-project-number for gcloud access-context-manager cloud-bindings commands in the GA track.

Cloud Bigtable

  • Added support for --tags flag to gcloud bigtable instances create to allow binding tags on instance creation.

Cloud Data Lineage

  • Added gcloud datalineage processes command group to manage data lineage processes.

Cloud Dataproc

  • Added --master-machine-types flag in gcloud dataproc clusters create.

Cloud IAM

  • Updated gcloud iam service-accounts create to print the created service account's email address.

Cloud Run

  • Made the FILE positional argument optional for all gcloud run * replace commands, defaulting to their respective standard filenames if not specified.
  • Promoted regional inference to beta for Cloud Run services, jobs, and worker pools. When --region or the run/region property is not specified, the command line looks for a resource with that name in all regions.
  • Added --sandbox-launcher flag to gcloud beta run deploy and gcloud beta run services update to allow setting a container as sandbox launcher.
  • Promoted --workdir flag for gcloud run commands to GA.
  • Promoted interactive project prompt when project is not specified in gcloud run deploy to GA.
  • Promoted suggesting project and region from Artifact Registry URL in gcloud run deploy to GA.
  • Added --tail flag to gcloud beta run jobs execute to tail logs of the running execution.
  • Added --dry-run flag to gcloud beta run deploy, gcloud beta run services update, gcloud beta run services delete, gcloud beta run worker-pools deploy, gcloud beta run worker-pools update, and gcloud beta run worker-pools delete to validate configuration without persisting changes.
  • Added gcloud run jobs executions describe-latest command to describe the latest execution of a job.
  • Call out proxy when deploying or updating services with gcloud run deploy or gcloud run services update that require authentication in all tracks.

Cloud SQL

  • Added --user and --password-secret-version to gcloud sql instances execute-sql.

Cloud Storage

Cloud Workstations

  • Promoted --pd-disk-size flag of gcloud workstations update to GA.

Cluster Director

  • Users must supply a staticNodeCount if they want one. This no longer defaults to 1.

Compute Engine

  • Added gcloud alpha compute instance-groups managed configure-accelerator-topologies command to configure accelerator topologies of a managed instance group.
  • Added gcloud compute instances set-machine-resources command to allow setting machine resources for a virtual machine instances in alpha, beta, and GA.
  • Added test-iam-permissions command to gcloud compute storage-pools to return permissions that a caller has on the specified storage pool.
  • Added gcloud compute reservations sub-blocks set-iam-policy command to beta and GA release tracks.
  • Added gcloud compute reservations blocks set-iam-policy command to set IAM policy on a reservation block in beta, preview, and GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests create for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests cancel for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests delete for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests describe for regional MIG to GA.
  • Promoted support for gcloud compute instance-groups managed resize-requests list for regional MIG to GA.
  • Added gcloud compute instance-templates test-iam-permissions command to test IAM permissions on an instance template in alpha, beta, GA, and preview.
  • Added gcloud compute target-https-proxies set-quic-override command in beta, preview, and GA.
  • Added gcloud compute reservations test-iam-permissions to test IAM permissions on Compute Engine reservations.
  • Added gcloud compute network-attachments set-iam-policy command to set IAM policy on a network attachment in alpha, beta, preview, and GA.
  • Added gcloud compute instances list-referrers command to alpha, beta, and GA release tracks.
  • Added gcloud compute reservations blocks test-iam-permissions command to test IAM permissions on a reservation block in beta.
  • Added gcloud compute interconnects attachments groups test-iam-permissions command to test IAM permissions on an interconnect attachment group in beta, preview, and GA.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in GA.

Database Migration

  • Added --source-database-name-override flag to gcloud database-migration conversion-workspaces seed|update to allow overriding the database name for the seed operation.

GKE Hub

  • Promoted gcloud container fleet rollouts to GA.
  • Promoted gcloud container fleet rolloutsequences to GA.

Kpt

Kubernetes Engine

  • Promoted GKE custom image flags (--image and --image-project) to GA, making them publicly visible in gcloud container clusters create, gcloud container clusters create-auto, and gcloud container node-pools create (and --image/--image-project in gcloud container clusters upgrade).
  • Added stack-type option to --additional-node-network flag of gcloud container node-pools create to configure the stack type (ipv4, ipv4-ipv6, or ipv6) for additional network interfaces.

Network Management

  • Added --source-cloud-run-job flag to gcloud network-management connectivity-tests.

Network Services

  • Updated gcloud edge-cache services import schemas to support specifying up to 100 allowed origins in CORSPolicy.allowOrigins and a client TTL of 0s in CDNPolicy.clientTtl.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

574.0.0 (2026-06-23)

AI Platform

  • Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine, including its tenant project, GKE cluster, and PSC service attachments.

Agent Identity

  • Added gcloud beta agent-identity auth-providers get-iam-policy|set-iam-policy|add-iam-policy-binding|remove-iam-policy-binding|test-iam-permissions commands.

Agent Registry

  • Added gcloud agent-registry command group to manage Agent Registry resources.

Backup For GKE

  • Made gcloud container backup-restore command groups compatible with non-default universe domains.

BigQuery

  • Fixed a bug where stderr messages from gcloud CLI output would be printed to stdout.
  • Added --gcloud_config_cache flag to enable caching data retrieved from the gcloud CLI.
  • Added display of container request concurrency of BigQuery Python UDF in bq show --routine.
  • Added information about AI Agent in the execution environment to the user-agent HTTP header in the API request.

Cloud Datastream

  • Added Regional Endpoints (REP) support for all Datastream commands.

Cloud Memorystore

  • Added --zone-distribution-config-zones flag to gcloud memorystore instances create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.
  • Added --zone-distribution-config-zones flag to gcloud redis clusters create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.

Cluster Director

  • Added support for creating clusters using --quickstart-cluster in gcloud beta cluster-director clusters create.

Colab

  • Added Hyperdisk options to --disk-type of gcloud colab runtime-templates create: HYPERDISK_BALANCED.

Compute Engine

  • Fixed an issue where gcloud compute url-maps import reset custom timeout and retryPolicy (specifically numRetries) values to defaults when updating an existing URL map.
  • Added --vsock-mode flag to gcloud compute instances create, gcloud compute instance-templates create, gcloud compute instances bulk create, and gcloud compute queued-resources create in ALPHA to support enabling/disabling VSOCK mode.
  • Promoted --purpose flag to gcloud compute public-delegated-prefixes create in beta.

Database Migration

  • Added Regional Endpoints (REP) support for all Database Migration Service (DMS) commands.

Kubernetes Engine

  • Updated default kubectl from 1.35.3 to 1.35.6.
  • Added new kubectl version 1.36.2 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.13)
    • kubectl.1.34 (1.34.9)
    • kubectl.1.35 (1.35.6)
    • kubectl.1.36 (1.36.2)

Network Security

  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to beta.
  • Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

573.0.0 (2026-06-16)

Breaking Changes

  • (Anthos Multi-Cloud) Deprecated gcloud container attached clusters get-credentials. Use gcloud container fleet memberships get-credentials to get credentials for a running Attached cluster.

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.14.5.

AI

  • Added gcloud ai tuning-jobs command group to manage Vertex AI supervised fine-tuning jobs.

App Engine

Artifact Registry

  • Added gcloud artifacts image-streaming-cache command group to manage image streaming caches per region. This group includes create, describe, delete, and list commands.

BigLake

  • Promoted --unity-service-principal-application-id flag for gcloud biglake iceberg catalogs create and update to BETA, making it publicly visible.
  • Promoted BigLake catalogs and arguments for gcloud biglake iceberg catalogs to GA.

Cloud Data Lineage

  • Added gcloud datalineage command group to manage Cloud Data Lineage resources.
  • Added gcloud datalineage config describe and gcloud datalineage config update commands to manage Data Lineage configurations.

Cloud Datastream

  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow connection profiles to gcloud datastream connection-profiles create and update commands.
  • Added support for Dataverse, Salesforce Marketing Cloud, and ServiceNow streams to gcloud datastream streams create and update commands.

Cloud Run

  • Promoted --readiness_probe in gcloud run deploy and gcloud run services update to GA.

Cloud Services

  • API Keys: Updated gcloud services api-keys create and update commands' --api-target flag to accept a colon-separated list of methods inline (e.g. --api-target="service=foo,methods=m1:m2").

Cloud Storage

  • Promoted gcloud storage batch-operations bucket-operations commands to GA.

Cluster Director

  • Added support for creating clusters using blueprints in gcloud beta cluster-director clusters create.

Compute Engine

  • Promoted --action-on-vm-failed-health-check flag to GA for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.
  • Fixed an issue where waiting for asynchronous operations would fail for certain global nested resources (like cross-site-networks wire-groups).
  • Added any-reservation-then-fail choice to --reservation-affinity flag in beta for gcloud compute instances create, gcloud compute instances bulk create, gcloud compute instance-templates create, gcloud compute instances create-with-container, and gcloud compute instance-templates create-with-container commands.
  • Promoted --include-disks and --exclude-disks flags for gcloud compute machine-images create to the BETA release track.

Kubernetes Engine

  • Added --dataplane-optimization-mode flag to gcloud container clusters create to select scalability mode for Dataplane V2.
  • Deprecated None value of --release-channel flag from gcloud container clusters create and update command. Use RAPID, REGULAR, STABLE or EXTENDED instead.

Network Connectivity

  • Updated help text for --region flag in gcloud network-connectivity transports create to include supported regions list.

Network Security

  • Added gcloud network-security operations command group (describe, wait, list, cancel).
  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.
  • Promoted gcloud network-security security-profiles wildfire-analysis commands to BETA.
  • Promoted gcloud network-security firewall-endpoints wildfire-verdict-change-requests commands to beta.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints create command to BETA.
  • Promoted WildFire-related flags in gcloud network-security firewall-endpoints update command to BETA.

Recaptcha

  • Fixed an issue where gcloud recaptcha keys create ignored --testing-score when creating Android or iOS keys.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

572.0.0 (2026-06-09)

Google Cloud CLI

  • Updated macOS Python Virtualenv for the gcloud CLI to 3.14.5 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

AI

  • Fixed gcloud ai endpoints deploy-model to honor --machine-type for Gemini on GDC connected deployments. Previously the flag was silently ignored.

App Engine

App Lifecycle Manager

  • Added validation to enforce required sub-fields within arguments for releases, unit-kinds, and unit-operations commands.

Cloud Access Context Manager

  • Modified --group-key flag of gcloud access-context-manager cloud-bindings create to be optional.

Cloud IAM

  • Remove deprecated from Extended Attributes parameters. Extended Attributes are marked as restricted.

Cloud Workstations

  • Added gcloud beta workstations update command to update a workstation's properties, such as its persistent directory disk size.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute forwarding-rules in beta.
  • Promoted --ip_addresses flag of gcloud compute forwarding-rules to beta.
  • Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute backend-services in beta.
  • Added folder share support to gcloud compute reservations update.
  • Promoted --ncc-gateway flag to GA.

Database Migration

  • Added support for seeding a conversion workspace from a Cloud Storage bucket via --gcs-path flag in gcloud database-migration conversion-workspaces seed.
  • Added --dry-run flag to gcloud database-migration conversion-workspaces apply to allow validation of apply process by applying the draft version to a copy of the destination database.
  • Decoupled --host and --port requirements in gcloud database-migration connection-profiles create postgresql for destination connection profiles leveraging Cloud SQL or AlloyDB.

Kubernetes Engine

  • Added --maintenance-window-duration flag to gcloud container clusters create command as an alternative to --maintenance-window-end.
  • Added --maintenance-window-duration flag to gcloud container clusters update command as an alternative to --maintenance-window-end.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways advertised-routes command group to GA, including create, delete, describe, and list commands.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to GA.

Security Command Center

  • Added external-exposure service to the SUPPORTED_SERVICES list.

Service Extensions

  • Updated import and export schemas for gcloud service-extensions authz-extensions.

Workbench

  • Added --image-family flag to gcloud workbench instances upgrade.
  • Added NVIDIA_RTX6000 to --accelerator-type choices on gcloud workbench instances create and update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

571.0.0 (2026-06-02)

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Fixed issue where gcloud compute scp file transfers were extremely slow when using --tunnel-through-iap in PY 3.14.

AlloyDB

  • Added flag --labels to gcloud alloydb instances create|create-secondary commands to assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud alloydb instances update commands to update, remove, or clear labels for an instance.

BigLake

  • Promoted gcloud biglake hive tables to beta.

Cloud Dataproc

  • Added --confidential-compute-type flag to gcloud dataproc clusters create to allow specifying the Confidential Computing technology (e.g., SEV, SEV_SNP, TDX).
  • Deprecated --confidential-compute flag for gcloud dataproc clusters create. Use --confidential-compute-type flag instead.

Cloud Datastream

  • Added --sql-where-clause flag to gcloud datastream objects start-backfill, which starts a partial backfill on the specified object.

Cloud NetApp

  • Added gcloud netapp volumes start-split and get-split-status commands to alpha and beta tracks of the volumes group.
  • Added gcloud netapp storage-pool update-backup-config command to GA track.
  • Added --ontap-source flag to gcloud netapp backup-vaults backups create GA track.
  • Added gcloud netapp storage-pools list-backup-configs command to the GA track of the storage-pools group.
  • Added gcloud netapp storage-pools restore-volume command to GA track.

Cloud Run

  • Added regional endpoint support for gcloud beta run worker-pools and gcloud beta run jobs executions tasks commands. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.22.0 of the Cloud SQL Proxy.

Cloud Storage

  • Added --set-object-acls-from-file flag to gcloud storage batch-operations jobs create.

Compute Engine

  • Promoted --source-machine-image and --source-machine-image-disk-device-name flags for gcloud compute disks create in beta.

Network Security

  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to GA.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, create, delete, delete-override, describe, list, list-overrides, update-override) to GA.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to GA.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

570.0.0 (2026-05-27)

Google Cloud CLI

  • Rebuilt Windows bundled Python for the gcloud CLI with cryptography 46.0.7 and pyOpenSSL 26.0.0.
  • Updated Linux bundled Python for the gcloud CLI to 3.14.5.
  • Updated the gcloud CLI authentication caching logic to natively store and refresh Regional Access Boundary (RAB) data.
  • Reverted Windows PuTTY executables to version 0.81 due to a breakage.

AlloyDB

  • Added flag --labels to gcloud beta alloydb instances create|create-secondary commands assign labels to an instance.
  • Added flags --update-labels, --remove-labels, and --clear-labels to gcloud beta alloydb instances update commands to update, remove, or clear labels for an instance.

Beyondcorp

  • Enabled IAM conditions support for add-iam-policy-binding and remove-iam-policy-binding commands under gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications. Added sample values for conditions in command help text.

BigLake

  • Promoted gcloud biglake hive catalogs to beta.
  • Promoted gcloud biglake hive databases to beta.
  • Promoted federated unity catalog flags of gcloud biglake iceberg catalogs to beta.
  • Promoted --primary-location flag of gcloud biglake iceberg catalogs to GA.

BigQuery

  • Remove --alpha=reservation_groups in bq mk, show, ls and rm --reservation_group operations.
  • Added support for table identifiers in the form of project.catalog.namespace.table.
  • Added support for dataset identifiers in the form of catalog.namespace.
  • Added support for showing and removing row access policies using the bq show and bq rm commands.
  • Fixed 'NoneType' error handling and short assignment ID parsing in bq mk --reservation_assignment when reservation_id is not specified.
  • Added support for specifying a reservation assignment name in bq mk --reservation_assignment.
  • Added support for principal field for the bq mk, bq ls, and bq show commands with the flag --reservation_assignment.
  • Removed the frozen dependency on an old version of absl.

Cloud Alerting

  • Fixing List Alerts gcloud CLI example commands.

Cloud Backup DR

  • Added --use-project-service-account flag for gcloud backup-dr backups restore compute and gcloud backup-dr backups restore disk.

Cloud Dataplex

  • Added --all-schema-fields flag to gcloud dataplex context lookup to include all schema fields in the context.

Cloud Key Management Service

  • Added --project flag to gcloud kms autokey-config describe to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud kms autokey-config update to support the key-project-resolution-mode field.

Cloud Run

  • Added interactive prompt instead of erroring out when project is not specified in gcloud beta run deploy.
  • Added support for suggesting project and region from Artifact Registry URL in gcloud beta run deploy.
  • Added --[no]--ssh flag to gcloud beta run deploy and gcloud beta run services update to enable or disable SSH access to the Cloud Run service's container instances.
  • Added --domain flag to gcloud beta run deploy to create domain mappings on the fly during service deployment.

Cloud Spanner

  • Add --labels flag to gcloud spanner instances create command to support specifying labels during instance creation.
  • Add --update-labels, --clear-labels and --remove-labels flags to gcloud spanner instances update command to support updating labels.

Cloud Storage

  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches update to support enabling cache ingest on write, and enabled rendering of the parsed property in the anywhere-caches describe command output.
  • Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches create to support enabling cache ingest on write.

Cloud Workstations

  • Added --disk-archive-timeout flag to gcloud workstations configs create and gcloud workstations configs update commands.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters create command.
  • Added --workstation-authorization-url and --workstation-launch-url flags to gcloud workstations clusters update command.

Cluster Director

  • Added support for updating Slurm prolog, epilog, task prolog, and task epilog scripts.

Compute Engine

  • Added centos/rhel/rocky 10, debian 13, ubuntu 24.04/25.10 to allowed list of values for osShortName and osVersion of gcloud compute instances ops-agents policies [create|update].
  • Promoted the --location flag of gcloud compute interconnects update to beta.
  • Promoted --post-quantum-key-exchange flag on gcloud compute ssl-policies create and gcloud compute ssl-policies update to GA.
  • Promoted gcloud compute advice capacity to beta.
  • Promoted gcloud compute advice capacity-history to beta.
  • Promoted --resource-manager-tags flag for gcloud compute commitments create to beta and GA.

  • Added --stabilization-period flag to gcloud compute instance-groups managed <set-autoscaling|update-autoscaling> to configure autoscaler load stabilization period before scale-in decisions.

  • Added --minimal-action flag to gcloud compute instances update.

  • Promoted --view flag of gcloud compute forwarding-rules describe to GA.

  • Promoted gcloud compute org-rollouts cancel to beta.

  • Promoted gcloud compute org-rollouts delete to beta.

  • Promoted gcloud compute org-rollouts describe to beta.

  • Promoted gcloud compute org-rollouts list to beta.

  • Promoted gcloud compute org-rollout-plans create to beta.

  • Promoted gcloud compute org-rollout-plans delete to beta.

  • Promoted gcloud compute org-rollout-plans describe to beta.

  • Promoted gcloud compute org-rollout-plans list to beta.

  • Removed validation on empty folder share list on gcloud compute reservations create.

  • Promoted --secondary-ipv6-range flag on gcloud compute networks subnets create, and --add-secondary-ipv6-range and --remove-secondary-ipv6-range flags on gcloud compute networks subnets update to beta.

  • Promoted --ipv6-aliases flag to gcloud compute instances create, gcloud compute instances network-interfaces [add|update], and gcloud compute instance-templates create in beta.

  • Added --network-tier flag to gcloud compute public-advertised-prefixes create in alpha.

Kubernetes Engine

  • Promoted --enable-agent-sandbox flag to GA for gcloud container clusters create, gcloud container clusters create-auto, and gcloud container clusters update.

Network Connectivity

  • Promoted gcloud network-connectivity spokes gateways command group to GA, including create and update commands.
  • Added support for HYBRID_INSPECTION preset topology to gcloud network-connectivity hubs create in GA.

Network Management

  • Added gcloud network-management network-monitoring-providers command group which manages the enablement state of the Network Insights service.
  • Added gcloud network-management network-monitoring-providers monitoring-points command group which manages agents within a network or application infrastructure that send probes.
  • Added gcloud network-management network-monitoring-providers network-paths command group which manages the hop-by-hop route and active network delivery quality between a monitoring point and a target destination.
  • Added gcloud network-management network-monitoring-providers web-paths command group which manages monitored web applications or URLs.

Network Security

  • Promoted gcloud network-security secure-access-connect command group to GA, including attachments and realms commands.
  • Restricted Symantec integration and localization arguments (such as --symantec-site and --country) to ALPHA and BETA tracks only.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

569.0.0 (2026-05-19)

Breaking Changes

  • (Google Cloud CLI) The anthoscli component is no longer included by default in Debian and RPM package installations to significantly reduce the default install size. Users who require anthoscli can install it manually by running gcloud components install anthoscli or sudo apt-get install google-cloud-cli-anthoscli.

Google Cloud CLI

  • Updated Windows PuTTY executables to version 0.83.
  • Updated Windows bundled Python for the gcloud CLI to 3.14.4.

AI

  • Fixed --format field selection in gcloud ai model-garden models list.

Anthos

  • Updated anthos-cli with newer go version and library dependencies.

App Engine

Certificate Authority Service

  • Added support for allowing requesters to specify the certificate validity start time, configurable via the CA pool's issuance policy.
  • Added --requested-not-before-time flag to gcloud privateca certificates create.

Cloud Dataproc

  • Added --resource-manager-tag flag to gcloud dataproc batches submit and gcloud dataproc sessions create commands to allow associating Resource Manager Tags with compute resources.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud kms inventory get-protected-resources-summary.
  • Updated gcloud kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.
  • Added --project flag to gcloud beta kms autokey-config describe and gcloud beta kms autokey-config update to support project-level Autokey configurations.
  • Updated gcloud beta kms autokey-config update to support the key-resolution-mode field.

Cloud SQL

  • Added MySQL 9.7 to supported database versions.

Cloud Storage

  • Promoted gcloud storage intelligence-findings commands to GA.

Compute Engine

  • Added --request-body-to-exclude flag to the alpha and beta levels of:
    • gcloud compute security-policies rules add-preconfig-waf-exclusion
    • gcloud compute security-policies rules remove-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules add-preconfig-waf-exclusion
    • gcloud compute org-security-policies rules remove-preconfig-waf-exclusion
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.

Compute Firewall Policies

  • Promoted --target-type and --target-forwarding-rules flags of gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update to GA.

Database Migration

  • Allowed --ssl-type=REQUIRED without specifying certificates.

Kubernetes Engine

  • Added --add-maintenance-exclusion-until-end-of-support and --remove-maintenance-exclusion-until-end-of-support flag in gcloud container node-pools create/update.
  • Added --node-creation-mode flag to gcloud container clusters create, create-auto, and update to allow control plane node creation mode.
  • Added --enable-secret-sync, --enable-secret-sync-rotation and secret-sync-rotation-interval flags to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update for GA.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.12)
    • kubectl.1.34 (1.34.8)
    • kubectl.1.35 (1.35.5)
    • kubectl.1.36 (1.36.1)

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

568.0.0 (2026-05-12)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.14.4 with pyOpenSSL 26.0.0 and cryptography 46.0.7.

Apigee

  • Added support for DRZ endpoints for SA region.

App Optimize

  • Modified gcloud beta app-optimize reports read to show the Report data in a tabular format by default.

Cloud Backup DR

  • Added --compute-instance-properties flag to gcloud backup-dr backup-plans create and update to support workload-specific properties for Compute Engine instance backups.

Cloud Composer

  • Added --cloud-run-functions-routing flag to gcloud composer environments create and gcloud composer environments update (alpha and beta).

Cloud Firestore

  • Added search-config option to field-config flag in gcloud firestore indexes composite create in beta.
  • Added search-index-options option to gcloud firestore indexes composite create in beta.

Cloud Identity-Aware Proxy

  • Promoted gcloud iap tcp IAM commands to beta.

Compute Engine

  • Promoted gcloud compute global-vm-extension-policies to GA.
  • Promoted PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP0 and PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP1 values of --purpose flag on gcloud compute addresses create to beta.
  • Promoted --view flag on gcloud compute forwarding-rules describe to beta.
  • Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in beta.

Kpt

Kubernetes Engine

  • Added --node-pool-upgrade-concurrency-config flag in gcloud container clusters create/create-auto/update.
  • Added --node-architecture-taint-behavior flag to gcloud container clusters create, gcloud container node-pools create and gcloud container node-pools update to control architecture taints for nodes specifically for ARM nodes.
  • Added gcloud container container workload profiles manifests create command. This command Provides optimized deployment manifests for non-inference workloads running on GKE.

Pubsub Emulator

  • Add support for keep alive pings.

Workbench

  • Added --data-disk-resource-policies flag to gcloud workbench instances update to support attaching and updating snapshot schedule resource policies on data disks.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

567.0.0 (2026-05-05)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI to resolve CVE-2024-9979.

AI

  • Added --system-labels flag to gcloud ai model-garden models deploy for custom weights deployments.

API Registry

AlloyDB

  • Added IAM_GROUP option to --type flag of gcloud alloydb users create to represent IAM groups.

App Engine

  • Removed --entrypoint flag from gcloud beta app migrate-to-run and updated the command to extract it from configuration files (app.yaml or version config) automatically.
  • Updated the Go SDK to version 1.9.78. Please visit the following release notes for details: https://cloud.google.com/appengine/docs/go/release-notes.

Artifact Registry

  • Added gcloud artifacts projects command group, including gcloud artifacts projects describe and gcloud artifacts projects update, to view and manage project-level settings per location.
  • Added --clear-platform-logs, --disable-platform-logs, --enable-platform-logs, and --severity flags to gcloud artifacts projects update, gcloud artifacts repositories create, and gcloud artifacts repositories update to configure platform logging.

BigLake

  • Fixed issue where gcloud biglake iceberg catalogs list does not return replicas or storage-regions.

Cloud Dataplex

  • Added --context-format flag to gcloud dataplex context lookup to specify the output format (yaml, json, xml).
  • Added --options flag to gcloud dataplex context lookup to provide additional configurations via a JSON string.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.21.0
    • Added support for subqueries, subcollections, let(...) stage, and nested field modification in add_fields(...) & select(...) stages in the emulator.

Cloud Identity-Aware Proxy

  • Added support for --resource-type=agent-registry for gcloud beta iap web get-iam-policy command in alpha and beta.
  • Added --agent, --mcp-server and --endpoint flag to gcloud beta iap web get-iam-policy --resource-type=agent-registry.

Cloud Key Management Service

  • Added a new enum value external-mu to Digest.
  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud NetApp

  • Added gcloud netapp storage-pools restore-volume command to alpha and beta tracks of the storage-pool group.
  • Added --ontap-source flag to gcloud beta netapp backups create.
  • Added gcloud netapp storage-pools list-backup-configs command to alpha and beta tracks of the storage-pool group.
  • Added gcloud netapp storage-pools update-backup-config command to alpha and beta tracks of the storage-pool group.

Cloud Spanner

  • Added --clear-kms-keys flag to gcloud spanner databases update to support reverting a Cloud Spanner database from customer-managed encryption keys (CMEK) to Google-managed default encryption.

Cloud Storage

  • Introduced --delete-source-objects flag to gcloud storage objects compose command.
  • Enables the use of Objects:move API for intra-bucket gcloud storage mv operations.
  • Updated gsutil component to 5.37.

Cloud Workstations

  • Added --start-workstation flag to gcloud workstations start-tcp-tunnel and gcloud workstations ssh commands to automatically start the workstation if its stopped.

Compute Engine

  • Promoted --accelerator-topology-mode flag on gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement to V1.

Database Migration

  • For PostgreSQL migrations, added --postgres-max-additional-subscriptions to gcloud database-migration migration-jobs create and gcloud database-migration migration-jobs update to specify the maximum number of additional subscriptions to use for the migration job.

Kubernetes Engine

  • Added new kubectl version 1.36.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)
    • kubectl.1.36 (1.36.0)
  • Added --confidential-node-type flag to gcloud container clusters create-auto to allow creation of confidential nodes of types: sev, sev_snp, tdx on GKE Autopilot clusters.

Network Connectivity

  • Add --group flag to gcloud network-connectivity spokes linked-vpc-network create and gcloud network-connectivity spokes linked-producer-vpc-network create to allow creating spokes in other groups.

Network Security

  • Promoted project scoping for gcloud network-security firewall-endpoints commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security firewall-endpoint-associations create command to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoints commands.
  • Promoted project scoping for gcloud network-security security-profiles commands (delete, describe, export, import, list) to the beta track.
  • Allow using --location flag instead of --zone flag for network-security firewall-endpoint-associations commands.
  • Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override, delete, describe, list, update) to the beta track.
  • Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create, delete, describe, list) to the beta track.
  • Promoted project scoping for gcloud network-security security-profile-groups commands (create, delete, describe, list, update) to the beta track.

Network Services

  • Promoted gcloud compute networks peerings cancel-request-delete to GA.

Service Health

  • Added gcloud service-health command group to GA.

Workbench

  • Added Hyperdisk options to --boot-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML.
  • Added Hyperdisk options to --data-disk-type of gcloud workbench instances create: HYPERDISK_BALANCED, HYPERDISK_BALANCED_HIGH_AVAILABILITY, HYPERDISK_ML, HYPERDISK_EXTREME, HYPERDISK_THROUGHPUT.
  • Added support for Gen-4 machine series (e.g. N4, C4, C4A, C4D, M4, X4, H4, Z4, G4, E4) in gcloud workbench instances create. When a Gen-4 machine type is used without an explicit --boot-disk-type / --data-disk-type, gcloud defaults the disk type to HYPERDISK_BALANCED since these machine series do not support Persistent Disk.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

566.0.0 (2026-04-28)

Google Cloud CLI

  • Made gcloud-man-pages component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using --help flag.

AI

  • Fixed region choice for custom weights deployment in gcloud ai model-garden models deploy.

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

  • Added gcloud beta ai semantic-governance-policy-engine command group. Commands in this group allow users to manage the semantic governance policy engine configuration in Vertex AI.

AlloyDB

  • Promoted --backupdr-backup-plan flag for gcloud alloydb clusters create to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.

Apigee

  • Added support for DRZ endpoints for US, IN and EU region.

App Engine

App Lifecycle Manager

  • Added Application Design Center integration flags to gcloud app-lifecycle-manager commands.
  • Added --application-template, --application-template-revision, and --clear-application-template flags to gcloud app-lifecycle-manager saas create and update to manage Application Templates.
  • Added --app-params-group, --scope-type, and --clear-app-params flags to gcloud app-lifecycle-manager unit-kinds create and update to manage Application parameters.
  • Added --application and --clear-application flags to gcloud app-lifecycle-manager units create and update to manage Application references.
  • Added gcloud beta app-lifecycle-manager flags command group to support Feature Flags.

Assured Workloads

  • Added SPAIN_DATA_BOUNDARY_BY_TELEFONICA as option for --partner for gcloud assured workloads create.

Certificate Authority Service

  • Added --filter flag to gcloud privateca root list. The flag is able to allow filtering results based on specified boolean expression.

Cloud Backup DR

  • Promoted gcloud backup-dr to beta.

Cloud Bigtable

  • Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726, CVE-2026-34986, CVE-2025-58181, and CVE-2026-24051.

Cloud Dataflow

  • Added --launcher-vm-timeout-secs flag to gcloud dataflow flex-template run command, allowing users to configure the timeout duration for the launcher VM.

Cloud Dataplex

  • Added gcloud dataplex entries modify command.
  • Added --use-user-credential and --service-account flags to gcloud dataplex datascans create data-quality command.

Cloud Dataproc

  • Removed legacy --tier flag from gcloud dataproc clusters create. Please use the new flag --engine to create clusters with Lightning Engine or the default engine.

Cloud Firestore

  • Added --concurrency-mode flag to gcloud firestore databases create and gcloud firestore databases update commands to allow configuring the concurrency control mode of a Firestore database.
  • Added --expiration-offset flag to gcloud firestore fields ttls update (when used with --enable-ttl) to allow an offset to be specified when updating TTL configuration.

Cloud Key Management Service

  • Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag, allowing users to allow instances to use key portability features.

Cloud Logging

  • Added list command to gcloud logging recent-queries.
  • Added create, delete, describe, list, and update commands to gcloud logging saved-queries.

Cloud NetApp

  • Added --cross-project-vault to gcloud beta netapp backup-vaults create.

Cloud Run

  • Fixed an issue where GPU zonal redundancy setting is not cleared when --gpu=0 flag is specified to clear GPU settings.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.3 of the Cloud SQL Proxy.

Cloud Storage

  • Updated gcloud-crc32c with latest version of golang go1.26.2.

Cloud Workstations

  • Added --enable-http2 flag to gcloud workstations cluster create command.
  • Added --enable-http2 and --no-enable-http2 flags to gcloud workstations cluster update command.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted flags related to in-flight balancing to v1:
    • --max-in-flight-requests of gcloud compute backend-service create.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service create.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service create.
    • --traffic-duration of gcloud compute backend-service create.
    • --max-in-flight-requests of gcloud compute backend-service update.
    • --max-in-flight-requests-per-instance of gcloud compute backend-service update.
    • --max-in-flight-requests-per-endpoint of gcloud compute backend-service update.
    • --traffic-duration of gcloud compute backend-service update.
  • Promoted --resource-manager-tags flag for gcloud compute future-reservations create to beta and GA.
  • Promoted gcloud compute rollouts commands to GA.
  • Promoted gcloud compute rollout-plans commands to GA.
  • Promoted cachePolicy support for gcloud compute url-maps to GA.
  • Promoted gcloud compute instant-snapshot-groups create to GA.
  • Promoted gcloud compute instant-snapshot-groups delete to GA.
  • Promoted gcloud compute instant-snapshot-groups describe to GA.
  • Promoted gcloud compute instant-snapshot-groups list to GA.
  • Promoted gcloud compute disks bulk create to beta.
  • Added --identity, --identity-certificate and --most-disruptive-allowed-action flags to gcloud compute instances update in alpha.
  • Promoted --discard-local-ssd flag on gcloud compute instances update-from-file to beta and GA.
  • Promoted gcloud compute disks bulk create to GA.

GKE Hub

  • Added support for container/use_application_default_credentials property in gcloud container fleet memberships get-credentials. When set to true, generated kubeconfig includes --use-application-default-credentials flag for gke-gcloud-auth-plugin.

Kubernetes Engine

  • Promoted --enable-pod-snapshots and --disable-pod-snapshots flags of gcloud container clusters create to GA.
  • Promoted --control-plane-egress flag of gcloud container clusters create command and gcloud container clusters update command to GA.
  • Added --subnetwork flag to gcloud container node-pools create.
  • Add --enable-autoprovisioning to gcloud container clusters create|update commands to support configuring auto-provisioning settings without enabling NAP.
  • Updated default kubectl from 1.34.6 to 1.35.3.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.11)
    • kubectl.1.34 (1.34.7)
    • kubectl.1.35 (1.35.4)

Network Services

  • Added AgentGateway support in beta.

Privileged Access Manager

  • Added --scheduled-activation-time flag to gcloud beta pam grants create to support scheduled activation times for grants.

Security Command Center

  • Added gcloud scc sources list command to list Security Command Center sources.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

565.0.0 (2026-04-14)

AI Platform

  • Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information, see Configure semantic governance policies.

Beyondcorp

  • Added add-iam-policy-binding and remove-iam-policy-binding commands to gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications.

BigLake

  • Promoted gcloud biglake iceberg tables to GA.

Cloud Bigtable

  • Added --edition flag to gcloud bigtable instances create and gcloud bigtable instances update to support Bigtable Editions.
  • Added gcloud beta bigtable memory-layers describe and gcloud beta bigtable memory-layers update commands to read, enable, or disable Cloud Bigtable memory layers.
  • Added --use-memory-layer and --no-use-memory-layer flags to gcloud beta bigtable app-profiles create and gcloud beta bigtable app-profiles update to support enabling and disabling memory layer usage for app profiles.

Cloud Dataproc

  • Added --master-attached-disks, --worker-attached-disks, and secondary-worker-attached-disks flags to gcloud dataproc clusters create to allow attaching non-boot disks to group of instances.
  • Added --engine flag to gcloud dataproc clusters create to allow creating clusters with Lightning Engine or the default engine.

Cloud Interconnect

  • Add a new section "DEFAULTABLE PER-INTERCONNECT FLAGS" for gcloud compute interconnects groups create-members.

Cloud Memorystore

  • Added new node types (redis-highcpu-medium, redis-standard-large, redis-highmem-2xlarge) for Memorystore for Redis Cluster.
  • Added new node types (custom-pico, custom-micro, custom-mini, highcpu-medium, standard-large, highmem-2xlarge) for Memorystore for Valkey.

Cloud NetApp

  • Added --scale-type flag to gcloud netapp storage-pools create to specify the storage pool scale-type (e.g., SCALEOUT) upon creation.
  • Added --large-capacity-config flag to gcloud netapp volumes create to specify the large-capacity-config upon creation.
  • Added --mode flag to GA track for gcloud netapp storage-pools create.
  • Added gcloud netapp storage-pool execute command to GA track of the storage-pool group.

Cloud Run

  • Promoted volumes shortcut (allowing optional name parameter in --add-volume flag when mount-path is provided) to gcloud run command groups.
  • Promoted gcloud run flags --scaling-cpu-target and --scaling-concurrency-target to beta.
  • Promoted gcloud run worker-pools, gcloud run worker-pools revisions and gcloud run worker-pools logs to GA.

Cloud Storage

  • Updated gcloud-crc32c to support computing CRC32C checksums for data chunks.

Compute Engine

  • Promoted gcloud compute addresses update to GA.
  • Promoted regional backend buckets and aggregated list support in gcloud compute backend-buckets to GA.
  • Promoted regional backend bucket support in gcloud compute url-maps to GA.
  • Promoted gcloud compute zone-vm-extension-policies to GA.

Database Migration

  • Added --use-postgres-native flag to gcloud database-migration migration-jobs create command to allow users to create native postgres migrations.

Network Connectivity

  • promoting gcloud networkconnectivity transports from beta.
  • added transports create flag group in beta for NCC Hub fields.
  • set transports create --stack_type default value to ipv4-only because API requires it is set.

Network Security

  • Added describe command to gcloud network-security security-profiles threat-prevention.

Service Health

  • Added gcloud service-health command group to beta.
  • Added --encryption-spec-crypto-key-name flag to gcloud vector-search collections create to allow creating collections with CMEK encryption.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

564.0.0 (2026-04-07)

Breaking Changes

  • (Saas Runtime) Deprecated gcloud saas-runtime command group. Use gcloud app-lifecycle-manager instead.

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.11 with grpcio v1.80.0.
  • Updated Windows bundled Python for the gcloud CLI with grpcio v1.80.0 and setuptools v80.10.2 which fixed CVE-2026-23949.
  • Added --check-certs flag to gcloud info --run-diagnostics to troubleshoot certificate validation failures when using proxy servers and custom CA certs.
    • For example, to troubleshoot certificate verification failures for compute.googleapis.com, run: gcloud info --run-diagnostics --check-certs=compute.googleapis.com

App Lifecycle Manager

  • Added gcloud app-lifecycle-manager command group to replace gcloud saas-runtime.

BigLake

  • Added list pagination to gcloud biglake iceberg catalogs.
  • Added --description flag to gcloud biglake iceberg catalogs create/update.

Cloud Data Fusion

  • Added regional endpoint support for gcloud beta data-fusion. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.

Cloud Firestore

  • Added support for search indexes in gcloud firestore indexes composite and gcloud firestore indexes describe.

Cloud Run

  • Added support for volumes with type=ephemeral-disk to gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs update, gcloud run worker-pools deploy and gcloud run worker-pools update in beta.
  • Added regional endpoint support for the following gcloud beta run commands:
    • gcloud beta run deploy
    • gcloud beta run services
    • gcloud beta run revisions
    • gcloud beta run jobs
    • gcloud beta run executions Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Supported build arguments in gcloud run compose up.

Cloud Storage

  • Promoted --destination-kms-key-name flag of gcloud storage buckets relocate to GA.

Compute Engine

  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.
  • Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.
  • Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.
  • Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.
  • Removed client-side validation for --disk's size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.
  • Promoted --resource-manager-tags flag for gcloud compute reservations create to beta and GA.
  • Promoted gcloud compute reservations slots get-version to GA.
  • Promoted gcloud compute reservations sub-blocks get-version to GA.

Network Connectivity

  • Added --bandwidth=BANDWIDTH flag to gcloud beta network-connectivity transports update.
  • Added --stack-type=STACK_TYPE flag to gcloud beta network-connectivity transports update.
  • Removed default behaviour of --auto-accept flag for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

563.0.0 (2026-03-31)

Google Cloud CLI

  • Updated Windows bundled Python for the gcloud CLI to 3.13.12.

AlloyDB

  • Added gcloud beta alloydb connect which provides a secure connection to your instance using the AlloyDB Auth Proxy and psql.
  • Added support for c4a-highmem-2-lssd machine-type in gcloud alloydb instances create and gcloud alloydb instances update.

App Engine

  • Reduced the flags to only those that were needed for migrate-to-run command.

Beyondcorp

  • Added --service-discovery flag to gcloud beyondcorp security-gateways create and update commands.

BigLake

  • Added gcloud biglake iceberg tables create to beta.
  • Promoted gcloud biglake iceberg catalogs to GA.
  • Promoted gcloud biglake iceberg namespaces to GA.
  • Added gcloud biglake iceberg tables update to beta.

BigQuery

  • Fixed a bug that would fail to load Cloud CLI configs when reauthentication is required of the user.
  • Improved authentication performance for user account credentials. Note that changing the active Cloud CLI account during a long-running bq command may cause the command to fail if the new account has no access to the corresponding resource.

Certificate Authority Service

  • Added rdn sequence subject argument to gcloud privateca certificates create to use exact distinguished name from CSR.

Cloud Identity-Aware Proxy

  • Added get-iam-policy, set-iam-policy, add-iam-policy-binding, and remove-iam-policy-binding commands to gcloud alpha iap tcp.

Cloud Memorystore

  • Added maintenance_version, available_maintenance_versions, and effective_maintenance_version fields to the output of gcloud memcache instances describe.
  • Added --maintenance-version flag to gcloud memcache instances update to support self-service updates.

Cloud Observability

Cloud SQL

  • Promoted gcloud sql instances perform-storage-shrink to the GA track.
  • Promoted gcloud sql instances get-storage-shrink-config to the GA track.
  • Updated 'cloud-sql-proxy' packaged component to use 2.21.2 of the Cloud SQL Proxy.
  • Added Microsoft Entra ID authentication support for Cloud SQL instances.
  • Added --entra-id-tenant-id and --entra-id-application-id flags to gcloud sql instances create.
  • Added --entra-id-tenant-id, --entra-id-application-id, and --clear-entra-id-config flags to gcloud sql instances patch.
  • Added Entra ID certificate management commands:
    • gcloud sql ssl entraid-certs create
    • gcloud sql ssl entraid-certs list
    • gcloud sql ssl entraid-certs rotate
    • gcloud sql ssl entraid-certs rollback

Cloud Services

  • Updated gcloud services mcp enable command to only perform service enablement, as MCP enablement is no longer required.
  • Updated gcloud services mcp disable command to be a no-op, as MCP enablement is no longer required.
  • Updated gcloud services mcp list command to list enabled services with MCP configuration. No behavior change to --available.

Compute Engine

  • Promoted --service flag for gcloud compute backend-services add-backend, gcloud compute backend-services update-backend, and compute backend-services remove-backend to beta.
  • Fixed typo in --resource-manager-tags flag for Regional Backend Services.
  • Promoted gcloud compute disks update-kms-key to GA.
  • Promoted gcloud compute snapshots update-kms-key to GA.

Database Migration

  • Added --auto-conversion, --quality-assessment --conversion-assistance, and --pattern-matching flags to gcloud database-migration conversion-workspaces create and update to control Gemini settings.

Developer Connect

  • Added dataform option to --github-config-app of gcloud developer connect connections create.

Kubernetes Engine

  • Updated default kubectl from 1.34.5 to 1.34.6.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.10)
    • kubectl.1.34 (1.34.6)
    • kubectl.1.35 (1.35.3)
  • Added --accelerator-network-profile flag to gcloud container node-pools create command.

Network Connectivity

  • Added --auto-accept, --hub, and --psc-routing-enabled flags to gcloud beta network-connectivity transports create.
  • Made --network flag optional for gcloud beta network-connectivity transports create.

Secure Source Manager

  • Added --custom-hostname-api, --custom-hostname-git-http, --custom-hostname-git-ssh, and --custom-hostname-html flags to gcloud source-manager instances create command to allow users to specify custom hostnames for Git HTTP/SSH, API and HTML access when creating a private instance.

Service Extensions

  • Added --kms-key-name flag to gcloud beta service-extensions wasm-plugins command group to enable CMEK support.

Vector Search

  • Modified --use-index flag of gcloud vector-search collections data-objects search to accept index ID as a value.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

562.0.0 (2026-03-24)

BigQuery

  • Added regional endpoint support for bq migration-workflows. Use global flag --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.
  • Fixed a bug where an actual authorization error may be masked by a "missing x-goog-user-project header" error.
  • Errors with the reason alreadyExists are now thrown as BigqueryDuplicateError instead of BigqueryServiceError.
  • Fixed quota project HTTP header fallback value when using legacy auth.
  • Updated the data source for Cloud CLI properties when --use_gcloud_config is set.
  • Add information about the resource that is being managed to the user-agent HTTP header in the API request.

Cloud Backup DR

  • Unhide --disk-properties flag in gcloud backup-dr backup-plans create and gcloud backup-dr backup-plans update to allow configuring disk-level properties like guest-flush.

Cloud DNS

  • Improved robustness of gcloud dns record-sets transaction commands by allowing transaction files to be empty or omit sections, and added a "Nothing to do" message for transactions with no changes.

Cloud Dataplex

  • Promoted dataplex context to GA.
  • Added --semantic-search flag to gcloud dataplex entries search to enable search based on meaning and intent, rather than just keywords.

Cloud Dataproc

  • Fixed a security issue where a race condition could allow local files staged for job submission to be modified before job execution.

Cloud IAM

  • Added gcloud iam workload-identity-pools add-attestation-rule|remove-attestation-rule|set-attestation-ruleslist-attestation-rules which is part of the Managed Workload Identity feature.

Cloud Key Management Service

  • Added --fallback-scope flag to gcloud beta kms inventory get-protected-resources-summary.
  • Updated gcloud beta kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.

Cloud Run

  • Promoted gcloud run compose up command to GA.

Cloud SQL

  • Upgraded --reconcile-psa-networking flag for gcloud sql instances patch command to GA. This field reconciles the instance's PSA networking configuration. If the instance is already on a PSA network, the DNS zone and records associated with the PSA write endpoint are either added if missing or updated if incorrect.

Cloud Storage

  • Updated gcloud storage cp, gcloud storage mv and gcloud storage rsync to support Rapid Bucket see https://docs.cloud.google.com/storage/docs/rapid/rapid-bucket.
  • Added a new predefined key, storage-class to the existing --rewrite-object flag in gcloud storage batch-operations jobs create to rewrite object storage classes.

Compute Engine

  • Added --load-balancing-scheme flag to gcloud beta compute target-tcp-proxies create.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create command in GA.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create command in GA.
  • Promoted health-aggregation-policies command in gcloud compute to GA.
  • Promoted health-sources command in gcloud compute to GA.
  • Promoted composite-health-checks command in gcloud compute to GA.
  • Promoted --target-size-policy-mode flag for gcloud compute instance-groups managed create to GA.

Compute Network Policies

  • Promoted compute network-policies to beta.

Gemini

  • Added gcloud gemini gda-observability-settings API.
  • Added gcloud gemini gda-observability-settings setting-bindings API.
  • Added gcloud gemini gibq-observability-settings API.
  • Added gcloud gemini gibq-observability-settings setting-bindings API.

Kubernetes Engine

  • Added --enable-scheduled-upgrades to gcloud alpha|beta container clusters create|update command.
  • Added --disable-scheduled-upgrades to gcloud alpha|beta container clusters update command.

Model Armor

  • Added support for --google-mcp-server-apis, --add-google-mcp-server-apis, --remove-google-mcp-server-apis, and --clear-google-mcp-server-apis flags to manage Google MCP server APIs in floor settings.
  • Added support for repeated --add-integrated-services and --remove-integrated-services flags to gcloud model-armor floorsettings update.

Network Connectivity

  • Modified --include-import-ranges flag, and added --exclude-import-ranges, --include-export-ranges, --exclude-export-ranges flags to gcloud network-connectivity spokes linked-router-appliances create, gcloud network-connectivity spokes linked-router-appliances update, gcloud network-connectivity spokes linked-interconnect-attachments create, gcloud network-connectivity spokes linked-interconnect-attachments update, gcloud network-connectivity spokes linked-vpn-tunnels create, gcloud network-connectivity spokes linked-vpn-tunnels update to support hybrid spoke filters.

Network Management

  • Removed deprecated 'alpha network-management simulation'.

Network Security

  • Added command group network-security security-profiles url-filtering and promoted it to GA.
  • Added flag --url-filtering-profile to command network-security security-profile-groups create in the GA track.
  • Moved flag --threat-prevention-profile to a mutex with flag --clear-threat-prevention-profile for command network-security security-profile-groups update in the GA track.
  • Added mutex with flags --url-filtering-profile and --clear-url-filtering-profile to command network-security security-profile-groups update in the GA track.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

561.0.0 (2026-03-17)

AI

  • - Added europe-north2 to online prediction supported regions.
  • Added us-west8 to online prediction supported regions.

AlloyDB

  • Added the --[no-]observability-config-track-active-query-plan flag to gcloud beta alloydb instances create and gcloud beta alloydb instances update to enable or disable the tracking of active query plans.

BigLake

  • Promoted gcloud biglake iceberg namespaces to beta. Create, Update, Delete, Describe, and List commands are now available in beta.
  • Promoted gcloud biglake iceberg tables to beta. Delete, Describe, Get-Iam-Policy, List, Register, and Set-Iam-Policy commands are now available in beta.

Cloud DNS

  • Added --skip-soa-update flag to gcloud dns record-sets transaction start and gcloud dns record-sets import to allow initiating transactions without automatically staging an SOA serial number increment.

Cloud Filestore

  • Add source-backup-project flag to gcloud filestore instances create.

Cloud IAM

  • Deprecated the extended-attributes flags used in gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc in favor of SCIM.

  • Added the --[no-]use-default-shared-ca flag to gcloud iam workload-identity-pools create and update commands to let you provision certificates from default shared certificate authorities (CAs).

Cloud Key Management Service

  • Added support for post-quantum asymmetric signing algorithms: ML-DSA-44, ML-DSA-88, and the external-mu ML-DSA variants.

Cloud SQL

  • Added support in gcloud sql instances point-in-time-restore to perform cross-project PITR with flags: --activation-policy, --assign-ip, --network, --authorized-networks, --enable-google-private-path, --availability-type, --backup, --backup-location, --backup-start-time, --collation, --cpu, --database-version, --enable-bin-log, --enable-point-in-time-recovery, --maintenance-release-channel, --maintenance-window-day, --maintenance-window-hour, --deny-maintenance-period-start-date, --deny-maintenance-period-end-date, --deny-maintenance-period-time, --insights-config-query-insights-enabled, --insights-config-query-string-length, --insights-config-record-application-tags, --insights-config-record-client-address, --insights-config-query-plans-per-minute, --memory, --region, --zone, --secondary-zone, --require-ssl, --retained-backups-count, --retained-transaction-log-days, --storage-auto-increase, --storage-size, --storage-provisioned-iops, --storage-provisioned-throughput, --storage-type, --tier, --t, --edition, --disk-encryption-key, --active-directory-domain, --audit-bucket-path, --audit-retention-interval, --audit-upload-interval, --deletion-protection, --time-zone, --connector-enforcement, --timeout, --enable-private-service-connect, --allowed-psc-projects, --ssl-mode, --final-backup, --final-backup-retention-days, --clear-network, --active-directory-mode, --active-directory-dns-servers, --active-directory-organizational-unit, --active-directory-secret-manager-key, --clear-active-directory-dns-servers, --clear-active-directory, --clear-disk-encryption.

Cloud Storage

  • Promoted object-contexts feature to GA.

Compute Engine

  • Promoted endpoint-based connection policies feature for gcloud compute service-attachments update to GA. This feature allows specifying endpoint URLs in --consumer-accept-list and --consumer-reject-list.
  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud compute service-attachments update to cleanup obsolete entries.
  • Promoted cachePolicy support for gcloud compute url-maps to beta.
  • Promoted --zonal-affinity-spillover and --zonal-affinity-spillover-ratio of gcloud compute backend-services create|update commands to GA.
  • Promoted --preemption-notice-duration flag to gcloud compute instances in beta.

Database Migration

  • Added --enable-iam-authentication and --disable-iam-authentication to gcloud database-migrate connection-profiles create and gcloud database-migrate connection-profiles update. The flag enabled or disables IAM authentication using DMS service agent to the destination instance. Currently supported only for Postgres destinations (Cloud SQL & AlloyDB).

Kubernetes Engine

  • Added support for enabling PTP-KVM time synchronization in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Looker

  • Added --catalog-integration-opt-out flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Network Services

  • Updated gcloud network-services tls-routes import and gcloud network-services tls-routes export to support targetProxies field.

Vector Search

  • Promoted gcloud vector-search collections export-data-objects to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

560.0.0 (2026-03-10)

Google Cloud CLI

  • Fixed issue where API enablement was checked on the wrong project for some commands depending on where --project was specified on the command line.

AlloyDB

  • Added --enable-dataplex-integration flag to gcloud alloydb clusters create|update|create-secondary|restore|migrate-cloud-sql to enable or disable Dataplex integration.

App Engine

Auth Login

  • Fixed an issue where auth/token_host property was ignored when context_aware/use_client_certificate was set to True.

BigQuery

  • Added new --reservation_group flag that can be used in bq mk, show, ls and rm operations.
  • Added information about command that is being executed to the user-agent header.
  • Added new --reservation_group_name flag that can be used in bq update reservation operation.

Cloud Access Context Manager

  • Promoted gcloud access-context-manager supported-permissions describe ROLE_ID to beta and GA.
  • Promoted gcloud access-context-manager supported-permissions list to beta and GA.

Cloud Build

  • Added --publish flag to gcloud builds submit for pack builds, which will directly build images on Artifact Registry and not on local Docker.

Cloud Datastream

  • Fixed an issue where gcloud datastream streams update did not properly handle --rule-sets flag.

Cloud Firestore Emulator

  • Added --edition flag to gcloud emulators firestore start to allow starting the emulator in both 'enterprise' and 'standard' edition.

Cloud IAM

  • Added azure-ad-groups-display-name field to --extra-attributes-type flag to gcloud iam workforce-pools providers create-saml, gcloud iam workforce-pools providers update-saml, gcloud iam workforce-pools providers create-oidc, gcloud iam workforce-pools providers update-oidc which allow user to setup attributes type for extra attributes oauth2 that fetches azure ad group display name property.

Cloud SQL

  • Added gcloud sql instances execute-sql in GA.

Cloud Storage

  • Promoted --update-object-custom-contexts, update-object-custom-contexts-file, clear-object-custom-contexts, and clear-all-object-custom-contexts flags in gcloud storage batch-operations jobs create to GA.
  • Updated gsutil component to 5.36.
  • Promoted --encryption-enforcement-file flag of gcloud storage buckets create and gcloud storage buckets update to GA.

Compute Engine

  • Updated gcloud compute images list to include public images from the almalinux-cloud project in the default search.
  • Promoted gcloud compute storage-pools list support for Exapools to GA.
  • Added --forward-proxy-direct-forwarding flag to gcloud compute backend-services create in beta.
  • Added --forward-proxy-cloud-run flag to gcloud compute backend-services create in beta.
  • Promoted --early-access-maintenance in gcloud compute reservations update to GA.
  • Promoted the following gcloud compute routers command groups to beta: add-named-set, add-named-set-element, download-named-set, get-named-set, list-named-sets, remove-named-set, remove-named-set-element, and upload-named-set.

Config Connector

Database Migration

  • Added gcloud database-migration connection-profiles fetch-static-ips command to fetch the static IP addresses that need to be allowlisted for static IP connectivity.

Kubernetes Engine

  • Added flag option --autopilot-privileged-admission to gcloud container clusters create, gcloud container clusters create-auto and gcloud container clusters update commands. This flag allows specifying Cloud Storage or GKE-specific object paths pointing to privileged workload allowlists to be authorized for use in Autopilot mode.
  • Added support for setting max container restart period in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.
  • Updated default kubectl from 1.34.4 to 1.34.5.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.13)
    • kubectl.1.33 (1.33.9)
    • kubectl.1.34 (1.34.5)
    • kubectl.1.35 (1.35.2)
  • Added --enable-agent-sandbox flag to gcloud container clusters create and update commands to enable or disable GKE Agent Sandbox feature.

Vector Search

  • Added gcloud vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources via v1 API.
  • Added support for Data Objects aggregation, query and search via v1 API.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

559.0.0 (2026-03-03)

Breaking Changes

  • (Compute Engine) The command gcloud compute project-info set-usage-bucket has been deprecated. Please use BigQuery Export instead.

Google Cloud CLI

  • Adjusted the maximum wait time between poll retries for async Long-Running Operations from 3 minutes to 20 seconds for some commands.

AI

  • Modified --region flag of gcloud ai custom-jobs to include new custom job regions.

AlloyDB

  • Added support for POSTGRES_18 as a version in alloydb clusters create for GA track.
  • Added support for POSTGRES_18 as a version in alloydb clusters migrate-cloud-sql for GA track.
  • Added support for POSTGRES_18 as a target version using alloydb clusters upgrade for GA track.

BigLake

  • Modified gcloud biglake iceberg catalogs delete to prompt for confirmation by default. Use --quiet flag to get the old behavior.

Certificate Authority Service

  • Added gcloud privateca operations command group to manage long-running operations.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.4
    • Minor bug fixes in Firestore Native mode

Cloud Key Management Service

  • Added gcloud beta kms kaj-config to help users view and updates KAJ default policy on a project/folder/organization.
  • Added gcloud beta kms kaj-enrollment to help users view the KAJ enrollment config of a project.

Cloud NetApp

  • Added gcloud netapp storage-pool execute command to the storage-pool group. This command allows execution of ONTAP CLI commands on the storage pool.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.1 of the Cloud SQL Proxy.

Cluster Director

  • Added id field to all storage resources. Users can set an identifier for storage resources when creating a cluster.

Compute Engine

  • Promoted --resolve-subnet-mask flag for gcloud compute networks subnets create to GA.
  • Added --resource-manager-tags flag to gcloud compute instant-snapshots create in beta and GA.

Database Migration

  • Added --original-migration-name flag to gcloud database-migration migration-jobs create command to allow users to create failback migration jobs.
  • Added --psc-service-attachment flag to gcloud database-migration connection-profiles create sqlserver command to allow users to create SQL Server connection profile for failback migration jobs.
  • Added --private-connection flag to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Private Connection connectivity method.
  • Added --forward-ssh-hostname, --forward-ssh-port, --forward-ssh-username, --forward-ssh-password, and --forward-ssh-private-key flags to gcloud database-migration connection-profiles create postgesql command to allow users to create PostgreSQL connection profile for failback migration jobs with Forward SSH Tunnel connectivity method.

Kubernetes Engine

  • Added --consolidation-delay flag to gcloud container node-pools create and update to control when the Cluster Autoscaler can scale down underutilized nodes.
  • Added flag option --disable-multi-nic-lustre to add support for enabling/disabling the Lustre MultiNIC on GKE Standard and Autopilot clusters.

Network Security

  • Updated import and export schemas for gcloud network-security security-profile-groups.
  • Updated import and export schemas for gcloud network-security security-profiles.
  • Promoted the network-security security-profiles list command to GA.
  • Promoted the network-security security-profiles describe command to GA.
  • Promoted the network-security security-profiles export command to GA.
  • Promoted the network-security security-profiles import command to GA.
  • Add network-security security-profiles delete command.

Vector Search

  • Removed unsupported Vertex Ranker flags from gcloud beta vector-search collections data-objects batch-search command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

558.0.0 (2026-02-24)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added new value POSTGRES_18 to --version flag from gcloud alpha|beta alloydb clusters upgrade to support for upgrading AlloyDB clusters to PostgreSQL 18.

Apihub

  • Promoted gcloud apihub surface to GA which allows management of Apihub resources.

Cloud Functions

  • Promoted Direct VPC support for gcloud functions deploy to GA. Use flags --network, --subnet, --network-tags, and --direct-vpc-egress to configure Direct VPC egress for functions.

Cloud Identity-Aware Proxy

  • Promoted cloud-run resource-type support for IAP CLI to GA.

Cloud Key Management Service

  • Added gcloud kms keys versions delete command to support deletion of CryptoKey Versions.
  • Added gcloud kms keys delete command to support deletion of CryptoKeys.
  • Added gcloud kms retired-resources describe command to support retrieval of a RetiredResource.
  • Added gcloud kms retired-resources list command to support retrieval of RetiredResources.

Cloud NetApp

  • Added --mode flag to gcloud netapp storage-pools create.

Cloud Run

  • Promoted --[no-]iap flag to GA for commands gcloud run deploy, gcloud run services update and gcloud run multi-region-services update.

Cloud SQL

  • Added --data-api-access flag to gcloud sql instances create and patch in GA.

Cluster Director

  • Promoted gcloud alpha cluster-director to beta.

Compute Engine

  • Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud beta compute service-attachments update to remove entries for Private Service Connect endpoints that are no longer connected.
  • Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create to beta.
  • Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create to beta.
  • Added --instance-flexibility-policy flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update commands in beta.
  • Added CHIP_ERROR as a valid value for --fault-reasons in gcloud compute instances report-host-as-faulty in alpha, beta, and GA.
  • Promoted --target-service flag for gcloud compute service-attachments update to GA.
  • Added --resource-manager-tags flag to gcloud compute images create in beta and GA.
  • Promoted --network-ddos-adaptive-protection, --network-ddos-impacted-baseline-threshold, and --clear-network-ddos-impacted-baseline-threshold flags for gcloud compute security-policies update to beta.
  • Added --resource-manager-tags flag to gcloud compute disks create in beta and GA.
  • Added --resource-manager-tags flag to gcloud compute snapshots create in beta and GA.

GKE Hub

  • Promoted container fleet workload-identity methods to GA.

Kubernetes Engine

  • Added --maintenance-minor-version-disruption-interval and --maintenance-patch-version-disruption-interval flag in gcloud container clusters create/create-auto/update.

  • Updated default kubectl from 1.33.5 to 1.34.4.

  • Additional kubectl versions:

    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.12)
    • kubectl.1.33 (1.33.8)
    • kubectl.1.34 (1.34.4)
    • kubectl.1.35 (1.35.1)

Vector Search

  • Introduced etag support to gcloud beta vector-search data-objects methods.
  • Added configuration management support to gcloud beta vector-search collections indexes create method.
  • Added --dense-scann-search-leaves-pct and --dense-scann-initial-candidate-count flags to gcloud beta vector-search collections data-objects search to support dense ScaNN parameters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

557.0.0 (2026-02-18)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.2 to fix CVE CVE-2026-24049.
  • Update gcloud feedback to remove Stack Overflow and IRC as communication channels.

App Engine

Cloud Backup DR

  • Added --cloudsql-edition flag to gcloud backup-dr service-config init to support initializing Cloud SQL instances.

Cloud Bigtable

  • Rebuilt with Go 1.24.11 to fix CVE-2025-61727 and CVE-2025-61729.

Cloud DNS

  • Enforce version 3 in setIamPolicy managed zone command.

Cloud Interconnect

  • Deprecate --subzone flag of gcloud compute interconnects create.

Compute Engine

  • Added --template flag for gcloud compute instance-groups managed update command in GA.
  • Promoted gcloud compute instant-snapshot-groups create to beta.
  • Promoted gcloud compute instant-snapshot-groups delete to beta.
  • Promoted gcloud compute instant-snapshot-groups describe to beta.
  • Promoted gcloud compute instant-snapshot-groups list to beta.
  • Promoted gcloud compute rollouts describe to beta.
  • Promoted gcloud compute rollouts list to beta.
  • Promoted gcloud compute rollouts cancel to beta.
  • Promoted gcloud compute rollouts delete to beta.
  • Added min-cpu-platform field in --instance-selection flag of gcloud compute instance-groups managed create and gcloud compute instance-groups managed update in beta.
  • Added --discard-local-ssd flag to gcloud compute instances create in alpha.
  • Updated the network troubleshooting logic within gcloud compute ssh --troubleshoot to handle IAP and IPv6 connectivity scenarios.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to GA.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to GA.
  • Promoted --priority and --associated-policy-to-be-replaced flags of gcloud compute network-firewall-policies associations create to beta.
  • Promoted gcloud compute network-firewall-policies associations update command to beta.

Container Registry

  • Fixed an issue where gcloud container images list-tags would crash with a stack trace when receiving a non-JSON response from the server (e.g. an HTML error page). It now displays a user-friendly error message.

Eventarc

  • Added --clear-max-retry-attempts to gcloud eventarc triggers update to support unsetting a RetryPolicy delivery attempt setting.

Looker

  • Added --catalog-integration-enabled flag to gcloud looker instance create and gcloud looker instance update commands to manage Universal Dataplex Catalog integration with Looker.

Pubsub Emulator

  • Add support for AI Inference Single Message Transforms (SMTs).
  • Fix race condition in unit tests.

Workbench

  • Promoted gcloud workbench executions and gcloud workbench schedules to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

556.0.0 (2026-02-10)

Google Cloud CLI

  • Fixed --filter parsing errors in gcloud compute list commands when filter expression contained "region" or "zone" as a substring somewhere in a parenthesized sub-expression.

AI

  • Added support for --disable-dedicated-endpoint to gcloud ai model-garden models deploy.

App Engine

BigQuery

  • Added a queryId in the execution metadata of RunQueryRpc return value if a job was not created.
  • Added support for labels in RunQueryRpc method.
  • Improved stack trace format for Python UDF error messages.
  • Fixed a bug where Google Cloud CLI config properties would not be read correctly.
  • Fixed a bug where a failed Data Transfer config update would display a Success message.

Cloud Backup DR

  • Added --clear-encryption-key flag to gcloud backup-dr backups restore compute to revert the CMEK encryption of disks of a VM to GMEK encryption.
  • Added kms-key property to --create-disk flag to support encryption of restored disk with a Customer Managed Encryption Key (CMEK).

Cloud Run

  • Added warning message for orgless project while deploying cloud-run service with IAP enabled.

Cloud SQL

  • Promoted --server-certificate-rotation-mode flag to GA in gcloud sql instances create and patch command.
  • Updated help text for --server-certificate-rotation-mode flag.

Compute Engine

  • Unhided gcloud compute advice capacity command in alpha.
  • Fix bug with updating standby target size to 0 when calling gcloud beta compute instance-groups managed update with flags --stopped-size or --suspended-size.
    • Added --resource-manager-tags flag to gcloud compute machine-images create in beta.
  • Added --resource-manager-tags flag to gcloud compute machine-images create in v1.
  • Promoted gcloud compute rollout-plans command group to beta.

Compute Firewall Policy Rules

  • Promoted new values for --policy-type flag of gcloud compute network-firewall-policies create to beta.

Developer Connect

  • Added flag --secure-source-manager-instance-config to gcloud developer-connect connections create and gcloud developer-connect connections update.
  • Non-scm providers for developer-connect account-connectors will not be deprecated.

GKE Hub

  • Promoted container fleet workload-identity methods to beta.

Kpt

Kubernetes Engine

  • Announced General Availability (GA) of support for the Image Streaming and Secondary Boot Disk feature on Ubuntu node images (UBUNTU_CONTAINERD) within Google Kubernetes Engine. This allows clusters using Ubuntu nodes to benefit from faster container startups by streaming image data.
  • Updated the help text for --enable-image-streaming flag (in gcloud container clusters create/update and gcloud container node-pools create/update). The enhanced help text now directs users to the public documentation for detailed version requirements and usage instructions for Image Streaming with both UBUNTU_CONTAINERD and COS_CONTAINERD node images.
  • Updated the help text for --secondary-boot-disk flag (in gcloud container node-pools create). The help text now provides links to the public documentation for detailed version requirements and usage instructions across different node image types, including UBUNTU_CONTAINERD.
  • Added flag option --autopilot-general-profile to gcloud container clusters create, create-auto and updatecommands. Accepted values are: none, no-performance. This flag allows specifying the Autopilot general compute profile for a cluster, available on clusters running version 1.32 or later. For more information, see https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#autopilot-compute-platform.

Network Connectivity

  • Fix gcloud beta network-connectivity transports profiles by adding REGION as a column on list, and align on --region flag for describe.
  • Marked advertised-routes as optional in gcloud beta network-connectivity transports create.

Vector Search

  • Added gcloud beta vector-search which allows for basic CRUDL operations on Vector Search 2.0 resources.
  • Added support for Data Objects aggregation, query and search.
  • Added vector_search/location property to set default region for gcloud beta vector-search commands.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

555.0.0 (2026-02-03)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with setuptools 80.10.1 to fix CVE GHSA-58pv-8j8x-9vj2.

Cloud Run

  • To reduce delay between the end of the build phase and the beginning of the service deployment phase, gcloud run deploy --source commands poll the build for completion more frequently. This reduces overall latency for the command.

Cloud SQL

  • Added gcloud sql users assign-roles which allows granting new roles and revoking existing roles to/from Postgres/MySQL users.
  • Added --database-roles flag to gcloud sql users create to allow granting additional database roles during user creation for Postgres/MySQL.
  • Added --destination-project and --destination-network flags to gcloud sql instances clone for cross-project clone operations. Both flags must be specified together to perform a cross-project clone.

Cloud Services

  • Add --group flag to gcloud services enable in beta.

Compute Engine

  • Added gcloud compute reservations slots list command in beta.
  • Added gcloud compute reservations slots describe command in beta.
  • Added gcloud compute reservations slots list command in v1.
  • Added gcloud compute reservations slots describe command in v1.
  • Deprecated --user-licenses in gcloud compute disks create and gcloud compute images create.
  • Deprecated --update-user-licenses and --clear-user-licenses in gcloud compute disks update and gcloud compute images update.
  • Promote --instance-selection and --instance-selection-machine-types flags of gcloud compute instances bulk create to GA.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in beta.
  • Added --resource-manager-tags flag to gcloud compute storage-pools create in v1.

Developer Connect

  • Deprecate non-scm account-connector OAuth providers.

Kpt

Kubernetes Engine

  • Added kubelet config options shutdownGracefulPeriodSeconds and shutdownGracefulPeriodCriticalPodsSeconds to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which allows user customization on node graceful shutdown.

Network Connectivity

  • Fix list and describe for gcloud beta network-connectivity transports.
  • Added gcloud beta network-connectivity transports update command.
  • Clarify --region flag for gcloud beta network-connectivity transports delete.

Network Management

  • Added --source-gke-pod and --destination-gke-pod flags to gcloud network-management connectivity-tests to allow executing Connectivity Tests to or from GKE Pods.
  • Updated comments and enum options for network, network-type, and project arguments of gcloud network-management connectivity-tests.

Pubsub Emulator

  • Add support for filtering to the Pub/Sub emulator.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

554.0.0 (2026-01-27)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.9. The minimum supported Python version is Python 3.10.
  • (Dataproc Metastore) Deprecated --read-write-regions and --read-only-regions flags of gcloud metastore services create. Use single region metastore instead.

BigLake

  • Promoted gcloud biglake iceberg to beta.

Cloud Dataflow

  • Added support for various flags --additional-experiments, --additional-pipeline-options, --additional-user-labels, --disable-public-ips, --temp-location, --staging-location, --num-workers, --max-workers, --worker-machine-type, --launcher-machine-type, --dataflow-kms-key, --enable-streaming-engine, --update, --transform-name-mappings to gcloud dataflow yaml run command.

Cloud Managed Kafka

  • Added --view flag to gcloud managed-kafka consumer-groups list to allow for full and basic views of consumer groups.

Cloud Resource Manager

  • Added Dynamic tags support to gcloud resource-manager tags bindings delete command. This command can be used to detach a tag from a resource.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.21.0 of the Cloud SQL Proxy.
  • Modified gcloud sql connect command to use Cloud SQL Proxy V2 API.
    • Added support for --auto-iam-authn, --private-ip, --psc, --auto-ip, --run-connection-test and --debug-logs flags.

Compute Engine

  • Added 400g as an additional option for --bandwidth of gcloud compute interconnects attachments dedicated create and gcloud compute interconnects attachments dedicated update.
  • Added --resource-manager-tags flag for alpha to gcloud compute storage-pools create to allow users to add Resource Manager tags to the storage pool resource during creation.
  • Added support to update graceful shutdown configuration in gcloud beta compute instances update-from-file command.

Kubernetes Engine

  • Added support for setting kernel module signature enforcement in node pools via system config file using --system-config-from-file flag in gcloud container cluster create and gcloud container node-pools create|update commands.

Network Connectivity

  • Fix flags for gcloud beta network-connectivity transports create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

553.0.0 (2026-01-21)

AI

  • Added support for the 'dcgm-fi-dev-gpu-util', 'vllm-gpu-cache-usage-perc', and 'vllm-num-requests-waiting' autoscaling metrics to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

Auth Login

  • Added a warning message for scopes that will be blocked soon for the default client ID generated by gcloud auth application-default login. Scopes include:
    • https://www.googleapis.com/auth/drive
    • https://www.googleapis.com/auth/spreadsheets
    • https://www.googleapis.com/auth/drive.readonly
    • https://www.googleapis.com/auth/analytics.readonly
    • https://www.googleapis.com/auth/spreadsheets.readonly
    • https://www.googleapis.com/auth/calendar
    • https://www.googleapis.com/auth/adwords
    • https://www.googleapis.com/auth/calendar.readonly
    • https://www.googleapis.com/auth/analytics.edit
    • https://www.googleapis.com/auth/drive.metadata.readonly
    • https://www.googleapis.com/auth/content
    • https://www.googleapis.com/auth/analytics
    • https://www.googleapis.com/auth/contacts.readonly
    • https://www.googleapis.com/auth/drive.metadata
    • https://www.googleapis.com/auth/contacts
    • https://www.googleapis.com/auth/youtube
    • https://www.googleapis.com/auth/calendar.events.readonly
    • https://www.googleapis.com/auth/drive.scripts
    • https://www.googleapis.com/auth/docs
    • https://www.googleapis.com/auth/drive.photos.readonly
  • For more information, see https://docs.cloud.google.com/docs/authentication/troubleshoot-adc#access_blocked_when_using_scopes.

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.
  • [Backup DR] Added --update-labels, --remove-labels, and --clear-labels flags to gcloud backup-dr backups update to support label management.
  • Made --backup-rule optional in gcloud backup-dr backup-plans create.

Cloud Dataproc

  • Added --auto-zone-exclude-zones flag to gcloud dataproc clusters create to allow excluding specific zones when using auto zone placement.
  • Added --auto-zone-exclude-zones flag to gcloud dataproc workflow-templates set-managed-cluster to allow managed clusters to be to allow excluding specific zones when using auto zone placement.

Cloud Datastream

  • Added Spanner as a supported source in gcloud datastream connection-profiles and gcloud datastream streams command groups.
  • Added flags for Spanner source in gcloud datastream connection-profiles command group.
  • Added flags for Spanner source in gcloud datastream streams command group.

Cloud NetApp

  • Added gcloud netapp volumes establish-peering command to establish peering for cache volumes.

Cloud Resource Manager

  • Promoted --allowed-values-regex flag of gcloud resource-manager tags keys create/update to GA. This will allow the Tag Values shortName confining to the regex getting created during the time of Binding creation.

Cloud Run

  • Modified gcloud run compose up to support caching in source builds.

Cloud Storage

  • Updated gcloud storage batch-operations jobs list to return a new column "DRY_RUN" to indicate the mode of the jobs.

Compute Engine

  • Added --accelerator-topology-mode flag to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.
  • Added RESERVATION_BOUND and FLEX_START options to --provisioning-model flag in gcloud compute instances update-from-file command.
  • Promoted --allow-cidr-routes-overlap flag of gcloud compute networks subnets update to GA.
  • Added --allow-cidr-routes-overlap flag to gcloud compute networks subnets create to allow creating subnetworks with IP ranges that can overlap with custom routes within the VPC.
  • Promoted --capacity-tier flag to beta.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.
  • Updated gcloud developer-connect create to support --github-enterprise-config-organization flag.

Kubernetes Engine

  • Added --subnet to gcloud container node-pools create command.

Oracle Database

  • Removed unsupported fields from Autonomous Database Update command.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

552.0.0 (2026-01-13)

BigQuery

  • Added --managed_table_type in bq mk --transfer_config to support destination table type in Data Transfer Service.
  • Fixed the bug where bq command would stop responding indefinitely when the Cloud Resource Manager API was not enabled in the project.

Cloud Composer

  • Updated warning message to reflect Composer 3 as the default version.

Cloud Firestore

  • Promoted enable-firestore-data-access, enable-mongodb-compatible-data-access and enable-realtime-updates to beta and GA.

Cloud Infrastructure Manager

  • Added gcloud infra-manager automigrationconfig describe, gcloud infra-manager automigrationconfig enable-auto-migration, and gcloud infra-manager automigrationconfig disable-auto-migration commands to manage Infrastructure Manager AutoMigrationConfig.

Cloud Run

  • Added --region flag to gcloud beta run worker-pools logs command group.
  • Added --instances flag to gcloud beta run worker-pools deploy/update to replace --scaling flag.
  • Deprecated --scaling flag from gcloud beta run worker-pools deploy/update.
  • Added gcloud run compose up command to alpha and beta.
  • Added --[no-]iap to gcloud beta run multi-region-services.

Cloud Storage

  • Promoted --activity-data-retention-period-days flag in gcloud storage insights dataset-configs to GA.
  • Added --dry-run flag to gcloud storage batch operations jobs create to support creating dry run jobs.

Cloud Workstations

  • Promoted --instance-metadata flag of gcloud workstations configs create and gcloud workstations configs update to GA.

Compute Engine

  • Add --accelerator-topology-mode support to gcloud compute resource-policies create workload-policy and gcloud compute resource-policies create group-placement commands.

Design Center

  • Added --create-sa flag to gcloud design-center spaces applications deploy command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application deployment. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.
  • Added --create-sa flag to gcloud design-center spaces applications preview command in GA. This flag automates the creation, role binding, and configuration of a new service account required for the application preview. --service-account flag can be used in conjunction with --create-sa to specify the name for the new service account.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.
  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.

Kubernetes Engine

  • Added new kubectl version 1.35.0 for the RAPID channel.
  • Additional kubectl versions:
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.11)
    • kubectl.1.33 (1.33.7)
    • kubectl.1.34 (1.34.3)
    • kubectl.1.35 (1.35.0)

Network Services

  • Added gcloud compute networks peerings cancel-request-delete command to alpha and beta. This command is used to cancel a pending request to delete a consensus peering between two networks.

Vmware Engine

  • Added datastores command to gcloud vmware to create, delete, update, describe and list datastores.
  • Added mount-datastore and unmount-datastore command to gcloud vmware private-clouds clusters to mount and unmount datastore on the given cluster.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

551.0.0 (2026-01-06)

Breaking Changes

  • (Google Cloud CLI) Removed the deprecated Cloud Tools for PowerShell component from "gcloud CLI".
    • Starting this release, Cloud Tools for PowerShell is no longer available in Google Cloud CLI. The component is removed from distribution. Cloud Tools for PowerShell has not been installed by default since April 2025 and this change will likely not affect you.
    • We recommend migrating any workflows dependent on these tools to the "gcloud CLI" or the Client Libraries to ensure future compatibility and support.
    • If you require Cloud Tools for PowerShell, you can install it manually from an archived Google Cloud CLI install version 550.0.0 or older.

AI

  • Added --min-gpu-driver-version flag to gcloud beta ai endpoints deploy-model for specifying the minimum GPU driver version.

App Engine

Cloud Backup DR

  • Promoted gcloud backup-dr resource-backup-config command group to GA.

Cloud Dataplex

  • Added --enable-catalog-publishing flag to gcloud dataplex datascans dataprofile create/update command groups.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.3
    • Fixed transaction lock timeout error.
    • Fixed bug where import job did not properly reserve imported ids.

Cloud Functions

  • Added flags --network, --subnet, --network-tags, and --direct-vpc-egress to gcloud functions deploy in alpha and beta tracks for supporting Direct VPC.

Cloud Memorystore

  • Add --labels flag to gcloud redis clusters create.
  • Add --update-labels flag to gcloud redis clusters update.
  • Add --remove-labels flag to gcloud redis clusters update.
  • Add --clear-labels flag to gcloud redis clusters update.

Cloud Run

  • Added gcloud beta run worker-pools logs command group, including read and tail commands, to support viewing logs for worker pools.
  • Fixed an issue where gcloud run services logs and gcloud run jobs logs command groups, including read and tail commands, would crash if a request log had a missing attribute value.

Cloud Spanner

  • Add autoscaler flags to gcloud spanner instance-partitons create and gcloud spanner instance-partitions update commands in beta and GA.
  • Add total CPU based autoscaling flags to gcloud spanner instances create and gcloud spanner instances update commands in beta and GA.
  • Promote disable downscaling flag options for gcloud spanner instances create and gcloud spanner instances update commands for GA.

Cloud Storage

  • gcloud storage cp:
    • Skipping copying files which goes outside of destination directory.

Cloud Workstations

  • Added --disk-type, --disk-size, --disk-reclaim-policy, and --disk-source-snapshot to gcloud workstations configs create and gcloud workstations configs update.
  • Added support for Hyperdisk with --disk-type=hyperdisk-balanced-ha.

Compute Engine

  • Added --resource-manager-tags flag for alpha to gcloud compute snapshots create to allow users to add Resource Manager tags to the snapshot resource during creation.
  • Added --resource-manager-tags flag for alpha to gcloud compute disks create to allow users to add Resource Manager tags to the disk resource during creation.

Compute Firewall Policies

  • Promoted --src-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute firewall-policies rules update to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --src-network-context flag of gcloud compute network-firewall-policies rules update to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules create to beta.
  • Promoted --dest-network-context flag of gcloud compute network-firewall-policies rules update to beta.

Gemini

  • Promoted gcloud gemini cloud-assist investigations commands to beta.

Kubernetes Engine

  • Added --node-drain-grace-period-seconds, --node-drain-pdb-timeout-seconds, and --respect-pdb-during-node-pool-deletion to gcloud container node-pools create and gcloud container node-pools update commands.

Workbench

  • Added NVIDIA_H200_141GB and NVIDIA_B200 option to --accelerator-type flag of gcloud workbench instances create and gcloud workbench instances update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

550.0.0 (2025-12-16)

Google Cloud CLI

  • Updated Linux bundled Python for the gcloud CLI to 3.13.10 with pip v25.3.

App Engine

Artifact Registry

  • Made the show-package-vulnerability flag public for gcloud artifacts versions describe.

BigQuery

  • Added an error message on how to set a quota project ID when expected by the API.
  • Updated bq info command to show OpenSSL version.
  • Added new --scheduling_policy_max_slots flag that can be used to set a slot usage cap on BigQuery jobs for either all projects under a reservation or a specific one.
  • Added new --scheduling_policy_concurrency flag that can be used to cap the number of concurrently running BigQuery jobs for either all projects under a reservation or a specific one.
  • Added new --use_gcloud_config to allow disabling the reading of the active gcloud CLI configuration (enabled by default).
  • Added more incompatible flag checks for Dataset and Table in bq update.
  • Improved error messages for unidentifiable resource names.
  • Added setting --mtls flag value from gcloud context_aware.use_client_certificate config property.

Cloud Composer

  • Added --airflow-version to gcloud composer environments update to upgrade Cloud Composer environment to a newer Composer version.

Cloud Dataplex

  • Added one-time trigger support to dataplex datascans create commands.

Cloud Filestore

  • Added gcloud filestore instances resume-replica command for filestore instances. The resume-replica verb resumes a standby replica instance.

Cloud Key Management Service

  • Added gcloud kms single-tenant-hsm create (beta, GA) command to create a single-tenant Hardware Security Module (HSM) instance, used for CryptoKeys with HSM_SINGLE_TENANT protection level. Requires --location and --total-approver-count.
  • Added gcloud kms single-tenant-hsm describe (beta, GA) command to show details of a single-tenant HSM instance. Requires the instance ID as a positional argument and --location flag.
  • Added gcloud kms single-tenant-hsm list (beta, GA) command to list single-tenant HSM instances.
  • Added gcloud kms single-tenant-hsm proposal create (beta, GA) command to create a proposal for operations on a single-tenant HSM instance. Requires --location and --operation-type. Supported operation types are: register_2fa_keys, disable_sthi, enable_sthi, delete_sthi, add_quorum_member, remove_quorum_member, and refresh_sthi. The --single-tenant-hsm-instance-proposal-id flag is optional.
  • Added gcloud kms single-tenant-hsm proposal execute (beta, GA) command to execute an approved proposal on a single-tenant HSM instance. Requires proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal list (beta, GA) command to list proposals for a single-tenant HSM instance. Requires --location and --single-tenant-hsm-instance.
  • Added gcloud kms single-tenant-hsm proposal describe (beta, GA) command to show details of a single-tenant HSM instance proposal. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal delete (beta, GA) command to delete a proposal on a single-tenant HSM instance. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag.
  • Added gcloud kms single-tenant-hsm proposal approve (beta, GA) command to approve a proposal on a single-tenant HSM instance. Requires the proposal ID as a positional argument, --location flag, and --single-tenant-hsm-instance flag. Approval payloads are provided via either --quorum-reply or a combination of --required-challenge-replies and --quorum-challenge-replies.
    • --quorum-reply: Takes a list of tuples, where each tuple contains the file paths for a signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
    • --required-challenge-replies: Takes a list of tuples, where each tuple contains the file paths for a required signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
    • --quorum-challenge-replies: Takes a list of tuples, where each tuple contains the file paths for a quorum signed challenge and a public key, in the format ('signed_challenge_file', 'public_key_file').
  • Added gcloud kms operations describe (beta, GA) command to show details of a KMS operation.
  • Updated gcloud kms keys versions describe to allow --attestation-file flag for key versions with protection level HSM_SINGLE_TENANT.
  • Updated gcloud kms keys versions get-certificate-chain to allow retrieving certificate chains for key versions with protection level HSM_SINGLE_TENANT.
  • Updated gcloud kms import-jobs create (beta, GA) to include --single-tenant-hsm-instance flag, allowing users to associate the import job with a specific single-tenant HSM instance.

Cloud Run

  • Promoted gcloud run worker-pools IAM policy management commands (add-iam-policy-binding, get-iam-policy, remove-iam-policy-binding, and set-iam-policy) to beta.

Cloud Spanner

  • Added --directed-read flag to gcloud spanner cli that enables directed reads to provide the flexibility to route read-only transactions and single reads to a specific replica type or region (replica_location:replica_type). The replica_type is optional and can be either READ_ONLY or READ_WRITE.
  • Added --proto-descriptor-file flag to gcloud spanner cli to provide path of a file that contains a protobuf-serialized google.protobuf.FileDescriptorSet message to use in this invocation.

Cloud Storage

  • Promoted --activity-data-retention-period-days flag in gcloud storage insights dataset-configs to GA.

Cloud Workstations

  • Added --instance-metadata flag to gcloud beta workstations configs create and gcloud beta workstations configs update commands.

Compute Engine

  • Added --ip-collection flag to gcloud compute addresses create command.
  • Added support for Workforce Identity Federation in GA gcloud.

  • Added --resource-manager-tags flag for alpha to gcloud compute images create to allow users to add Resource Manager tags to the image resource during creation.

  • Updated gcloud compute global-vm-extension-policies help text for --rollout-conflict-behavior and --rollout-predefined-plan arguments.

Developer Connect

  • Updated gcloud developer-connect insights-configs create to support --target-projects flag.

Eventarc

  • Added --max-retry-attempts to gcloud eventarc triggers create and gcloud eventarc triggers update to support specifying a RetryPolicy.

Kubernetes Engine

  • Promoted gcloud container fleet rollouts describe|list to beta.
  • Promoted gcloud container fleet rolloutsequences create|describe|list|update|delete to beta.

Network Connectivity

  • Added gcloud network-connectivity transport delete, gcloud network-connectivity transport list, and gcloud network-connectivity transport describe commands.
  • Added gcloud network-connectivity transport remote-profiles list and gcloud network-connectivity transport remote-profiles describe commands.
  • Added gcloud network-connectivity transport create command.
  • Fixed gcloud network-connectivity transport remote-profiles list command.

Workbench

  • Fixed boolean flag --install-gpu-driver in gcloud workbench instances update command always parsing as true.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

549.0.1 (2025-12-10)

Google Cloud CLI

  • Fixed an AttributeError during macOS install causing gcloud to crash.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

549.0.0 (2025-12-09)

Google Cloud CLI

  • Rebuilt Linux bundled Python for the gcloud CLI with pip v25.3 which fixed CVE-2025-8869.
  • Rebuilt Windows bundled Python for the gcloud CLI with setuptools v80.9.0 which fixed CVE-2025-47273.
  • Updated Python installation experience on macOS to automatically install required dependencies when using gcloud CLI managed Python environment without prompting.

AI

  • Added --deployment-tier flag to gcloud ai index-endpoints deploy-index to support storage optimized indexes.
  • Added --gpu-partition-size flag to gcloud ai endpoints deploy-model for multi-instance GPU partitioning.

API Registry

  • Added gcloud api-registry mcp servers list command to alpha and beta which lists the MCP servers that are available for consumption in the target project.
  • Added gcloud api-registry mcp enable [SERVICE_NAME] command to alpha and beta which enables a given MCP server for use in the target project.
  • Added gcloud api-registry mcp disable [SERVICE_NAME] command to alpha and beta which disables a given MCP server in the target project.
  • Added gcloud api-registry mcp tools list command to alpha and beta which lists the MCP tools available from the MCP servers in the target project.

AlloyDB

  • Added support for z3 machine-types in gcloud alloydb instances create and gcloud alloydb instances update.

App Hub

  • Promoted gcloud apphub boundary commands to the GA release track and unhide them.

Certificate Authority Service

  • Added --encryption-key flag to gcloud privateca pools create and gcloud privateca pools update. The flag accepts the full resource name of a Cloud KMS key to use for encrypting certificate data at rest. The Cloud KMS key must be located in the same region as the CA pool.

Cloud Alerting

  • Promoted gcloud monitoring policies and gcloud monitoring policies conditions command groups to beta and GA.

Cloud Backup DR

  • Updated gcloud backup-dr backup-plan-associations trigger-backup to return the long-running operation.

Cloud Bigtable

  • Added support for 'app-profile' in CBT CLI count command.

Cloud Composer

  • Added extra-large option to gcloud composer environments create/update for newly introduced XL Composer environment size.

Cloud Datastream

  • Added --rule-sets argument to gcloud datastream streams create and gcloud datastream streams update to support configuring customization rules for streams, particularly BigQuery Partitioning and Clustering.

Cloud Filestore

  • Added gcloud beta filestore instances resume-replica command for filestore instances. The resume-replica verb resumes a standby replica instance from paused state.

Cloud Functions

  • Made gcloud functions deploy gracefully skip non-existent paths in source directories containing dangling symbolic links, preventing FileNotFoundError crashes.

Cloud Managed Kafka

  • Managed Kafka Connectors now default to retrying failures. This can be disabled with --task-retry-disabled.
  • Promoted full flag to beta and GA.
  • Added deprecation warning for gcloud managed-kafka connect-clusters --additional-subnetwork flag.
  • The gcloud managed-kafka connect-clusters list command no longer displays the NETWORK column which formerly showed the additional subnetworks (now deprecated).

Cloud NetApp

  • Introduced --cache-pre-populate flag to gcloud netapp volumes create and gcloud netapp volumes update to pre-populate cache volumes.
  • Added squash-mode and anon-uid options to --export-policy flag of gcloud netapp volumes create|update commands to configure root squash behavior for NFS export policies.
  • Added --kms-config flag to gcloud netapp backup-vaults create to support cmek encrypted backups.

Cloud Resource Manager

  • Added gcloud resource-manager capabilities commands. This command can be used to enable or disable capabilities on a CRM Folder.

Cloud Run

  • Promoted mount-path parameter for --add-volumes flag to gcloud beta run [services/jobs/worker-pools] command groups.

Cloud SQL

  • Added --entra-id-tenant-id flag and --entra-id-application-id to gcloud sql instances create and patch in alpha and beta.
  • Added --clear-entra-id-config to gcloud sql instances patch alpha and beta.

Cloud Services

  • Promoted gcloud services mcp enable command to beta to enable the Model Context Protocol (MCP) endpoint for the specified service(s) on the given project, folder, or organization.
  • Promoted gcloud services mcp disable command to beta to disable the Model Context Protocol (MCP) endpoint for the specified service(s) on the given project, folder, or organization.
  • Promoted gcloud services mcp list command to beta to enumerate the MCP endpoints offered, showing them as either enabled or available for the given project, folder, or organization.

Cloud Workstations

  • Promoted --startup-script-uri flag of gcloud workstations configs create and gcloud workstations configs update to GA.
  • Fixed bugs and typos in startup_script_uri support for gcloud beta workstations configs create and gcloud beta workstations configs update.
  • Updated gcloud workstations configs create to now accept --disk-type=hyperdisk-balanced-ha for use with Hyperdisks.

Compute Engine

  • Promoted gcloud compute url-map support for regional backend buckets to beta.
  • Updated gcloud compute routers update to display a warning message when --add-advertisement-ranges, --remove-advertisement-ranges, or --set-advertisement-ranges are specified, cautioning that custom routes on BGP sessions override custom routes on the router.
  • Promoted --candidate-cloud-router-ip-address and --candidate-customer-router-ip-address flags for gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, and gcloud compute interconnects attachments provider create to GA to allow users to add custom ranges to the interconnect attachment.
  • Promoted --candidate-cloud-router-ipv6-address and --candidate-customer-router-ipv6-address flags for gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, gcloud compute interconnects attachments provider create gcloud compute interconnects attachments dedicated update, gcloud compute interconnects attachments partner update, and gcloud compute interconnects attachments provider update to GA to allow users to add custom ranges to the interconnect attachment.

Developer Connect

  • Added gemini-code-assist value to github-config-app.
  • Added support for regional Secret Manager secrets.

Kubernetes Engine

  • Updated default kubectl to 1.33.5.
  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.15)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.14)
    • kubectl.1.32 (1.32.10)
    • kubectl.1.33 (1.33.6)
    • kubectl.1.34 (1.34.2)
  • Added a new command gcloud beta container clusters complete-control-plane-upgrade for user to complete two-step control plane minor upgrade.
  • Added a new flag --control-plane-soak-duration to gcloud beta container clusters upgrade to trigger two-step control plane minor upgrade.
  • Added --use-case, --target-input-length, --target-output-length, --target-itl-milliseconds to gcloud container ai profiles list command.
  • Added gcloud container ai profiles use-case list command.
  • Added use-case flag to the benchmarks list.
  • Added target-itl-milliseconds and use-case flag to manifest command.
  • Added gcloud container ai profiles serving-stacks list command.
  • Added gcloud container ai profiles serving-stack-versions list command.
  • Added arguments --serving-stack and --serving-stack-version to profile commands gcloud container ai profiles list, gcloud container ai benchmarks list and gcloud container ai profiles manifests create.
  • Added output of Serving Stack and Serving Stack Version to profile output of commands gcloud container ai profiles list gcloud container ai benchmarks list.

Looker

  • Added clear-periodic-export-config and periodic export group flags to gcloud looker instances update command to schedule data export.

Workbench

  • Promoted --enable-managed-euc flag to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

548.0.0 (2025-11-18)

AlloyDB

  • Added flag --maintenance-version to gcloud alloydb clusters update command in the GA track to support self-service maintenance.

App Engine

App Hub

  • Added gcloud apphub extended-metadata-schemas command group with describe and list commands to retrieve extended metadata schemas.

Cloud Backup DR

  • Added gcloud backup-dr backups fetch-for-resource-type command to GA track.
  • Added gcloud backup-dr data-source-references list command to GA track.
  • Added --labels to trigger backup command.
  • Added an optional --max-custom-on-demand-retention-days input to gcloud backup-dr backup-plans create and gcloud backup-dr backup-plans update.
  • Added an optional --custom-retention-days input to gcloud backup-dr backup-plans-associations trigger-backup.
  • Added backup-retention-inheritance flag to gcloud backup-dr backup-vaults create to specify backup retention inheritance mode during backup vault creation.
  • Added --kms-key flag to gcloud backup-dr backup-vaults create for customer-managed encryption key support for backup vault.
  • Added --clear-encryption-key flag to gcloud backup-dr backups restore disk to restore a CMEK-encrypted disk as a GMEK-encrypted disk.

Cloud Dataplex

  • Promoted gcloud dataplex datascans create data-documentation command to GA.
  • Promoted gcloud dataplex datascans update data-documentation command to GA.

Cloud Deploy

  • Added --docker-version flag to gcloud deploy releases create.
  • Added --helm-version flag to gcloud deploy releases create.
  • Added --kpt-version flag to gcloud deploy releases create.
  • Added --kubectl-version flag to gcloud deploy releases create.
  • Added --kustomize-version flag to gcloud deploy releases create.

Cloud Run

  • Added gcloud run compose up command to alpha and beta.* Added support for --readiness-probe flag in beta for gcloud run services command groups.
  • Added --no-build flag to gcloud run deploy --source command in beta. This allow for faster deployment whne using a self-contained source by skipping the cloud build step.
  • Updated --container flag parsing to allow for non-container flags to be specified after a --container flag.

Cloud Storage

  • Promoted gcloud storage intelligence-configs commands to GA.
  • Promoted gcloud storage insights dataset-configs commands to GA.

Cloud Workstations

  • Fixed bugs and typos in startup_script_uri support for gcloud beta workstations configs create and gcloud beta workstations configs update.

Compliance Manager

  • Promoted gcloud compliance-manager to GA.

Compute Engine

  • Promoted gcloud compute global-vm-extension-policies to beta.

Compute Firewall Policies

  • Promoted --target-type flag to beta in gcloud compute network-firewall-policies create and gcloud compute network-firewall-policies update.
  • Promoted --target-forwarding-rules flag to beta in gcloud compute network-firewall-policies create and gcloud compute network-firewall-policies update.

Compute OS Config

  • Add --skip-unpatchable-vms flag to gcloud compute os-config patch-jobs execute.

Developer Connect

  • Added generic HTTP Endpoint config connection type to gcloud developer-connect connection create|update commands.

Kubernetes Engine

  • Add support for kernel module signature enforcement in node pools using --enable-kernel-module-signature-enforcement flag, which applies to gcloud container cluster create|create-auto|update and gcloud container node-pools create|update commands.

Migrate to Virtual Machines

  • Added --guest-os-features flag to gcloud migration vms image-imports create and gcloud compute migrations image-imports create commands.

Model Armor

  • Added the following flags to gcloud model-armor floorsettings update command to support Vertex and MCP integrations:
    • --add-integrated-services
    • --remove-integrated-services
    • --clear-integrated-services
    • --vertex-ai-enforcement-type
    • --enable-vertex-ai-cloud-logging
    • --google-mcp-server-enforcement-type
    • --enable-google-mcp-server-cloud-logging
    • --enable-multi-language-detection

Security Command Center

  • Added agent-engine-threat-detection service to the SUPPORTED_SERVICES list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

547.0.0 (2025-11-11)

Breaking Changes

  • (Cloud Storage) Updated gcloud storage sign-url to prefer virtual hosted-style URL over path-style URL. This behavior can be overridden by using --path-style-url flag.

Google Cloud CLI

  • Fixed issue where Google Compute Engine metadata server requests would fail when refreshing authentication credentials if a proxy was configured and the no_proxy environment variable wasn't set.
  • Updated Windows bundled Python for the gcloud CLI to 3.13.8.

Cloud Alerting

  • Promoted gcloud monitoring alerts describe to beta.

Cloud Backup DR

  • Added gcloud backup-dr backups fetch-for-resource-type command to GA track.
  • Added gcloud backup-dr data-source-references list command to GA track.

Cloud Dataflow

  • Added support for Java 25 for --flex-template-base-image option in gcloud dataglow flex_template build.

Cloud Interconnect

  • Promoted compute interconnects attachments l2-forwarding command2 to beta and GA.
  • Added --resource-manager-tags flag to gcloud compute interconnects create to add Resource Manager Tags to resources at creation.
  • Added --resource-manager-tags flag to gcloud compute interconnects attachments dedicated create, gcloud compute interconnects attachments partner create, gcloud compute interconnects attachments provider create, and gcloud compute interconnects attachments l2-forwarding commands to add Resource Manager Tags to resources at creation.

Cloud NetApp

  • Added gcloud netapp host-groups command group to GA, including create, delete, describe, list, and update commands to manage NetApp Host Groups.
  • Added --type flag to gcloud netapp storage-pools create to specify the storage pool type (e.g., UNIFIED) upon creation.
  • Added --block-devices flag to gcloud netapp volumes create and gcloud netapp volumes update to manage block device configurations for volumes.

Cloud On Demand Scanning

  • Add support for scanning Minimus (MinimOS) containers.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.19.0 of the Cloud SQL Proxy.
  • Added --storage-type flag to gcloud sql instances patch.

Cloud Services

  • Promoted gcloud beta services enable command to beta to enable services for a given project, folder, or organization.

    Note: The organization policy constraint constraints/serviceuser.services may not work correctly if you enable a service at the folder or organization level using Service Usage with Hierarchical Service Activation. To recreate the same behavior in a compatible way, it is recommended to replace constraints/serviceuser.services with the Restrict Resource Service Usage organization policy.

    Note: Previously, enabling some services also triggered service account creation. This logic is now separate. If you encounter a service account not found error, please report this to service-usage-feedback@google.com. You can use gcloud services enable or gcloud beta services identity create to create the necessary service account.

    Note: The command will now return an error if the user attempts to enable a service that is already enabled.

  • Promoted gcloud beta services disable command to beta to disable services for a given project, folder, or organization.

    Note: When disabling a service with Hierarchical Service Activation, existing consumer-controlled resources can block the process. Please delete these resources and try again. If resources cannot be deleted, report the issue to the respective service team. Alternatively, use the Restrict Resource Service Usage organization policy constraint to restrict service access.

    Note: The command will now return an error if the user attempts to disable a service that is not enabled.

  • Promoted gcloud beta services list command to beta to list Google Cloud services and APIs that are enabled or available for a given project, folder, or organization.

    Note: Some services previously hidden may now appear in the enabled list with Hierarchical Service Activation. This does not necessarily mean they were newly enabled. They can be disabled using gcloud beta services disable if desired.* Promoted gcloud services groups list-members command to beta to list the direct members of a specified service dependency group.

  • Promoted gcloud services groups list-members command to beta to list the direct members of a specified service dependency group.

  • Promoted gcloud services groups list-expanded-members command to beta to list all transitive members, including nested dependencies, within a service dependency group.

  • Promoted gcloud services policies get command to beta to retrieve the consumer policy for the given project, folder, or organization.

  • Promoted gcloud services policies get-effective command to beta to retrieve the effective consumer policy for the given project, folder, or organization, including policies inherited from ancestors.

  • Promoted gcloud services policies test-enabled command to beta to test if a service value is enabled for the given project, folder, or organization, including policies inherited from ancestors.

  • Promoted gcloud services policies update command to beta to update the consumer policy for the given project, folder, or organization using a provided file.

    Note: Please refer to https://docs.cloud.google.com/service-usage/docs/hierarchical-service-activation/overview for more details on hierarchical service activation.

Cloud Spanner Emulator

  • Add gcloud emulators spanner notices command to print third party notices.

Cloud Storage

  • Added Retain-Until and Retention-Mode options to --put-metadata flag in gcloud storage batch-operations jobs create to set object retention.
  • Fixed gcloud storage sign-url: The --region flag is no longer required for operations on existing buckets, but is still needed when generating a URL to create a bucket.

Cloud Workstations

  • Added support for startup script uri in beta workstations config create and beta workstations config update command.

Compute Engine

  • Added --ipv6-access-type flag to gcloud beta compute public-advertised-prefixes create.
  • Added --ipv6-access-type flag to gcloud compute public-advertised-prefixes create.
  • Added grpc-with-tls command group to gcloud compute health-checks to allow users to create a new health check type.
  • Added --internal-ipv6-prefix flag to gcloud beta compute networks subnets create and gcloud beta compute networks subnets update.
  • Added --internal-ipv6-prefix flag to gcloud compute networks subnets create and gcloud compute networks subnets update.
  • Support --mode=internal-ipv6-subnetwork-creation in gcloud beta compute public-delegated-prefixes create and gcloud beta compute public-delegated-prefixes delegated-sub-prefixes create commands.
  • Support --mode=internal-ipv6-subnetwork-creation in gcloud compute public-delegated-prefixes create and gcloud compute public-delegated-prefixes delegated-sub-prefixes create commands.

Kubernetes Engine

  • Added --enable-pod-snapshots and --disable-pod-snapshots flag to gcloud beta container clusters create|update commands to enable or disable GKE Pod Snapshot feature.

Looker

  • Added --egress-enabled, --marketplace-enabled, and --egress-fqdns flags to gcloud looker instances update to manage Controlled Egress settings.

Model Armor

  • Added the following flags to gcloud beta model-armor floorsettings update command to support MCP integrations:
    • --google-mcp-server-enforcement-type
    • --enable-google-mcp-server-cloud-logging

Service Extensions

  • Promoted gcloud service-extensions lb-edge-extensions command group to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

546.0.0 (2025-11-04)

Google Cloud CLI

  • Updated MacOS Python Virtualenv for the gcloud CLI to 3.13.7.
  • Updated Linux bundled Python for the gcloud CLI to 3.13.7.

AI

  • Added --min-scaleup-period, --idle-scaledown-period, and --initial-replica-count flags to gcloud beta ai endpoints create to support scale-to-zero functionality for Vertex Online Inference.

Cloud Bigtable

  • Promoted gcloud bigtable schema-bundles create|describe|list|update|delete commands to GA.
  • Promoted gcloud bigtable schema-bundles get-iam-policy to GA.
  • Promoted gcloud bigtable schema-bundles set-iam-policy to GA.
  • Promoted gcloud bigtable schema-bundles add-iam-policy-binding to GA.
  • Promoted gcloud bigtable schema-bundles remove-iam-policy-binding to GA.

Cloud Filestore

  • Added address-mode option to --network flag of gcloud filestore instances create command.

Cloud Firestore

  • Promoted gcloud firestore databases clone command to beta and GA.

Cloud Functions

  • Added support for pyproject.toml when deploying Python functions.

Cloud Pub/Sub

  • Added --tags flag to gcloud pubsub topics create for creating Cloud Pub/Sub Topics with Cloud Resource Manager Tags attached at create-time.
  • Added --tags flag to gcloud pubsub subscriptions create for creating Cloud Pub/Sub Subscriptions with Cloud Resource Manager Tags attached at create-time.
  • Added --tags flag to gcloud pubsub snapshots create for creating Cloud Pub/Sub Snapshots with Cloud Resource Manager Tags attached at create-time.

Cloud Run

  • Promoted gcloud run compose up command to beta.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.18.3 of the Cloud SQL Proxy.
  • Modified gcloud beta sql connect command to use Cloud SQL Proxy V2 API.
  • Added support for --auto-iam-authn, --private-ip, --psc, --auto-ip,--run-connection-test and --debug-logs flags.
  • Added --data-api-access flag to gcloud sql instances create and patch in alpha and beta.

Compute Engine

  • Added --identity flag to gcloud beta compute backend-services create.
  • Promoted gcloud compute zone-vm-extension-policies to beta.
  • Added --identity and --identity-certificate flags to gcloud compute instances create and gcloud compute instance-templates create in alpha.

Compute Firewall Policies

  • Added SOURCE column to default output of gcloud beta compute network-firewall-policies list command.

Identity and Access Management

  • Added gcloud iam access-policies create|delete|describe|list|update|search-policy-bindings commands to allow management of access policy resources.
  • Added --target-resource flag to gcloud beta iam policy-bindings create.

Model Armor

  • Added the following flags to gcloud beta model-armor floorsettings update command to support Vertex AI integrations:
    • --add-integrated-services
    • --remove-integrated-services
    • --clear-integrated-services
    • --vertex-ai-enforcement-type
    • --enable-vertex-ai-cloud-logging
    • --enable-multi-language-detection

Network Security

  • Added --mirroring-deployment-group-project flag for explicit project specification in gcloud network-security mirroring-endpoint-groups create command when providing --mirroring-deployment-group. In addition, the command will now correctly fall back to --project and the core/project property from the global configuration before inferring from the endpoint group's project.
  • Added --intercept-deployment-group-project flag for explicit project specification in gcloud network-security intercept-endpoint-groups create command when providing --intercept-deployment-group. In addition, the command will now correctly fall back to --project and the core/project property from the global configuration before inferring from the endpoint group's project.

Service Extensions

  • Promoted request_body_send_mode and response_body_send_mode to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

545.0.0 (2025-10-28)

Google Cloud CLI

  • Added warning message to indicate Python 3.9 support will be deprecated on January 27th, 2026.

App Engine

BigQuery

  • Improved exception chaining in BigQuery client.
  • Added logging for the actual unexpected credentials type when using Google Auth.
  • Added display for authorized stored procedures with user-specified roles in ACLs for bq show.
  • Added support for --timestamp_target_precision flag for bq load, bq mk (--table) and bq mkdef commands. Use this flag to specify timestamp subsecond precisions that will be supported by the destination table. The feature is in preview.
  • Fixed reference type error in bq set-iam-policy --reservation.
  • Fixed a bug where several HTTP headers are not set properly for API requests in bq rm.

Cloud Bigtable

  • Added --view flag to gcloud bigtable materialized-views get and gcloud bigtable materialized-views list to specify which details of a materialized view to retrieve. list command only supports schema view.

Cloud Composer

  • Added --disable-private-environment to gcloud composer environments create to explicitly allow the creation of public environments.

Cloud Dataplex

  • Added --data-classification flag to gcloud dataplex aspect_types create.

Cloud IAM

  • For gcloud iam workforce-pools providers scim-tenants create command, --claim-mapping flag is now required.
  • Eliminate need for --project_id to match service account project in service account key operations.

Cloud Run

  • Added logic to use high-CPU, high-bandwidth machines for source-deploy builds of GPU-enabled Cloud Run services.
  • When deploying source code with gcloud run deploy, the configuration will now be validated before starting to build the code.

Compute Engine

  • Promoted regional backend-buckets in gcloud compute to beta.
  • Added --local-ssd flag to gcloud compute advice calendar-mode to allow specifying local SSD properties when requesting advice for future reservations.
  • Added FIPS_202205 profile and min TLS version 1.3 to --profile and --min-tls-version flags for compute SSL policies in Google Cloud CLI.

Config Connector

Eventarc

  • Removed the deprecated network_attachment option from the examples in the help text for gcloud eventarc pipelines create.

Kubernetes Engine

  • Added --add-maintenance-exclusion-until-end-of-support in gcloud container clusters update command to allow maintenance exclusion end time to track cluster version's end of support.
  • Added --accelerator-network-profile flag to gcloud beta container node-pools create for Public Preview. This flag allows specifying an accelerator network profile when creating node pools.

Network Services

  • Added support for endpoint urls in --consumer-accept-list and --consumer-reject-list in gcloud beta compute service-attachments update command.

Workbench

  • Added --data-disk-resource-policies flags to gcloud workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

544.0.0 (2025-10-21)

AlloyDB

  • Added support for c4 machine-types in gcloud alloydb instances create and gcloud alloydb instances update.
  • Added support for POSTGRES_18 as a version in gcloud alloydb clusters create for alpha & beta track.
  • Added support for POSTGRES_18 as a version in gcloud alloydb clusters migrate-cloud-sql for alpha & beta track.

Artifact Registry

  • Added gcloud artifacts versions export to export artifacts by versions.
  • Added gcloud artifacts tags export to export artifacts by tags.

Cloud Interconnect

  • Added --resource-manager-tags flag to gcloud compute interconnects create to add Resource Manager Tags to resources at creation.
  • Added --resource-manager-tags flag to gcloud beta compute interconnects attachments dedicated create, gcloud beta compute interconnects attachments partner create, and gcloud beta compute interconnects attachments provider create commands to add Resource Manager Tags to resources at creation.

Cloud Run

  • Added a prompt to gcloud run jobs deploy, gcloud run jobs create and gcloud run jobs update to retry deploying a GPU job with --no-gpu-zonal-redundancy flag. This confirmation prompt only shows up when the original deployment enables GPU but does not specify GPU zonal redundancy, and has access to GPU with zonal redundancy disabled.

Cloud SQL

  • Added Customer-managed Active directory CLI flags --active-directory-mode, --active-directory-dns-servers, --active-directory-organizational-unit, --active-directory-secret-manager-key, --clear-active-directory-dns-servers and --clear-active-directory for gcloud sql instances create, gcloud sql instances patch and gcloud sql backups restore to GA.
  • Promoted read pool auto scale flags --auto-scale-enabled, --auto-scale-min-node-count, --auto-scale-max-node-count, --auto-scale-target-metrics, --auto-scale-disable-scale-in, --auto-scale-in-cooldown-seconds, --auto-scale-out-cooldown-seconds to GA track.

Cloud Scheduler

  • Added gcloud scheduler cmek-config and gcloud scheduler operations command groups to GA.

Cloud TPU

  • Remove gcloud compute tpus execution_groups commands for 2VM.
  • Remove gcloud compute tpus commands for Node Architecture.

Compute Engine

  • Added --on-repair-allow-changing-zone flag to gcloud compute instance-groups managed create and gcloud compute instance-groups managed update in beta.
  • Promoted Future Reservations commands to v1.
  • Promoted --full-view flag gcloud compute reservations sub-blocks describe that allow users to see the availability of slices of TPU Hypercomputer reservations within sub-blocks, to beta and v1.
  • Promoted --igmp-query flag in --network-interface component of gcloud compute instances create command to GA.
  • Promoted --igmp-query flag in gcloud compute instances network-interfaces update to GA.
  • Promoted enums FIPS_202205 profile and min TLS version 1.3 to GA for SSL Policies.

Database Migration

  • Added --dump-path and --dump-flags flag to gcloud database-migration migration-jobs create command to allow users to supply dump flags for the migration job.
  • Added --dump-path and --dump-flags flag to gcloud database-migration migration-jobs update command to allow users to supply dump flags for the migration job.

Identity and Access Management

  • Added --scim-usage flag to gcloud iam workforce-pools providers create-oidc|update-oidc|create-saml|update-saml commands to support creating and updating providers which use SCIM-managed groups for authorization checks.

Kubernetes Engine

  • Added support for writable cgroups in node pools using --containerd-config-from-file flag.
  • Added --enable-secret-sync, --enable-secret-sync-rotation and secret-sync-rotation-interval in gcloud container cluster create|update commands for public preview.
  • Added --autopilot-workload-policies flag to gcloud container clusters create to allow NET_ADMIN capabilities similar to --workload-policies in create-auto and update.
  • Updated default value of --num-nodes flag in gcloud container node-pools create command when --placement-policy is specified for multi-host TPU machine types. The number of nodes will be calculated by (product of topology)/(# of chips per VM).

Network Security

  • Added --enable-jumbo-frames flag to gcloud network-security firewall-endpoints create to create a firewall endpoint capable of inspecting traffic with jumbo frames.

Oracle Database

  • Added gcloud oracle-database group in GA with the following commands:
    • gcloud oracle-database autonomous-database-backups list command
    • gcloud oracle-database autonomous-databases command group
    • gcloud oracle-database autonomous-db-versions list command
    • gcloud oracle-database cloud-exadata-infrastructures command group
    • gcloud oracle-database cloud-exadata-infrastructures db-servers list
    • gcloud oracle-database cloud-vm-clusters command group
    • gcloud oracle-database cloud-vm-clusters db-system-shapes list command
    • gcloud oracle-database entitlements list command
    • gcloud oracle-database gi-versions list command
    • gcloud oracle-database db-versions list command
    • gcloud oracle-database db-systems command group
    • gcloud oracle-database databases command group
    • gcloud oracle-database pluggable-databases command group
    • gcloud oracle-database database-character-sets list command
    • gcloud oracle-database db-system-initial-storage-sizes list command
    • gcloud oracle-database exadb-vm-cluster command group
    • gcloud oracle-database exascale-storage-vault command group
    • gcloud oracle-database minor-version list command

Security Command Center

  • Updated location argument description with instruction on how to bypass V1 API access errors.

Vmware Engine

  • Added announcements command to gcloud vmware to list maintenance announcements related to upgrades.
  • Added upgrades command to gcloud vmware private-clouds to list and describe schduled upgrades.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

543.0.0 (2025-10-14)

Google Cloud CLI

  • Updated gcloud CLI to support Python v3.14.

Cloud Auth

  • Updated gcloud auth application-default login to include specified scopes in the Application Default Credentials (ADC) file when using --impersonate-service-account flag or auth/impersonate_service_account property. The scopes will be listed in the scopes field of the generated ADC JSON.

Cloud Build

  • Updated gcloud builds submit to allow the use of the field remote_config.

Cloud IAM

  • Added --hard-delete flag to gcloud iam workforce-pools providers scim-tenants delete which allows for the immediate and permanent deletion of a SCIM tenant.

Cloud Interconnect

  • Promoted gcloud compute interconnects cross-site-networks to GA.
  • Promoted gcloud compute interconnects wire-groups to GA.

Cloud Managed Lustre

  • Added IP-based Access Control flags --default-squash-mode, --default-squash-uid, --default-squash-gid, and --access-rules to gcloud lustre instances create and gcloud lustre instances update.

Cloud Memorystore

  • Modified gcloud memcache instances describe to include the tags field in the output.

Cloud Resource Manager

  • Updated gcloud resource-manager tags values create to support Hierarchical Tag Values for GA release.
  • Updated gcloud resource-manager tags values list to support Hierarchical Tag Values for GA release.

Cloud Run

  • Promoted --gpu and --[no-]gpu-zonal-redundancy flags to gcloud run jobs command group.

Cloud TPU

  • Mark gcloud compute tpus execution_groups commands for 2VM as removed.
  • Mark gcloud compute tpus commands for 2VM as removed.

Compute Engine

  • Promoted composite-health-checks in gcloud compute to beta.
  • Promoted health-aggregation-policies in gcloud compute to beta.
  • Removed gcloud compute instances move. See https://cloud.google.com/compute/docs/instances/moving-instance-across-zones for an alternative method.
  • Promoted gcloud compute reservations sub-blocks report-subblock-as-faulty command to beta and v1.
  • Added --no-locality-lb-policy flag in gcloud compute backend-services update.
  • Promoted Cloud Armor gcloud compute org-security-policies commands (including association and rules subcommands) to GA.

Compute Firewall Policies

  • Promoted --policy-type flag to GA in gcloud compute network-firewall-policies create.

Container

  • Added --autoscaled-rollout-policy flag to gcloud container node-pools create to specify Autoscaled Rollout policy options for Blue Green upgrades on the node pool.
  • Added --autoscaled-rollout-policy flag to gcloud container node-pools update to specify Autoscaled Rollout policy options for Blue Green upgrades on the node pool.

Developer Connect

  • Updated gcloud developer-connect insights-configs create and update to support Artifact Configs for gcr.io image URIs.

Kubernetes Engine

  • Added flag option --enable-k8s-tokens-via-dns to gcloud container clusters create,gcloud container clusters create-auto and gcloud container clusters update commands. This flag enables authentication to the cluster's control plane by using KSA tokens, via dns endpoint.
  • Added flag option --enable-k8s-certs-via-dns to gcloud container clusters create,gcloud container clusters create-auto and gcloud container clusters update commands. This flag enables authentication to the cluster's control plane by using client certificates, via DNS endpoint.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

542.0.0 (2025-10-07)

Anthos Multi-Cloud

  • Added --tags flag to gcloud container attached clusters register to attach Tags to the cluster.

Cloud DNS

  • Fix an issue where gcloud dns managed-zones create did not correctly support the --locations flag with DNSSEC configurations. The command now properly handles uppercase enum values for --dnssec-state (ON, OFF, TRANSFER) and KSK/ZSK algorithms.
  • Added support for ALIAS record set type for GA. ALIAS record sets can be created/modified using --type flag in gcloud dns record-sets command group.

Cloud Run

  • Promoted --[no-]deploy-health-check flag to GA for gcloud run deploy and gcloud run services update which disables the deploy-time health check.

Cloud SQL

  • Added PostgreSQL 18 to supported database versions.
  • Promoted --mode flag for gcloud sql instances reset-ssl-config to GA.
  • Promoted --server-ca-mode and --server-ca-pool flags for gcloud sql instances patch to GA.

Cloud Storage

  • Modified gcloud storage diagnose --test-type=DIRECT_CONNECTIVITY to include check for VPC network MTU settings.

Cloud TPU

  • Mark gcloud compute tpus commands for 2VM as deprecated and will be removed in an upcoming release.

Compute Engine

  • Promoted --resource-manager-tags flag in gcloud compute routers create to v1.
  • Promoted health-sources in gcloud compute to beta.
  • Added --full-view flag for alpha to gcloud compute reservations sub-blocks describe to allow users to see the availability of slices of TPU Hypercomputer reservations within sub-blocks.

Compute Firewall Policies

  • Fixed issue where gcloud compute firewall-policies associations delete command returns 'Invalid value' error for valid association name.

Kubernetes Engine

  • Added --unset-membership-type flag to gcloud container cluster update command to update cluster membership type to unspecified.
  • Promoted --membership-type flag in gcloud container cluster create|update commands to GA.

Oracle Database

  • Added gcloud oracle-database group in GA with the following commands:
    • gcloud oracle-database autonomous-database-backups list command
    • gcloud oracle-database autonomous-databases commands group
    • gcloud oracle-database autonomous-db-versions list command
    • gcloud oracle-database cloud-exadata-infrastructures commands group
    • gcloud oracle-database cloud-exadata-infrastructures db-servers list
    • gcloud oracle-database cloud-vm-clusters commands group
    • gcloud oracle-database cloud-vm-clusters db-system-shapes list command
    • gcloud oracle-database entitlements list command
    • gcloud oracle-database gi-versions list command
    • gcloud oracle-database db-versions list command
    • gcloud oracle-database db-systems commands group
    • gcloud oracle-database databases commands group
    • gcloud oracle-database pluggable-databases commands group
    • gcloud oracle-database database-character-sets list commands
    • gcloud oracle-database db-system-initial-storage-sizes list commands

Transfer

  • Promoted --replication flag in transfer jobs create to GA.
  • Promoted --job-type flag in transfer jobs list to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

541.0.0 (2025-09-30)

AI

  • Added --required-replica-count flag to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

BigQuery

  • Added support for reading IAM policies for slots reservations bq get-iam-policy --reservation.
  • Added support for setting IAM policies for slots reservations bq set-iam-policy --reservation.
  • Removed client-side validation for --target_dataset in bq update --transfer_config.
  • Added support for creation of reservation assignments for specific types of background jobs using new job type values BACKGROUND_CHANGE_DATA_CAPTURE, BACKGROUND_COLUMN_METADATA_INDEX, and BACKGROUND_SEARCH_INDEX_REFRESH.
  • Added support for limiting the rate of slot usage for a query job using --max_slots flag (preview).

Cloud Bigtable

  • gcloud bigtable logical-views update command can now be used with either --query flag or --deletion-protection flag, or both.

Cloud Build

  • Use mtls storage endpoint if CLOUDSDK_CONTEXT_AWARE_USE_CLIENT_CERTIFICATE is set to true.

Cloud DNS

  • Fix an issue where gcloud dns managed-zones create did not correctly support the --locations flag with DNSSEC configurations. The command now properly handles uppercase enum values for --dnssec-state (ON, OFF, TRANSFER) and KSK/ZSK algorithms.

Cloud Firestore Emulator

  • Released Cloud Firestore emulator v1.20.2
    • Minor bug fixes.

Cloud Identity-Aware Proxy

  • Updated deprecation warning for gcloud iap oauth-brands and gcloud iap oauth-clients to include a turndown date.

Cloud Managed Kafka

  • Promoted managed kafka connect surface (connect-cluster, connectors) to GA.

Cloud Run

  • Removed --mesh flag from gcloud run alpha worker-pools deploy and gcloud run alpha worker-pools update.

Cloud SQL

  • Added gcloud sql instances pre-check-major-version-upgrade, which performs prechecks for a major version upgrade of a Cloud SQL for PostgreSQL instance.

Cloud Spanner

  • The spanner-cli component is generally available(GA).
  • spanner-cli may be installed with gcloud components install spanner-cli.
  • You can use the Spanner command-line interface to open an interactive session or automate SQL executions from the shell or an input file.

Cloud TPU

  • Mark gcloud compute tpus exeuction-groups commands as deprecated.

Compute Engine

  • Promoted --phase1-encryption, --phase1-integrity, --phase1-prf, --phase1-dh, --phase2-encryption, --phase2-integrity, --phase2-pfs flags in gcloud compute vpn-tunnels create to v1.
  • The gcloud compute instances network-interfaces add command is now generally available (GA).
  • The gcloud compute instances network-interfaces delete command is now generally available (GA).
  • VLAN field support is now available in the GA track for gcloud compute instances create command.
  • VLAN field support is now available in the GA track for gcloud compute instance-templates create command.
  • Promoted --scheduling-type flag in gcloud compute reservations update to GA.
  • Added --view flag to gcloud compute networks subnets describe and gcloud compute networks subnets list to allow users to retrieve the subnetwork utilization.

Kubernetes Engine

  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.15)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.13)
    • kubectl.1.32 (1.32.9)
    • kubectl.1.33 (1.33.5)
    • kubectl.1.34 (1.34.1)
  • Updated gcloud alpha|beta container clusters create|update to support configuring auto-provisioning settings without enabling NAP.

Network Security

  • Promoted gcloud network-security authz-policies to GA.

Privileged Access Manager

  • Added gcloud beta pam grants withdraw command to withdraw a Privileged Access Manager grant.
  • Added support for specifying grant scope via file or resource name in gcloud beta pam grants create.
  • Added gcloud beta pam settings command group which helps manage Privileged Access Manager (PAM) settings.

Service Extensions

  • Promoted gcloud service-extensions authz-extensions to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

540.0.0 (2025-09-23)

Breaking Changes

  • (Cloud Deploy) gcloud deploy apply now has a more strict YAML parser. The old parser would sometimes silently ignore unknown fields in a YAML file. The new parser will reject them with an error message.

  • (Compute Engine) Add --bandwidth-allocation as a required flag for gcloud compute interconnects wire-groups create.

AlloyDB

  • Promoted all Managed Connection Pooling related flags on gcloud alloydb instances create, gcloud alloydb instances create-secondary, and gcloud alloydb instances update to the beta and GA track. The flags that are promoted specifically are:
    • --enable-connection-pooling
    • --connection-pooling-pool-mode
    • --connection-pooling-min-pool-size
    • --connection-pooling-max-pool-size
    • --connection-pooling-max-client-connections
    • --connection-pooling-server-idle-timeout
    • --connection-pooling-query-wait-timeout
    • --connection-pooling-stats-users
    • --connection-pooling-ignore-startup-parameters
    • --connection-pooling-server-lifetime
    • --connection-pooling-client-connection-idle-timeout
    • --connection-pooling-max-prepared-statements

App Engine

Artifact Registry

  • Fixed version annotations field, removed the additionalProperties.

Cloud Build

  • Updated gcloud builds submit to allow remote source in the build config if --no-source flag is specified.

Cloud Location Finder

  • Promoted gcloud cloudlocationfinder command group to GA.

Cloud NetApp

  • Add support for 'cache-parameters' in gcloud netapp volumes create and gcloud netapp volumes update commands.
  • Add support to 'restore-volume' in gcloud netapp volumes restore-backup-files command for GA.

Cloud Run

  • Promoted --max flag to GA for gcloud run deploy and gcloud run services update which sets a maximum bound for instance scaling at the service level.
    • Promoted .env support for --env-vars-file flag for gcloud run deploy from beta to GA.
  • Promoted mount-options key for --add-volume flag with type=cloud-storage to GA for gcloud run deploy, gcloud run services update, gcloud run jobs deploy, gcloud run jobs create, and gcloud run jobs update to configure flags for GCSFuse in your cloud storage volumes.

Cloud SQL

  • Added the clear-disk-encryption flag to gcloud sql backups restore operation. If restoring a backup to a project or region that is unique to the one where the source instance is located, then the backup's assigned KMS keys are no longer accessible. This setting lets you clear any existing CMEK configuration.
  • Added gcloud sql instances execute-sql to run a SQL query on a Cloud SQL instance in alpha and beta.

Cloud Storage

  • Fixed gcloud storage ls to correctly list soft-deleted objects when the URL has a trailing slash.
  • Promoted gcloud storage diagnose command to GA.

Cloud Workstations

  • Added support for reservation affinity in beta workstations config create and beta workstations config update command.

Compute Engine

  • The option to deploy a container during VM creation using the container startup agent is deprecated. Use alternative services to run containers on your VMs. Learn more at https://cloud.google.com/compute/docs/containers/migrate-containers.
  • Added --ip-collection flag to gcloud beta compute addresses create command.
  • Added --skip-guest-os-shutdown flag to gcloud compute instances in GA.
  • Promoted Percentage-based Request Mirroring in UrlMaps compute API to v1.

Eventarc

  • Added --organization-subscription and --project-subscriptions in gcloud eventarc google-api-sources.

Identity and Access Management

  • Added a new --sts-location flag to gcloud iam workload pools create-cred-config. This flag enables users to set a locational Security Token Service endpoint, e.g., setting sts-location to us-central1 will point to sts.us-central1.rep.googleapis.com, and thereby regionalize their requests to the Security Token Service API.

Network Security

  • Added command group network-security security-profiles url-filtering and promoted it to beta.
  • Added commands describe, export, import, and list to command group network-security security-profiles and promoted them to beta.
  • Added flag --url-filtering-profile to command network-security security-profile-groups create in the beta track.
  • Moved flag --threat-prevention-profile to a mutex with flag --clear-threat-prevention-profile for command network-security security-profile-groups update in the beta track.
  • Added mutex with flags --url-filtering-profile and --clear-url-filtering-profile to command network-security security-profile-groups update in the beta track.

Pubsub Emulator

  • Fix bug where dead letter queue and retry policy settings are not respected when ordering is enabled on a subscription.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

539.0.0 (2025-09-16)

AI

  • Updated gcloud ai commands to ensure correct endpoint resolution in non-default Google Cloud universes.
  • Added --gpu-partition-size flag to gcloud beta ai endpoints deploy-model for multi-instance GPU partitioning.

Apigee

  • When an Apigee organization name and its Google Cloud project ID are the same, gcloud apigee commands will now automatically use the correct regional endpoint.

App Engine

Cloud Backup DR

  • Promoted gcloud backup-dr service-config command group which includes gcloud backup-dr service-config init to GA.

Cloud Filestore

  • Added psc-endpoint-project option to --network flag of gcloud filestore instances create command.

Cloud Interconnect

  • Promoted --subzone flag of gcloud compute interconnects create to GA.

Cloud Key Management Service

  • Add support for key-encapsulation key purpose and ml-kem-768, ml-kem-1024, and kem-xwing algorithms.
  • Add support for der and xwing-raw-bytes format.
  • Fix bug in get-public-key: when non-pem format is specified, the returned public key should be in raw bytes (not in base-64).
  • Add support for decapsulate.

Cloud Resource Manager

  • Updated gcloud resource-manager tags values create to support Hierarchical Tag Values for beta release.
  • Updated gcloud resource-manager tags values list to support Hierarchical Tag Values for beta release.

Cloud SQL

  • Promoted patch --[clear-]psc-auto-connections flags to GA for PSC service automation.
  • Added --source-instance-deletion-time flag to gcloud sql instances clone, and gcloud sql instances get-latest-recovery-time to support clone from deleted instances.
  • Updated 'cloud-sql-proxy' packaged component to use 2.18.2 of the Cloud SQL Proxy.

Cloud TPU

  • Promoted the --boot-disk flag with the kms-key option to GA for gcloud compute tpus tpu-vm create and gcloud compute tpus queued-resources create.

Compute Engine

  • Promoted --provisioning-model=flex-start to GA for gcloud compute instances create and gcloud compute instance-templates create commands.
  • Promoted --request-valid-for-duration to GA for gcloud compute instances create command.
  • Added SNP_SVSM_CAPABLE to the list of guestOsFeatures.
  • Removed extension specific <extension>-version and <extension>-config flags and added generic '--config' and --version flags for gcloud compute zone-vm-extension-policies create|update commands.

Kubernetes Engine

  • Removed The Kubelet readonly port (10255) is now deprecated warning on gcloud CLI cluster creation unless either the enable-insecure-kubelet-readonly-port or autoprovisioning-enable-insecure-kubelet-readonly-port flags are set.
  • Deprecate flag option --tier in gcloud container clusters create, gcloud container clusters create-auto and gcloud container clustes update commands. Deprecated as GKE Enterprise features are now available without an Enterprise tier. See https://cloud.google.com/kubernetes-engine/docs/release-notes#September_02_2025 for the announcement of this change.
  • Added swapConfig option with enabled, encryptionConfig, bootDiskProfile, ephemeralLocalSsdProfile, and dedicatedLocalSsdProfile fields to gcloud container clusters create, gcloud container node-pools create, andgcloud container node-pools update commands to configure swap space on nodes.

Network Security

  • Updated import and export schemas for gcloud beta network-security security-profile-groups.
  • Updated import and export schemas for gcloud beta network-security security-profiles.

Pubsub Emulator

  • Fix bug that caused non-utf8 data to be incorrectly decoded before being sent to a subscription's push endpoint.

Recommender

  • Update gcloud recommender list insights recursive search feature to beta release target.
  • Update gcloud recommender list recommendations recursive search feature to beta release target.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

538.0.0 (2025-09-09)

AI

  • Updated gcloud ai commands to ensure correct endpoint resolution in non-default Google Cloud universes.

App Auth

  • Fixed an issue where gcloud auth login would potentially fail with external accounts with X.509 federation due to missing client certificates during token introspection. The gcloud CLI will now correctly include client certificates when provided by the credential.

BigQuery

  • Added support for Python user-defined functions in bq show --routine.
  • Added support for users to create dataset with bq mk --source.
  • Fixed the bug where users authenticating with Google Auth using a user-managed service account were unable to query external tables on Google Drive.
  • Added support for managing migration workflows with --migration_workflow in bq mk, bq show, bq rm, bq ls.
  • Removed reservation_max_slots from --alpha flag, and customers can now use the reservation max slots feature without specifying --alpha=reservation_max_slots.

Cloud Run

  • Promoted gcloud run deploy multi-region support to GA.
  • Promoted gcloud run multi-region-services to GA.

Cloud Storage

  • gcloud storage rsync:
    • Fixed issue where --delete-unmatched-destination-objects was deleting destination files even when skipped with (--no-clobber or --skip-unsupported or --skip-if-dest-has-newer-mtime) flags. Now such objects will be retained. The updated behaviour is also gsutil behaviour. This issue can be tracked at https://issuetracker.google.com/406939800.
    • The fix is done through a config property storage/use_gsutil_rsync_delete_unmatched_destination_objects_behavior, which now defaults to True. Set it to False to restore the previous behavior if needed.

Compute Engine

  • Promoted --show-nat-ips flag for gcloud compute service-attachments describe to GA.

Dataproc Metastore

  • Fixed issue where gcloud metastore services query-metadata would attempt to read the incorrect results path.

Kubernetes Engine

  • Updated --max-nodes-per-pool flag upper bound to be 2048.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

537.0.0 (2025-09-03)

AI

  • Added --min-scaleup-period, --idle-scaledown-period, and --initial-replica-count flags to gcloud beta ai endpoints create for scale-to-zero feature. Only configurable when --min-replica-count is set to 0.

AlloyDB

  • Added support for POSTGRES_17 as a version in alloydb clusters create for GA track.
  • Added support for POSTGRES_17 as a version in alloydb clusters migrate-cloud-sql for GA track.
  • Added support for POSTGRES_17 as a target version using alloydb clusters upgrade for GA track.

Cloud Backup DR

  • Promoted gcloud backup-dr backup-plan-revisions list and gcloud backup-dr backup-plan-revisions describe to GA.

  • Added gcloud backup-dr backup-plan-associations fetch-for-resource-type command group to GA track.

Cloud Dataproc

  • Added --identity-config-file, --add-user-mappings, and --remove-user-mappings flags to gcloud dataproc clusters update to allow updating the user to service account mapping.

Cloud Firestore

  • Added --unique flag to gcloud firestore indexes composite create command for supporting unique index creation.

Cloud Functions

  • Modified gcloud beta functions list to list upgrade state.

Cloud Infrastructure Manager

  • Added gcloud infra-manager resource-changes list and gcloud infra-manager resource-changes describe commands to list and describe resource changes within an Infrastructure Manager deployment preview.
  • Added gcloud infra-manager resource-drifts list and gcloud infra-manager resource-drifts describe commands to list and describe resource drifts within an Infrastructure Manager deployment revision.

Cloud Interconnect

  • Promoted gcloud compute interconnects application-awareness get-config to GA.
  • Promoted gcloud compute interconnects application-awareness update to GA.
  • Promoted gcloud compute interconnects application-awareness delete to GA.
  • Promoted gcloud compute interconnects application-awareness configure-bandwidth-percentage-policy to GA.
  • Promoted gcloud compute interconnects application-awareness configure-shaper-average-percentage to GA.
  • Promoted gcloud compute interconnects application-awareness configure-strict-priority-policy to GA.

Cloud Managed Kafka

  • Changed --connect_cluster flag to --connect-cluster for connector commands in alpha.

Cloud Run

  • Added --[no-]gpu-zonal-redundancy, --gpu and --gpu-type flags to gcloud beta run worker-pools command group.

Cloud SQL

  • Added --[no-]final-backup flag and --final-backup-retention-days to gcloud sql instances create, gcloud sql instances patch and gcloud sql backups restore to support setting final backup config in Cloud SQL instance setting.
  • Added --enforce-new-sql-network-architecture flag to gcloud sql instances create, gcloud sql instances patch to explicitly create or update instances in the new network architecture.
  • Promoted --[no-]enable-connection-pooling and --[clear-]connection-pool-flags flags to GA for Managed Connection Pooling GA launch.

Compute Engine

  • Added --resolve-subnet-mask flag for alpha and beta to gcloud compute networks subnets create to allow users to enable resolve subnet mask feature on the subnetwork resource during creation.
  • Added --sap-extension-version and --sap-extension-config flags to gcloud compute zone-vm-extension-policies create|update commands.

Kubernetes Engine

  • Promoted the Secret Manager CSI driver flags ( --enable-secret-manager-rotation and --secret-manager-rotation-interval) to enable rotation feature in secret manager add on to GA.
  • Updated default kubectl from 1.32.4 to 1.33.4.
  • Additional kubectl versions:
    • kubectl.1.28 (1.28.15)
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.12)
    • kubectl.1.32 (1.32.8)
    • kubectl.1.33 (1.33.4)

Secure Source Manager

  • Added --psc-allowed-projects argument to gcloud source-manager instances create command.

Vmware Engine

  • Added gcloud vmware private-clouds delete-now which permanently deletes a Google Cloud VMware Engine private cloud currently in soft-deleted state.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

536.0.1 (2025-08-27)

Kubernetes Engine

  • Fixed gcloud container ai profiles commands: benchmarks list, manifests create, and model-server-versions list.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

536.0.0 (2025-08-26)

App Engine

  • Updated Cloud CLI Python component to new runtimes for php 8.5 and python 3.14.

Artifact Registry

  • Updated gcloud artifacts files list to display file hashes as hex strings.

Cloud Backup DR

  • Promoted gcloud backup-dr backup-plans update to GA.
  • Promoted gcloud backup-dr backups restore disk to GA.
  • Promoted gcloud backup-dr backup-plan-associations update to GA.

Cloud Bigtable

  • cbt sql has a new (simpler) output table format.

Cloud Managed Kafka

  • Changed the "subject" command group to "subjects".
  • Changed --schema-registry flag to --registry for subjects command group.

Cloud NetApp

  • Added --throughput-mibps flag to gcloud netapp volumes create and gcloud netapp volume update commands.
  • Added --qos-type flag to gcloud netapp storagepools create and gcloud netapp storagepools update commands.

Cloud SQL

  • Updated 'cloud-sql-proxy' packaged component to use 2.18.1 of the Cloud SQL Proxy.

Compute Engine

  • Added --resource-manager-tags flag to gcloud compute backend-services create to allow users to add resource tags to the backend bucket during creation.
  • Added --resource-manager-tags flag to gcloud compute backend-buckets create to allow users to add resource tags to the backend bucket during creation.

GKE Hub

  • Promoted disable and describe on gcloud container fleet|hub config-management command group to GA.

Kubernetes Engine

  • Added --membership-type flag to gcloud beta container clusters create|update commands to pass fleet membership type.

  • Promoted gcloud container ai profiles to GA.

Network Services

  • Added --update-strategy flag in gcloud compute networks peerings create and gcloud compute networks peerings update commands.
  • Added a new command gcloud compute networks peerings request-delete.

Secure Source Manager

  • Promoted gcloud source-manager to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

535.0.0 (2025-08-19)

AI

  • Fixed flipped error messages for --min-replica-count and --max-replica-count when used with --shared-resources.

Artifact Registry

  • Added flag --parallelism to gcloud artifacts files download to allow multipart parallel file download.
  • Added flag --parallelism to gcloud artifacts generic download to allow multipart parallel file download.
  • Added flag --parallelism to gcloud artifacts attachments download to allow multipart parallel file download.

Backup For GKE

  • Added --selected-namespace-labels flag to gcloud beta container backup-restore backup-plans create to support namespace label scoped backup plans.
  • Added --selected-namespace-labels flag to gcloud beta container backup-restore backup-plans update to support namespace label scoped backup plans.

Cloud Bigtable

  • cbt CLI now supports sql.
  • cbt CLI now supports samplerowkeys.
  • cbt CLI now supports checkandmutate.
  • cbt CLI now supports readmodifywrite.

Cloud Dataflow

  • Fixed an issue where the environment variable FLEX_TEMPLATE_PYTHON_EXTRA_PACKAGES does not install multiple Python dependencies in Flex Templates.

Cloud Firestore

  • Promoted Cloud Firestore user-creds gcloud CLI changes to GA.
  • Promoted Cloud Firestore connection-string gcloud CLI changes to GA.

Cloud Functions

  • Launched gcloud beta functions upgrade <function> command. This command allows users to upgrade a 1st Gen Cloud Function from Cloud Functions API (cloudfunctions.googleapis.com) to a native Cloud Run function managed by Cloud Run API(run.googleapis.com).

Cloud NetApp

  • Added --qos-type flag to gcloud beta netapp storagepools create and gcloud beta netapp storagepools update commands.
  • Modified --share-name flag of gcloud netapp volumes create command to be optional.
  • Added --cache-parameters flag to gcloud alpha|beta netapp volumes create|update commands.
  • Add support for replication-schedule, hybrid-replication-type, and large-volume-constituent-count fields in --hybrid-replication-parameters flag of gcloud netapp volumes create and gcloud netapp volumes update commands.

Cloud Run

  • Deprecated the flag --allow-unencrypted-build. The customer-managed encryption keys (CMEK) compliance is now available for the build process.
  • Added logic to use high-CPU machines for builds of Cloud Run services opting in to use GPUs when using source-deploy. This feature is in Public Preview.

Cloud SQL

  • Added clear-network flag to gcloud sql backups restore to clear the network when restoring a backup to a different project or region where the original network configuration isn't available.

Compute Engine

  • Support --request-valid-for-duration in alpha for gcloud compute instances create command.
  • Deprecated --router flag of gcloud compute vpn-tunnels create with Classic VPN. Use static routing instead.
  • Deprecated --router flag of gcloud compute vpn-tunnels update with Classic VPN. Use static routing instead.
  • Added --ops-agent-version and --ops-agent-config flags to gcloud compute zone-vm-extension-policies create|update commands.

Database Migration

  • Added --type flag to gcloud database-migration objects lookup command to describe the type of the object. The default type is DATABASE.
  • Added --schema flag to gcloud database-migration objects lookup command to describe the schema of the object.
  • Added --table flag to gcloud database-migration objects lookup command to describe the table of the object.

GKE Hub

  • Added describe to gcloud beta container fleet|hub config-management command group.

Kubernetes Engine

  • Added --enable-default-compute-class flag to gcloud container clusters create|update commands to enable the default compute class.

Parametermanager

  • Added KMS key resource spec to support updating and clearing KMS key resource.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

534.0.0 (2025-08-12)

Breaking Changes

  • (Cloud Machine Learning Engine) Removed gcloud ml-engine command group. Use gcloud ai-platform instead.
  • (Compute Engine) Modified --activation-status flag of gcloud compute preview-features update command to change the allowed value from disabled to unspecified.

Appctl

  • Remove the deprecated appctl component.

Cloud Dataflow

  • Added support for distroless variants for --flex-template-base-image option in gcloud dataglow flex_template build.

Cloud Datastream

  • Added ProjectId field to SourceHierarchyDatasets message in --bigquery-destination-config flag in gcloud datastream streams create command to support BigQuery destination in a different project.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.1
    • Minor bug fix.

Cloud Managed Kafka

  • Released allow-broker-downscale-on-cluster-upscale flag to GA.

Cloud NetApp

  • Added throughput-mibps flag to gcloud beta netapp volumes create and gcloud beta netapp volumes update commands.

Compute Engine

  • Added --target-size-policy-mode flag to gcloud beta compute instance-groups managed create.
  • Added --skip-guest-os-shutdown flag to gcloud compute instances in beta.
  • Added --view flag for beta to gcloud compute networks subnets describe and gcloud compute networks subnets list to allow users to retrieve the subnetwork utilization.

GKE Hub

  • Promoted gcloud container fleet packages to GA.
  • Added --uninstall as well as --memberships and --all-memberships flags to gcloud beta container fleet config-management disable to uninstall or unmanage Config Sync on membership clusters.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

533.0.0 (2025-08-05)

AI

  • Updated gcloud ai model-garden models deploy command to allow deploy a model from custom weights.
  • Added asia-south2 option to --region flag of gcloud ai custom-jobs.

BigQuery

  • Fixed a bug where incorrect query parameters are set when --replace_data flag is specified.

Cloud Backup DR

  • Added --access-restriction flag to gcloud backup-dr backup-vaults update to update backup-vault's access restriction.
  • Added --force-update-access-restriction flag to gcloud backup-dr backup-vaults update to force update backup-vault's access restriction even if there are non-compliant data sources.
  • Added --expire-time flag to gcloud backup-dr backups update to update backup's expire time. When updating a backup, at least one of these must be specified: --expire-time or --enforced-retention-end-time.

Cloud Infrastructure Manager

  • Added --tf-version-constraint flag to gcloud infra-manager previews create to specify the Terraform version.

Cloud Managed Kafka

  • Released --mtls-ca-pools and --ssl-principal-mapping-rules flags to GA.

Cloud Run

  • Promoted --scaling flag to GA for gcloud run deploy and gcloud run services update.

Compute Engine

  • Add support for 'FUTURE' disruption schedule option in gcloud CLI for report-host-as-faulty command.
  • Support --provisioning-model for gcloud compute instance-templates create-with-container command.

Kubernetes Engine

  • Added kubelet config options evictionSoft, evictionSoftGracePeriod, evictionMinimumReclaim, and evictionMaxPodGracePeriodSeconds to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which defines the eviction behaviors.
  • Added flag option --HighScaleCheckpointing to add support for enabling the HighScaleCheckpointing CSI Driver.

Network Security

  • Promoted gcloud network-security org-address-groups --purpose field to GA.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

532.0.0 (2025-07-29)

AI

  • Updated gcloud ai model-garden models deploy command to allow deploy a model from custom weights.

BigQuery

  • Fixed a bug where the command would crash for a query in dry run if the resulting job doesn't include statistics about number of bytes processed.

Cloud Backup DR

  • Added backup-retention-inheritance flag to gcloud backup-dr backup-vaults create to specify backup retention inheritance mode during backup vault creation.
  • Added gcloud backup-dr data-source-references command group to GA track.

Cloud IAM

  • Added gcloud iam workforce-pools providers scim-tenants create which creates a new SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens create which creates a new SCIM token associated with a specific workforce identity pool provider tenant.
  • Added gcloud iam workforce-pools providers scim-tenants delete which deletes an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens delete which deletes a SCIM token associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants describe which describes an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens describe which describes a SCIM token associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants list which lists all SCIM tenants associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens list which lists all SCIM tokens associated with a specific workforce identity pool provider SCIM tenant.
  • Added gcloud iam workforce-pools providers scim-tenants undelete which restores a previously-deleted workforce identity pool provider SCIM tenant to an active state.
  • Added gcloud iam workforce-pools providers scim-tenants tokens undelete which restores a previously-deleted workforce identity pool provider SCIM token to an active state.
  • Added gcloud iam workforce-pools providers scim-tenants update which updates an existing SCIM tenant associated with a specific workforce identity pool provider.
  • Added gcloud iam workforce-pools providers scim-tenants tokens update which updates an existing SCIM token associated with a specific workforce identity pool provider.

Cloud SQL

  • Promoted --instance-type and --node-count flags of gcloud sql instances create and gcloud sql instances patch to GA.
  • Updated 'cloud-sql-proxy' packaged component to use 2.18.0 of the Cloud SQL Proxy.
    • Made --skip-failed-instance-config flag available.
  • Added --psc-network-attachment-uri and --clear-psc-network-attachment-uri flags to gcloud sql instances patch to support Private Service Connect OutBound Connectivity for Cloud SQL.

Compute Engine

  • Fixed misleading outputs when reserving and releasing external IPv6 addresses using gcloud compute addresses create and gcloud compute addresses delete.

Container

  • Updated gcloud container clusters list command to display STACK_TYPE by default.

Eventarc

  • Removing one Message Bus and Google Api Source per-project limitation.
  • Promoted gcloud eventarc message-buses, gcloud eventarc enrollments, gcloud eventarc google-api-sources and gcloud eventarc pipelines to GA.

Identity and Access Management

  • Added flags to gcloud iam workforce-pools providers create-oidc and gcloud iam workforce-pools providers create-saml commands to support creating providers with extended oauth attributes configuration (e.g. --extended-attributes-issuer-uri, --extended-attributes-client-id, --extended-attributes-client-secret-value, --extended-attributes-type, --extended-attributes-filter).
  • Added flags to gcloud iam workforce-pools providers update-oidc and gcloud iam workforce-pools providers update-saml commands to support updating providers with extended oauth attributes configuration (e.g. --extended-attributes-issuer-uri, --extended-attributes-client-id, --extended-attributes-client-secret-value, --extended-attributes-type, --extended-attributes-filter, --clear-extended-attributes-config).

Kubernetes Engine

  • Removed kubectl version 1.27.
  • Added additional kubectl versions:
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.11)
    • kubectl.1.32 (1.32.7)
    • kubectl.1.33 (1.33.3).

Secret Manager

  • Added flag --tags for secrets to attach tags to the secrets while creating.

Security Command Center

  • Added functionality to export Security Command Center findings to bigquery.

Service Extensions

  • Updated import and export schemas for gcloud beta service-extensions authz-extensions.

Workbench

  • Added --enable-managed-euc flag to gcloud beta workbench instances create.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

531.0.0 (2025-07-22)

Google Cloud CLI

  • Updated windows bundled Python for the gcloud CLI to 3.12.10.

AlloyDB

  • Add two new Managed Connection Pooling related flags for users to configure on gcloud alloydb instances create and gcloud alloydb instances update. The new flags are:
    • --connection-pooling-server-lifetime
    • --connection-pooling-client-connection-idle-timeout

BigQuery

  • Added new flag --null_markers for external tables to define the strings that represent NULL values in CSV files.
  • Added support for --source_column_match flag for bq mk --table --external_table_definition and bq mkdef commands.
  • Added support for --reservation_group and --reservation_group_name flags for reservation group feature.

Cloud Dataflow

  • Fixed an issue where the environment variable FLEX_TEMPLATE_PYTHON_EXTRA_PACKAGES does not install Python dependencies in Flex Templates.
  • Added --template-file-gcs-location flag to gcloud dataflow yaml run to support user-defined YAML templates.
  • Added --network and --subnetwork flags to gcloud dataflow yaml run to support specifying network options for Dataflow workers.

Cloud Datastream

  • Added --postgresql-server-certificate-hostname flag to gcloud datastream connection-profiles create command to validate the hostname in the server certificate for SSL connections to PostgreSQL sources.
  • Added --oracle-ca-certificate flag to gcloud datastream connection-profiles create command to create connection with SSL server only verification for Oracle sources.
  • Added --oracle-server-certificate-distinguished-name flag to gcloud datastream connection-profiles create command to validate the server certificate for SSL connections to Oracle sources.
  • Added --postgresql-server-certificate-hostname, --oracle-ca-certificate and --oracle-server-certificate-distinguished-name flags to gcloud datastream connection-profiles update command to support updating the SSL config for PostgreSQL and Oracle sources.

Cloud Interconnect

  • Promoted gcloud compute interconnects application-awareness get-config to beta.
  • Promoted gcloud compute interconnects application-awareness update to beta.
  • Promoted gcloud compute interconnects application-awareness delete to beta.
  • Promoted gcloud compute interconnects application-awareness configure-bandwidth-percentage-policy to beta.
  • Promoted gcloud compute interconnects application-awareness configure-shaper-average-percentage to beta.
  • Promoted gcloud compute interconnects application-awareness configure-strict-priority-policy to beta.

Cloud Run

  • Added --startup-probe flag to gcloud run jobs command group to allow configuring startup probe for a Cloud Run Job.

Cloud Storage

  • Promoted --ip-filter-file flag of gcloud storage buckets create and gcloud storage buckets update to GA.
  • Promoted --clear-ip-filter flag of gcloud storage buckets update to GA.

Compute Engine

  • Added gcloud compute org-security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion in alpha and beta.
  • Added and promoted flags related to tls-settings to GA:
    • --tls-settings of gcloud compute backend-service create.
    • --tls-settings of gcloud compute backend-service update.
    • --no-tls-settings of gcloud compute backend-service update.
  • Added gcloud compute reservations sub-blocks performMaintenance command in beta and v1.
  • Added new new plane 60-month to commitment alpha.
  • Added --resolve-subnet-mask flag for alpha and beta to gcloud compute networks subnets create to allow users to enable resolve subnet mask feature on the subnetwork resource during creation.
  • Added --full-view flag for v1 to gcloud compute reservations blocks describe to allow users to see the full reservation block view.

Config Connector

Container

  • Added --boot-disk-provisioned-iops flag to gcloud container clusters create command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container clusters create command to specify the provisioned throughput on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-iops flag to gcloud container node-pools create command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container node-pools create command to specify the provisioned throughput on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-iops flag to gcloud container node-pools update command to specify the provisioned iops on Hyperdisk Balanced boot disks.
  • Added --boot-disk-provisioned-throughput flag to gcloud container node-pools update command to specify the provisioned throughput on Hyperdisk Balanced boot disks.

Dataproc Diagnose

  • Added --tarball-gcs-dir flag to gcloud dataproc clusters diagnose to specify the output Cloud Storage directory for the diagnostic tarball.

Migrate to Virtual Machines

  • Remove --suppress-package-installation-failure flag.

Secure Source Manager

  • Shortened gcloud beta source-manager repos create/delete command output to show a status message. The previous output format can be displayed with --format=default.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

530.0.0 (2025-07-15)

Breaking Changes

  • (Google Cloud CLI) Deprecated Python 3.8. The minimum supported Python version is Python 3.9.

App Engine

Cloud Composer

  • Added gcloud composer environments restart-web-server to restart web server for a Cloud Composer environment.

Cloud Dataflow

  • Deprecated JAVA8 from gcloud dataflow flex-template build flex-template-base-image option. Set to JAVA8 now redirects to JAVA11 and will be removed in a future release.
  • Added gcloud dataflow jobs archive command to archive a job.

Cloud Firestore

  • Promoted --tags flag of gcloud firestore databases create and gcloud firestore databases restore command to beta and GA.

Cloud Firestore Emulator

  • Release Cloud Firestore emulator v1.20.0
    • Add support for namespace queries.
    • Add support for key queries.
    • Fix bug where entity version behavior differed from production.

Cloud Identity-Aware Proxy

  • Deprecated gcloud iap oauth-brands and gcloud iap oauth-clients commands.

Cloud Managed Kafka

  • Added --delete-mode and --delete-config flags to gcloud managed-kafka schema-registries subject update, which gives users the capability to delete a subject mode and config.

Cloud NetApp

  • Add new gcloud CLI command restore-backup-files for NetApp Volumes.

Cloud Resource Manager

  • Updated --purpose-data flag from gcloud resource-manager tags keys create command with a new value organization.

Cloud Run

  • Added --[no-]gpu-zonal-redundancy flag to gcloud beta run jobs command group to support setting zonal redundancy for Cloud Run Jobs using GPU.

Compute Engine

  • Added gcloud compute org-security-policies rules add-preconfig-waf-exclusion|remove-preconfig-waf-exclusion in alpha and beta.
  • Added and promoted flags related to tls-settings to GA:
    • --tls-settings of gcloud compute backend-service create.
    • --tls-settings of gcloud compute backend-service update.
    • --no-tls-settings of gcloud compute backend-service update.
  • Added gcloud compute reservations sub-blocks performMaintenance command in beta and v1.

Container

  • Add --enable-auto-ipam and --disable-auto-ipam flag to gcloud container clusters create/update to enable/disable automatic IP address management for the cluster.
  • Add --sole-tenant-min-node-cpus flag to gcloud container node-pools create to specify the minimum number of vCPUs that can be used by a sole-tenant node pool.

Database Migration

  • Added gcloud database-migrations conversion-workspaces mapping-rules list.
  • Added support for --database flag in Postgres connection profiles.

Distributed Cloud Edge

  • Added --enable-google-group-authentication flag to gcloud edge-cloud container clusters create command to allow for specifying whether Google Groups authentication is enabled for the cluster.

Kubernetes Engine

  • Added flag option --addons=LustreCsiDriver to add support for enabling/disabling the Lustre CSI Driver on GKE Standard clusters.
  • Added flag option --enable-lustre-csi-driver to add support for enabling the Lustre CSI Driver on GKE Autopilot clusters.
  • Added flag option --enable-legacy-lustre-port to allow the Lustre CSI Driver to initialize LNet (the virtual network layer for the Lustre kernel module) using port 6988.
  • Added kubelet config options maxParallelImagePulls to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which defines the maximum number of image pulls in parallel.
  • Added linux config options transparentHugepageEnabled and transparentHugepageDefrag to gcloud container clusters create, gcloud container node-pools create, and gcloud container node-pools update command which controls transparent hugepage behavior on the node.
  • Added - -enable-confidential-nodes flag to gcloud container clusters create-auto to allow creation of confidential nodes on GKE Autopilot clusters.

Looker

  • Added --class-type flag to gcloud looker instances create and gcloud looker instances update.
  • Added domains as an option to the --psc-service-attachment flag of gcloud looker instances update to support multiple domains to a single PSC connection.

Network Connectivity

  • Canonicalize --allocation-strategy and --first-available-ranges-lookup-size flags to gcloud network-connectivity internal-ranges create to make use of dashes instead of underscores. This puts them in-line with the documentation.

Network Security

  • Updated import and export schemas for gcloud beta network-security authz-policies.

Network Services

  • Promote --isolation-config-granularity and --isolation-config-mode to GA.

Recaptcha

  • Added integration-type=policy-based-challenge to gcloud recaptcha keys create, and associated options default-score-threshold and action-score-thresholds to gcloud recaptcha keys create and gcloud recaptcha keys update.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

529.0.0 (2025-07-01)

Breaking Changes

  • (Cloud Datastore Emulator) Removed support for running the Datastore emulator
  • (Cloud Datastore Emulator) (gcloud beta emulators datastore start) in environment with Java versions
  • (Cloud Datastore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Datastore Emulator) Datastore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Datastore Emulator) versions to continue using the Datastore emulator with
  • (Cloud Datastore Emulator) Java 11 support.
  • (Cloud Firestore Emulator) Removed support for running the Firestore emulator
  • (Cloud Firestore Emulator) (gcloud beta emulators firestore start) in environment with Java versions
  • (Cloud Firestore Emulator) prior to 21. Users can upgrade to Java 21 or above to continue using the latest
  • (Cloud Firestore Emulator) Firestore emulator. Alternatively, users can use previous gcloud CLI
  • (Cloud Firestore Emulator) versions to continue using the previous Firestore emulator with
  • (Cloud Firestore Emulator) Java 11 support.
  • (Compute Engine) Demoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to alpha.
  • (Eventarc) Removed option for --destinations to set network_attachment when http_endpoint_uri is not set.
  • (Network Services) Removed --service-directory-namespace, --service-directory-region, and --service-directory-service flags in gcloud network-services service-bindings create.

AI

  • Added support for the request-counts-per-minute autoscaling metric to gcloud ai endpoints deploy-model and gcloud ai deployment-resource-pools create.

AlloyDB

  • Fix being able to enable managed connection pooling for the first time when calling gcloud alloydb instances update without having to specify all managed connection pooling related flags.

Anthos Multi-Cloud

  • Added --system-component-tolerations flag to gcloud container attached clusters register to customize Kubernetes tolerations for system components.
  • Added --system-component-labels flag to gcloud container attached clusters register to customize Kubernetes labels for system components.

App Engine

BigQuery

  • Added new flag --external_catalog_table_options in bq mk -t and bq update -t to create and update tables with external catalog options.

Cloud Backup DR

  • Fixed backup-vault create command to return the created resource.
  • Modified backups list command to use basic view by default.

Cloud Managed Kafka

  • Fixed an error where the mode or compatibility being unset would causes the command to fail.
  • Made the output of the commands more readable.
  • Add informative text to the "subject describe" command to inform if the mode/compatibility was inherited from the schema registry.

Cloud Memorystore

  • Promote gcloud redis clusters create CMEK related commands to GA track.
  • Promote gcloud memorystore instances create CMEK related commands to GA track.

Cloud Run

  • Promoted --no-default-url flag to GA for gcloud run services command groups.
  • Promoted .env support for --env-vars-file flag for gcloud run deploy from alpha to beta.
  • Added .env support for --env-vars-file flag for gcloud run jobs deploy.

Cloud Services

  • Promoted gcloud services groups list-expanded-members to beta.

Cloud Storage

  • Updated gsutil component to 5.35.

Compute Engine

  • Promoted --append-licenses, --remove-licenses and --replace-license flags of gcloud compute disks update to beta and GA.
  • Added --enable_emergent_maintenance flag to gcloud compute reservations update.
  • Fixed issue where gcloud compute vpn-gateways list --regions {region} call aggregated list instead of regional list.
  • Fixed issue where gcloud compute vpn-tunnels list --regions {region} call aggregated list instead of regional list.
  • Promoted --resource-manager-tags flag for gcloud compute networks create to GA.
  • Promoted --resource-manager-tags flag for gcloud compute networks subnets create to GA.
  • Promoted --resource-manager-tags flag for gcloudc compute routers create to beta.
  • Fixed an issue where exceptions in gcloud compute instances bulk create with --format flag were not logged.

Eventarc

  • Removed requirement for --destinations to set network_attachment when http_endpoint_uri is set.

Kubernetes Engine

  • Additional kubectl versions:
    • kubectl.1.27 (1.27.16)
    • kubectl.1.28 (1.28.15
    • kubectl.1.29 (1.29.14)
    • kubectl.1.30 (1.30.14)
    • kubectl.1.31 (1.31.10)
    • kubectl.1.32 (1.32.6)
    • kubectl.1.33 (1.33.2)
  • Added --additional-ip-ranges and --remove-additional-ip-ranges flags to gcloud container clusters update to allow multiple subnets in a cluster.

Looker

  • Added core-trial-standard, core-trial-enterprise, and core-trial-embed options to --edition flag of gcloud looker instances create.

Network Services

  • Added --update-strategy flag in gcloud compute networks peerings create and gcloud compute networks peerings update commands.
  • Added a new command gcloud compute networks peerings request-delete.
  • Support "export" and "import" surfaces for Service Binding resource.
  • Support "update" surface for Service Binding resource.

Policy Simulator

  • Promoted gcloud policy-intelligence simulate to GA.

Security Command Center

  • Added --organization and --location argument flags to gcloud scc posture-deployments list to list scc's posture deployments for organization level.
  • Added vm-manager, ec2-vulnerability-assessment, gce-vulnerability-assessment, azure-vulnerability-assessment, and notebook-security-scanner services to the SUPPORTED_SERVICES list.
  • Added --organization and --location argument flags to gcloud scc posture-templates list to list Cloud Security Command Center posture templates for an organization.

Service Extensions

  • Promoted the following Service Extensions Plugins command groups to GA:
    • gcloud service-extensions wasm-plugins
    • gcloud service-extensions wasm-plugin-versions

Workbench

  • Added gcloud beta workbench instances command group for pre-GA features.

Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

528.0.0 (2025-06-24)

AI

  • Modified --region flag of gcloud ai endpoints to include new online prediction regions.
  • Modified --region flag of gcloud ai models to include new online prediction regions.

AlloyDB

  • Added support for z3 machine-types.
  • Added support for upgrading AlloyDB clusters to PostgreSQL 17 using gcloud alloydb clusters upgrade in the alpha and beta tracks.

Cloud Managed Kafka

  • Changed --project flag to be optional in the following commands:
    • gcloud managed-kafka schema-registries describe.
    • gcloud managed-kafka schema-registries update.
    • gcloud managed-kafka schema-registries subject describe.
    • gcloud managed-kafka schema-registries subject update.
  • Changed --schema_registry to --schema-registry for subject commands.

Cloud NetApp

  • Add new gcloud CLI command establish-peering for Cache Volumes.
  • Restricted external replication related parameters to the alpha and beta release tracks as feature is in private preview.

Cloud Run

  • Promoted --max flag for gcloud run deploy and gcloud run {services,multi-region-services} update from alpha to beta.
  • Promoted gcloud run worker-pools and gcloud run worker-pools revisions from alpha to beta.

Cloud Spanner

  • spanner-cli binary published as a new Cloud SDK component.
  • spanner-cli may be installed with gcloud components install spanner-cli.
  • spanner-cli starts an interactive shell for spanner.

Compute Engine

  • Promoted --append-licenses, --remove-licenses and --replace-license flags of gcloud compute disks update to beta and GA.
  • Added --enable_emergent_maintenance flag to