-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathRELEASE_NOTES
21662 lines (14442 loc) · 823 KB
/
RELEASE_NOTES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Google Cloud CLI - Release Notes
Copyright 2014-2022 Google Inc. All rights reserved.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 395.0.0 (2022-07-26)
### AI
* Modified `gcloud ai models upload` to support model version aliases. Use `--version-aliases` flag to set version aliases so that a model version can be referenced via alias (i.e. projects/{project}/locations/{location}/models/{model_id}@{version_alias} instead of auto-generated version id (i.e. projects/{project}/locations/{location}/models/{model_id}@{version_id}). The format is [a-z][a-zA-Z0-9-]{0,126}[a-z0-9] to distinguish from version_id. The aliases set in the flag will replace the aliases set in the model.
### App Engine
* Updated the Java SDK to version 1.9.98.
Please visit the following release notes for details:
<https://cloud.google.com/appengine/docs/java/release-notes>.
### Artifact Registry
* Added `gcloud artifacts packages describe` command.
### Cloud Deploy
* Added new `--from-k8s-manifest` to `releases create` command.
When used, a Skaffold file will be generated.
### Cloud Domains
* Implemented the following commands for `gcloud domains registrations` in alpha and beta.
* `import`
* `list-importable-domains`
### Cloud Functions
* Updated `gcloud functions list` to return 2nd gen functions in addition to
1st gen functions.
* Fixed crash in `gcloud beta functions deploy --gen2` failures causing the
error message "This stage does not belong to this progress tracker".
* Promoted `--gen2` flag of `gcloud functions add-iam-policy-binding` to GA.
* Promoted `--gen2` flag of `gcloud functions call` to GA.
* Promoted `--gen2` flag of `gcloud functions delete` to GA.
* Promoted `--gen2` flag of `gcloud functions deploy` to GA.
* Promoted `--gen2` flag of `gcloud functions describe` to GA.
* Promoted `--gen2` flag of `gcloud functions get-iam-policy` to GA.
* Promoted `--gen2` flag of `gcloud functions remove-iam-policy-binding` to
GA.
* Promoted `--gen2` flag of `gcloud functions set-iam-policy` to GA.
* Promoted `--gen2` flag of `gcloud functions event-types list` to GA.
* Promoted `--gen2` flag of `gcloud functions logs read` to GA.
* Promoted `--gen2` flag of `gcloud functions regions list` to GA.
* Promoted `gcloud functions add-invoker-policy-binding` to GA.
* Promoted `gcloud functions remove-invoker-policy-binding` to GA.
### Cloud Healthcare
* Added `--schema-type` value `analytics_v2` to `gcloud healthcare fhir-stores export bq`.
### Cloud Identity-Aware Proxy
* Renamed flag `--group-name` to `--dest-group` for`gcloud iap tcp dest-groups` IAM commands.
### Cloud Pub/Sub
* Fixed issue where `gcloud pubsub subscriptions create` and
`gcloud pubsub subscriptions update` will crash when specifying
`--min-retry-delay=0` and/or `--max-retry-delay=0`.
* Fixed issue where `gcloud pubsub subscriptions create` will crash when
specifying `--retention_duration=0`.
### Cloud Run
* Added `--description` flag in `gcloud run deploy`, and description field in `gcloud run services describe [SERVICE]`.
* Description is an optional, human-readable string of up to 512 characters.
* Using the flag is functionally equivalent to adding service annotation "run.googleapis.com/description".
### Compute Engine
* Added `--update-user-licenses` and `--clear-user-licenses` flags of `gcloud compute images update` to alpha and beta.
* Made global scope the default for `gcloud compute security-policies`.
### Config Controller
* Added `--man-blocks` flag to `gcloud anthos config controller create` to allow
specifying multiple master authorized network CIDR blocks for a CC instance.
* Deprecated `--man-block` flag of `gcloud anthos config controller create`.
Use `--man-blocks` to set master authorized network CIDR block.
* Modified `gcloud anthos config controller list` to print out only the
instance name instead of the fully specified name.
* Added `--full-name` flag to `gcloud anthos config controller list` to allow
users printing out the fully specified name in the NAME column when needed.
### GKE Hub
* Promote `gcloud container hub memberships generate-gateway-rbac` to GA.
### Kubernetes Engine
* Add `cgroupMode` node system config option to allow switching nodes to cgroupv1 or cgroupv2.
* Updates default kubectl from 1.22.9 to 1.22.12
* Additional kubectl versions:
* kubectl.1.19 (1.19.16)
* kubectl.1.20 (1.20.15)
* kubectl.1.21 (1.21.14)
* kubectl.1.22 (1.22.12)
* kubectl.1.23 (1.23.9)
* kubectl.1.24 (1.24.3)
### Pubsub Emulator
* Added support for creating BigQuery subscriptions.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 394.0.0 (2022-07-19)
### AI
* Modified `gcloud ai models describe` to support model versioning.
* Added europe-west9 option to `--region` flag of `gcloud ai custom-jobs` and `gcloud ai hp-tuning-jobs`.
* Provide the model version ID or version alias to retrieve a specific version of the model.
* If no model version ID or alias is specified, the "default" model version will be used. The "default" version alias is created for the first version of the model, and can be moved to other versions later on. There will be exactly one default version.
* Added `gcloud ai models delete-version` which deletes an existing Vertex AI model version.
### Anthos Multi-Cloud
* Added `--ssh-public-key` flag to `gcloud container azure node-pools update`
to update the SSH public key for the Azure node pool nodes.
### Artifact Registry
* Fixed a bug where the plus sign ("+") was not escaped properly, making it
impossible to delete artifacts with a plus sign in their name.
### Bare Metal Solution
* Started using v2.projects.locations.operations instead of v1.operations for
the following commands:
* `gcloud bms instances start`
* `gcloud bms instances reset`
* `gcloud bms instances disable-serial-console`
* `gcloud bms instances enable-serial-console`
* `gcloud bms instances update`
* `gcloud bms networks update`
* `gcloud bms nfs-shares update`
* `gcloud bms volumes update`
* `gcloud bms volumes restore`
* `gcloud bms operations describe`
* `gcloud bms operations wait`
* Promoted `--os-image` flag of `gcloud bms instances update` to GA.
* Promoted `--[no-]enable-hyperthreading` flag of `gcloud bms instances update`
to GA.
* Promoted `--add-ip-range-reservation` flag of `gcloud bms networks update`
to GA.
* Promoted `--clear-ip-range-reservations` flag of `gcloud bms networks update`
to GA.
* Promoted `--remove-ip-range-reservation` flag of `gcloud bms networks update`
to GA.
* Promoted `gcloud bms networks list-ip-reservations` to GA.
### Batch
* Promoted `gcloud batch` to alpha and beta which enables the CLI to use Batch APIs.
### CLOUD SDK
* Replaced the default login flow when a browser is not detected from
`--no-browser` to `--no-launch-browser`.
### Cloud Deploy
* Changed the default bucket name upload path on release create to use the pipeline UUID.
* Added mutex flags `--enable-initial-rollout` and `--disable-initial-rollout`.
### Cloud Key Management Service
* Modified `gcloud kms import-jobs create` to accept new SHA-2 import methods
`rsa-oaep-3072-sha256`, `rsa-oaep-3072-sha256-aes-256`,
`rsa-oaep-4096-sha256`, and `rsa-oaep-4096-sha256-aes-256` in beta.
### Cloud SQL
* Added support for incremental addition of user password policies.
### Cloud Storage
* Updated gsutil component to 5.11.
### Compute Engine
* Added `--layer7-ddos-defense-auto-deploy-load-threshold`, `--layer7-ddos-defense-auto-deploy-confidence-threshold`, `--layer7-ddos-defense-auto-deploy-impacted-baseline-threshold`, and `--layer7-ddos-defense-auto-deploy-expiration-sec` to `gcloud compute security-policies update` to `gcloud beta compute security-policies update`.
* Promoted flags `--enable-strong-affinity` of `gcloud compute backend-services create` and `gcloud compute backend-services update` to GA.
### Identity and Access Management
* Removed `etag` flag from `gcloud beta iam policies update` command. The command will always use the `etag` in the policy file.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 393.0.0 (2022-07-12)
### Breaking Changes
* **(AlloyDB)** Updated `gcloud beta alloydb instances create` and `gcloud beta alloydb instances update` to remove the unused `--zone` flag.
* **(Cloud Datastore Emulator)** Removed support for running the Datastore emulator (`gcloud beta emulators datastore start`) in environment with Java versions prior to 11. Users can upgrade to Java 11 or above to continue using the latest Datastore emulator. Alternatively, users can use gcloud command-line tool with version before 392.0.0 to continue using the previous Datastore emulator with Java 8 support.
* **(Cloud Firestore Emulator)** Removed support for running the Firestore emulator (`gcloud beta emulators firestore start`) in environment with Java versions prior to 11. Users can upgrade to Java 11 or above to continue using the latest Firestore emulator. Alternatively, users can use gcloud command-line tool with version before 392.0.0 to continue using the previous Firestore emulator with Java 8 support.
### AI
* Added `gcloud ai models delete-version` which delete an existing Vertex AI model version.
* Modified `gcloud ai models upload` to support model versioning. Use `--parent-model` flag to specify the parent model of the model version to be uploaded. When this flag is specified, a new version of the parent model will be uploaded. Use `--model-id` flag to specify the model ID for the uploaded model.
* Fixed an issue for `gcloud ai custom-jobs create` that the value of the `--args` and `--command` flags are not passed when the `--worker-pool-spec` flag is left unspecified.
### AlloyDB
* Updated `gcloud beta alloydb instances create` and `gcloud beta alloydb instances update` to allow `--cpu-count` of 2.
### Artifact Registry
* Fixed issue where `gcloud artifacts packages delete` requires the package id unescaped.
### Cloud Dataproc
* Added `bootDiskKmsKey` key in `--pools` flag to `gcloud dataproc clusters
gke create` to allow creating Dataproc on GKE cluster with CMEK protected
node pool.
### Cloud Datastream
* Added `--bigquery-destination-config` flag to `gcloud datastream streams <create/update>`.
* Added `bigquery` type to `--type` flag of `datastream connection-profiles <create/update>`.
### Cloud Deploy
* Added optional flags `--labels` and `--annotations` for users to add labels or annotations to apply to `gcloud deploy targets rollback` command.
### Cloud Firestore Emulator
* Release Cloud Firestore emulator v1.14.4
* Fix: Condition Normalization now correctly handles cartesian products and
flattening in certain edge cases.
### Cloud Functions
* Promoted `--docker-registry` flag of `gcloud functions deploy` to GA.
* Move PHP 8.1 for Cloud Functions to GA.
* Added `gcloud functions runtimes list` which displays the supported runtimes
for both 1st & 2nd generation functions.
### Cloud Key Management Service
* Promoted `--wrapped-key-file` flag of `gcloud kms keys versions import` to GA.
* Deprecated `--rsa-aes-wrapped-key-file` flag of `gcloud kms keys versions import`.
Use `--wrapped-key-file` instead.
### Cloud Memorystore
* Promoted `--persistence-mode`, `--rdb-snapshot-period` and
`--rdb-snapshot-start-time` flags of `gcloud redis instances create` to GA.
* Promoted `--persistence-mode`, `--rdb-snapshot-period` and
`--rdb-snapshot-start-time` flags of `gcloud redis instances update` to GA.
### Cloud SQL
* Added flag `--password-policy-enable-password-verification` to `gcloud sql users create` and `gcloud sql users set-password-policy` for MySQL password validation.
* Added flags `--discard-dual-password` and `--retain-password` to `gcloud sql users set-password` to allow control over MySQL's dual password.
### Cloud Speech API
* Added `latest_short` and `latest_long` options for
`gcloud ml speech <recognize | recognize-long-running> --model` flag.
### Cloud TPU
* Updated `tpus tpu-vm ssh` to return an error when users attempt
to ssh into a TPU VM during a maintenance event.
### Compute Engine
* Promoted `--target-distribution-shape` flag of `gcloud compute instances bulk create` to GA.
* Promoted `--key-revocation-action-type` flag to GA for `gcloud compute instance-templates create`.
* Promoted explicit scope requirement for `gcloud compute security-policies` to beta.
* Promoted `--network-ddos-protection` flag of `gcloud compute security-policies create` to beta.
* Promoted `gcloud compute network-edge-security-services` to beta.
* Promoted `--key-reservation-action-type` flag to GA for `gcloud compute instances create`.
* Promoted `keyRevocationActionType` property of `gcloud compute instances update-from-file` to GA.
### Compute Firewall Policies
* Promoted `--src-region-codes` and `--dest-region-codes` flags to beta
in `gcloud compute firewall-policies rules create`
, `gcloud compute firewall-policies rules update`
, `gcloud compute network-firewall-policies rules create`
and `gcloud compute network-firewall-policies rules update` commands.
* Promoted `--src-threat-intelligence` and `--dest-threat-intelligence` flags to
beta in `gcloud compute firewall-policies rules create`
, `gcloud compute firewall-policies rules update`
, `gcloud compute network-firewall-policies rules create`
and `gcloud compute network-firewall-policies rules update` commands.
### Config Connector
* Updated Google Cloud Config Connector to version 1.89.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Config Controller
* Added `--man-blocks` flag to `gcloud anthos config controller create` to allow
specifying multiple master authorized network CIDR blocks for a CC instance.
* Deprecated `--man-block` flag of `gcloud anthos config controller create`.
Use `--man-blocks` to set master authorized network CIDR block.
### Kubernetes Engine
* Added `--binauthz-evaluation-mode` flag to
`gcloud container clusters create` command.
* Added `--binauthz-evaluation-mode` flag to
`gcloud container clusters create-auto` command.
* Added `--binauthz-evaluation-mode` flag to
`gcloud container clusters update` command.
* Added `--total-max-nodes` and `--total-min-nodes` to `gcloud container cluster/node-pools create/update` that allow users to set total size limits for autoscaled nodepools. The limits are available in clusters with version 1.24+.
* Added `--location-policy` to `gcloud container cluster/node-pools create/update` that allow users to set location policy for autoscaled nodepools. The location policy is available in clusters with version 1.24.1-gke.800+.
### Transcoder
* added support for `--labels` flag when creating a new job/job template.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 392.0.0 (2022-06-28)
### Anthos Multi-Cloud
* Added `--iam-instance-profile` flag to `gcloud container aws clusters
update` and `gcloud container aws node-pools update` to update the name or
ARN of the IAM instance profile associated with control plane or node pool.
* Added `--ssh-public-key` flag to `gcloud container azure clusters update` to
update the SSH public key for the Azure control plane.
* Added `--logging` flag to `gcloud container aws clusters update` and `gcloud container azure clusters update` to update the logging config.
### App Engine
* Updated the Java SDK to version 1.9.97.
Please visit the following release notes for details:
<https://cloud.google.com/appengine/docs/java/release-notes>.
### CLOUD SDK
* Updated login flow initiated by `gcloud auth login --no-launch-browser` and
`gcloud auth application-default login --no-launch-browser` to address a
security issue.
### Certificate Authority Service
* Added `--unconstrained-chain-length` flag to `gcloud privateca subordinates create`
to allow creation of a subordinate CA with unconstrained chain length.
* Added `--unconstrained-chain-length` flag to `gcloud privateca roots create`
to allow creation of a root CA with unconstrained chain length.
* Added `--unconstrained-chain-length` flag to `gcloud privateca certificates create`
to allow creation of a CA with unconstrained chain length.
### Certificate Manager
* Promoted `gcloud certificate-manager` to GA.
* Allowed using project number in `gcloud certificate-manager` commands.
### Cloud Bigtable
* Promoted `gcloud bigtable instances tables undelete` to beta and GA.
* Added `--autoscaling-storage-target` flags to
`gcloud bigtable clusters create` for alpha, beta and GA to let users create
autoscaling clusters with configurable storage target.
* Added key `autoscaling-storage-target` to `--cluster-config` flag of
`gcloud bigtable instances create` for alpha, beta and GA to let users create
autoscaling clusters with configurable storage target.
* Added `--autoscaling-storage-target` flag to
`gcloud bigtable clusters update` for alpha, beta and GA to let users configure
autoscaling storage target when updating clusters.
### Cloud Deploy
* Added new command `gcloud deploy releases abandon` to prevent new rollouts on a Cloud Deploy release.
* Added `suspended` field to the Delivery Pipeline resource. If this field is set, activity on a pipeline is prevented. The field can be set or unset in the Delivery Pipeline definition, and then applied using `gcloud deploy apply`.
### Cloud TPU
* Fixed an issue with connection to TPU VMs when the
'compute.disableGuestAttributesAccess' Organization Policy Constraint is
enforced.
### Compute Engine
* Added `--list-managed-instances-results` flag to `gcloud beta compute instance-groups managed create` and `gcloud beta compute instance-groups managed update`.
* Promoted `--certificate-map` of 'compute target-https-proxies insert|update` to GA.
* Promoted `--certificate-map` of 'compute target-ssl-proxies insert|update` to GA.
### Dataproc Metastore
* Promoted `--network-config-from-file` and `--consumer-subnetworks` flag to
`gcloud beta metastore services create` to specify the subnetworks from which
the Dataproc Metastore service can be accessed to GA.
### Eventarc
* Added `gcloud eventarc google-channels` command group.
* Added `gcloud eventarc channels update` command to configure crypto keys on
a channel.
* Added `--crypto-key` flag to `gcloud eventarc channels create` to configure
crypto keys on a new channel.
### Kubernetes Engine
* Promoted `--enable-cost-allocation` flag of `gcloud container clusters create` to beta.
* Promoted `--enable-cost-allocation` flag of `gcloud container clusters update` to beta.
* Renamed `--enable-cost-management` flag of `gcloud container clusters create` to `--enable-cost-allocation`.
* Renamed `--enable-cost-management` flag of `gcloud container clusters update` to `--enable-cost-allocation`.
* Added `--stack-type` and `--ipv6-access-type` arguments to
`gcloud container clusters create` command to support dual stack GKE clusters.
### Terraform
* Added support for the following resources in CAI-based policies:
* `google_access_context_manager_access_policy`
* TF -> CAI resource conversion compiled against
[`google` provider version 4.24.0](https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.24.0).
* Fixed the ancestry used for resources that do not exist within a project.
Users may need `folders.get` access to folders that have resources included
in the plan.
* Simplified converter error messages and added resource address.
* Added support for `ancestries`/`excludedAncestries` match parameters for
CAI-based constraints.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 391.0.0 (2022-06-22)
### Breaking Changes
* **(Anthos Multi-Cloud)** Removed `--instance-type` flag of `gcloud container aws node-pools
update` to disable updating the EC2 instance type of node pool nodes.
### Assured Workloads
* Added ITAR as compliance regime options for `gcloud assured workloads create` command.
### Cloud Dataflow
* Added a `--force` flag to `gcloud dataflow jobs cancel` which forcibly cancels (leaking VMs) Dataflow jobs that are stuck on normal cancellation.
### Cloud Filestore
* Enable Filestore High-Scale tier for GA.
### Cloud Identity-Aware Proxy
* Promoted flags for host based connetion for command `gcloud compute start-iap-tunnel` to beta.
* Promoted `gcloud iap oauth-brands` surface to GA.
* Promoted `gcloud iap oauth-clients` surface to GA.
### Cloud SQL
* Promoted SQL Server Audit to GA.
### Compute Engine
* Updated `gcloud compute networks subnets list-usable` list format to include PSC and IPv6 fields.
### Dataproc Metastore
* Added support for managing Dataproc Metastore Federation. The following commands have been added to the alpha, beta and GA release tracks:
* `metastore federations create`
* `metastore federations delete`
* `metastore federations describe`
* `metastore federations get`
* `metastore federations list`
* `metastore federations update`
* Added support for managing IAM policy for Dataproc Metastore Federation. The following commands have been added to the GA release track:
* `metastore federations get-iam-policy`
* `metastore federations set-iam-policy`
* `metastore federations add-iam-policy-binding`
* `metastore federations remove-iam-policy-binding`
### Identity and Access Management
* Added `--executable-command` flag to `gcloud iam workload-identity-pools create-cred-config` command to allow executable sourced credentials.
### Managed Active Directory
* Adding support for `gcloud beta active-directory domains extend-schema` for
initiating schema extension on domain.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 390.0.0 (2022-06-14)
### Access Approval
* Added `gcloud access-approval requests invalidate` to invalidate an existing
approval.
### BigQuery
* Add support for `partitioning_type` with `--time_partitioning_type` flag in Scheduled Queries when a schedule is specified by `--schedule` in `bq query`.
* Added support for showing table clone info in `bq show`.
* Added support for External Support Credentials.
* Added `--max_time_travel_hours` flag to `bq mk`.
* Added `--autodetect_schema` flag to `bq update`.
* Added flag `--preserve_ascii_control_characters` to `bq load` to allow ASCII Control chars.
* Updated the comment on `--restore` flag in `bq cp` to reflect that it's deprecated.
* Added support for dataset tags.
* Minor bug fixes and dependency updates.
* Add `--federated_app_client_id` and `--federated_azure` flags to `mk` command.
* Add `--federated_app_client_id` flag to `update` command.
* Add support for `LOAD DATA` query.
### Cloud Dataproc
* Added `--metric-sources, --metric-overrides and --metric-overrides-file`
flags to `gcloud beta dataproc clusters create` to allow clusters to be
created with a metric sources specified, override specific set of metrics
using a list or a file as an input.
* Added `--metric-sources, --metric-overrides and --metric-overrides-file`
flag to `gcloud beta dataproc workflow-templates set-managed-cluster`
to allow managed clusters created with a metric sources specified, override
specific set of metrics using a list or a file as an input.
* Modified `gcloud dataproc clusters export` to remove un-importable fields
on Dataproc on GKE clusters.
### Cloud Firestore
* Added `gcloud beta firestore fields ttls` command group.
### Cloud Pub/Sub
* Fixed issue where `gcloud --format=json beta pubsub subscriptions pull
--auto-ack` and `gcloud --format=json alpha pubsub subscriptions pull
--auto-ack` output was backwards incompatible. This issue can be tracked at
<https://issuetracker.google.com/issues/222551623>.
### Cloud Run
* Added `--description` flag in `gcloud beta run deploy`, and description field in `gcloud beta run services describe [SERVICE]`.
* Description is an optional, human-readable string of up to 512 characters.
* Using the flag is functionally equivalent to adding service annotation "run.googleapis.com/description".
### Compute Engine
* Promoted `network-firewall-policies` command group to GA.
* Promoted `gcloud compute instances create --visible_core_count` to beta.
### Config Connector
* Updated Google Cloud Config Connector to version 1.88.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Kubernetes Engine
* Added `--enable-confidential-nodes` to `gcloud container cluster create` to enable cluster creation with nodes on Confidential VM. Added `--enable-confidential-nodes` flag to `gcloud container node-pools create/update` to allow creating node-pools with confidential nodes, and updating existing node pools to confidential nodes.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 389.0.0 (2022-06-07)
### Anthos Multi-Cloud
* Added `--instance-type` flag to `gcloud container aws node-pools update` to
update the EC2 instance type of node pool nodes.
### Artifact Registry
* Added new command `gcloud artifacts files list` to list files in a specific repository.
### Cloud Composer
* Added `--enable-master-authorized-networks` and `--master-authorized-networks` flags to `gcloud composer environments create` command.
* Added `--enable-master-authorized-networks` and `--disable-master-authorized-networks` and `--master-authorized-networks` to `gcloud composer environments update` command.
* Added `--enable-ip-masq-agent` flag to `gcloud composer environments create` command to enable IP address masquerading in the GKE cluster.
### Cloud DNS
* Add setIamPolicy and getIamPolicy commands in beta.
### Cloud Filestore
* Add support for Filestore's multi-share instances to `gcloud beta filestore instances list`.
CAPACITY_GB will show the instance's capacity for multi-share instances instead of an empty string.
FILE_SHARE_NAME will show "N/A" for multi-share instances instead of an empty string.
### Cloud Identity-Aware Proxy
* Promoted `gcloud iap tcp dest-groups` command group to beta.
### Cloud Run
* Promoted `--session-affinity` of `gcloud run` to beta.
### Cloud SQL
* Add command `gcloud sql generate-login-token` to generate down-scoped OAuth2 access tokens for IAM database authentication.
### Compute Engine
* Modified `--ssl-certificates` flag to be optional in `gcloud compute target-https-proxies create`.
* Updated the documentation for `--mtu` flag of `compute networks create|update`.
* Updated the validation for `--enable-logging` and `--logging-sample-rate` flags of `beta compute backend-services create|update`.
* Updated the documentation for `--logging-sample-rate` flag of `compute backend-services create|update`.
### Config Connector
* Updated Google Cloud Config Connector to version 1.87.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Database Migration
* Renamed `--sync` flag to `--no-async` flag to `gcloud database-migrate migration-jobs create` command to wait for the migration job creation operation to be completed before proceeding.
* Added `--no-async` flag to `gcloud database-migrate migration-jobs update` command to wait for the migration job updation operation to be completed before proceeding.
* Updated `gcloud database-migration connection-profiles create cloudsql` to support the flag root-password.
* Added `--no-async` flag to `gcloud database-migrate migration-jobs create` command to wait for the connection profile creation operation to be completed before proceeding.
### Kpt
* Updated kpt from v1.0.0-beta.13 to v1.0.0-beta.15. See <https://github.com/GoogleContainerTools/kpt/releases/tag/v1.0.0-beta.15> for more details.
* The kpt fn commands now includes Kptfile and functionConfig in the function input by default. Previously this behavior was controlled using `--enable-meta-resources` command-line flag. -`-enable-meta-resources` flag is also deprecated. If this disrupts any of your config workflow, you can use exclude functionality to exclude resources from function inputs. This functionality was added in this release to minimize the disruption.
* The kpt website is overhauled to reflect the new scope of kpt project. New components package orchestrator, Configuration as Data UI and Config Sync are added to the project.
* Added package orchestrator (a.k.a. `porch`) CLI interface under alpha subgroup (`kpt alpha rpkg`, `kpt alpha repo`, `kpt alpha sync`).
* Added command-line flag `--save` to `kpt fn eval` to save evaluated function to package's Kptfile.
* Added capability to select resources using `labelSelector` and `annotationSelector` in `kpt fn eval` and `kpt fn render`.
* Added capability to exclude resources in `kpt fn eval` and `kpt fn render`.
* Added support for variant constructor pattern in `kpt pkg init` and `kpt pkg get`.
* Added capability to execute functions in a kubernetes cluster using porch.
### Kubernetes Engine
* Added `podPidLimits` kubelet config option which controls per pod pid limits to `gcloud container clusters create`, `gcloud container node-pools create`, and `gcloud container node-pools update`.
* Updates default kubectl from 1.21 to 1.22.
* Additional kubectl versions:
* kubectl.1.19 (1.19.16)
* kubectl.1.20 (1.20.15)
* kubectl.1.21 (1.21.13)
* kubectl.1.22 (1.22.9)
* kubectl.1.23 (1.23.6)
* kubectl.1.24 (1.24.0)
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 388.0.0 (2022-06-01)
### Google Cloud CLI
* Added Cloud SQL OAuth scope to Application Default Credential.
### AI
* Fixed issue where unspecified `--network` and `--service-account` flags of `gcloud ai hp-tuning-jobs create` mistakenly overrode the corresponding values set via `--config` flag.
### Apigee
* Promoted `gcloud apigee operations` to beta.
### Bare Metal Solution
* Updated `gcloud bms instances list` to also return the IP addresses of
instances that do not use the default network template.
### Cloud Bigtable
* Removed `NAME` column output from `bigtable hot-tablets list`.
### Cloud Datastore Emulator
* Release Cloud Datastore Emulator version 2.2.1
* Fixes `--firestore_in_datastore_mode` flag parsing.
### Cloud Deploy
* Fixed issue where `gcloud deploy targets rollback` redeployed to the current release instead of
rolling back to the previous release. This occurred in cases where the name of the release
to rollback to was not provided.
### Cloud Functions
* Added `--gen2` support for `--set-secrets`, `--update-secrets`,
`--remove-secrets` and `--clear-secrets` flags of `gcloud functions deploy`
to beta, alpha.
### Cloud On Demand Scanning
* Fixed issue where scanning for Maven vulnerabilities would occasionally
fail.
### Compute Engine
* Promoted `network-firewall-policies` command group to GA.
### Config Connector
* Updated Google Cloud Config Connector to version 1.86.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Database Migration
* Added `--sync-` flag to `gcloud database-migrate migration-jobs create` command to wait for the migration job creation operation to be completed before proceeding.
### Kubernetes Engine
* Added `podPidLimits` kubelet config option which controls per pod pid limits to `gcloud container clusters create`, `gcloud container node-pools create`, and `gcloud container node-pools update`.
* Updated the following GA commands to support IAM Conditions:
* `gcloud beta attestors get-iam-policy` outputs conditions associated with each binding.
* `gcloud beta attestors set-iam-policy` accepts policies with conditional bindings.
* `gcloud beta attestors <add|remove>-iam-policy-binding` accepts conditional bindings via new `--condition` and `--condition-from-file` flags.
* `gcloud beta policy get-iam-policy` outputs conditions associated with each binding.
* `gcloud beta policy set-iam-policy` accepts policies with conditional bindings.
* `gcloud beta policy <add|remove>-iam-policy-binding` accepts conditional bindings via new `--condition` and `--condition-from-file` flags.
### Terraform
* Added support for the following resources in CAI-based policies:
* `google_access_context_manager_access_policy_iam_binding`
* `google_access_context_manager_access_policy_iam_member`
* `google_access_context_manager_access_policy_iam_policy`
* `google_endpoints_service_consumers_iam_binding`
* `google_endpoints_service_consumers_iam_member`
* `google_endpoints_service_consumers_iam_policy`
* `google_privateca_certificate_template_iam_binding`
* `google_privateca_certificate_template_iam_member`
* `google_privateca_certificate_template_iam_policy`
* TF -> CAI resource conversion compiled against
[`google` provider version 4.20.0](https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.20.0).
* Added output of logs based on configuration of log level.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 387.0.0 (2022-05-24)
### Anthos Multi-Cloud
* Fixed issue where `gcloud container aws clusters get-credentials
--private-endpoint` and `gcloud container azure clusters get-credentials
--private-endpoint` commands do not work for clusters in a project different
from the default project.
### Cloud Composer
* Added `--enable-privately-used-public-ips` flag to `gcloud composer environments create` command to enable using privately used public IP address ranges feature in the GKE cluster.
### Cloud Dataproc
* Added `--properties-file` flag to `gcloud beta dataproc jobs submit`.
### Cloud Deploy
* Fixed `gcloud deploy releases <create|promote>` and `gcloud deploy targets rollback` to support `--format` flag.
### Cloud Functions
* - Added `--trigger-event-filters-path-pattern` flag to `gcloud beta functions
deploy`.
### Cloud Pub/Sub
* Added `--bigquery-table`, `--write-metadata`, `--use-topic-schema`, and
`--drop-unknown-fields` flags to `gcloud pubsub subscriptions create` to set
BigQuery configuration options in Cloud Pub/Sub subscriptions.
* Added `--bigquery-table`, `--write-metadata`, `--use-topic-schema`,
`--drop-unknown-fields`, and `--clear-bigquery-config` flags to
`gcloud pubsub subscriptions update` to update BigQuery configuration
options in Cloud Pub/Sub subscriptions.
### Compute Engine
* Added `22.04` to allowed list of values for `--version` of `gcloud beta compute instances ops-agents policies [create|update]`.
* Promoted `delete` command of `gcloud compute instance-groups managed all-instances-config` to beta.
* Promoted `update` command of `gcloud compute instance-groups managed all-instances-config` to beta.
* Promoted `--region` for `gcloud compute ssl-policies` to beta.
* Promoted `--region` flag for `gcloud compute target-tcp-proxies` to beta.
* Added `--target-distribution-shape` flag to `gcloud compute instances bulk create` to specify shape of distribution in regional bulk insert for alpha and beta.
### Config Connector
* Updated Google Cloud Config Connector to version 1.85.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Eventarc
* Added `gcloud eventarc audit-logs-provider` command group.
### Stackdriver Monitoring
* Promoted `gcloud monitoring metrics-scopes` command group to beta.
### Terraform
* Added support for the following resources in CAI-based policies:
* `google_access_context_manager_access_policy_iam_binding`
* `google_access_context_manager_access_policy_iam_member`
* `google_access_context_manager_access_policy_iam_policy`
* `google_endpoints_service_consumers_iam_binding`
* `google_endpoints_service_consumers_iam_member`
* `google_endpoints_service_consumers_iam_policy`
* `google_privateca_certificate_template_iam_binding`
* `google_privateca_certificate_template_iam_member`
* `google_privateca_certificate_template_iam_policy`
* TF -> CAI resource conversion compiled against [`google` provider version 4.20.0](https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.20.0).
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 386.0.0 (2022-05-17)
### Google Cloud CLI
* Added Cloud SQL OAuth scope to `gcloud auth login`.
### Anthos Identity Service
* Promoted `gcloud container hub identity-service` to GA.
* Promoted `gcloud container fleet identity-service` to GA.
### App Engine
* Promoted `--service-account` flag of `gcloud app deploy` to GA.
### App Engine Flexible Environment
* Promoted `--service-account` flag of `gcloud app deploy` to GA.
### Cloud Build
* Add `--include-logs-with-status` flag to `gcloud triggers create`.
### Cloud Composer
* Improve error message in case of lacking permissions in `gcloud composer environments storage * delete` commands.
### Cloud IAM
* Added `gcloud iam workload-identity-pools create-saml` and
`gcloud iam workload-identity-pools update-saml` commands to manage SAML
workload identity pool providers.
### Cloud Memorystore
* Promoted support for maintenance windows in `gcloud memcache` to GA.
* Promoted the command `gcloud memcache reschedule-maintenance` to GA.
### Cloud Run
* Modified `gcloud run services describe` to include session affinity configuration.
### Cloud SQL
* Changed the prompt generated by `--prompt-for-password` for `gcloud sql users set-password` from `Instance Password:` to `New Password:`, since `set-password` command changes a database user's password, not the instance's password.
* Setting max-login-attempts will also set enable-password-verification to true.
### Compute Engine
* Promoted `--service-bindings` flag of `gcloud compute backend-services create|update` commands to GA.
* Promoted `gcloud compute backend-services add-service-bindings` and `gcloud compute backend-services remove-service-bindings` commands to GA.
* Promoted `--provisioning-model` and `--instance-termination-action` flags of `gcloud compute instances set-scheduling` to GA.
* Promoted sole tenancy flags of `gcloud compute instances update` to GA.
* Added `--network-performance-configs` flag to `gcloud compute instances bulk create`.
* Promoted `--disable-automate-dns-zone` flag of `gcloud compute forwarding-rules create` to GA.
* Promoted `--stack-type` flag to GA for `gcloud compute networks peeerings <create|update>`.
* Added windows-2022 & windows-2022-byol options to `--os` flag for:
* `gcloud compute images import` in GA,
* `gcloud compute instances import` in GA
* `gcloud compute machine-images import` in GA
### Config Connector
* Updated Google Cloud Config Connector to version 1.84.0.
See Config Connector Overview for more details [https://cloud.google.com/config-connector/docs/overview](https://cloud.google.com/config-connector/docs/overview).
### Database Migration
* Updated `gcloud database-migration migration-jobs create` command to create a migration job without any connectivity method (if connectivity isn't specified).
* Added `gcloud database-migration migration-jobs create --static-ip` command to create a migration job with static IP connectivity. This was the default behavior.
* Added `gcloud database-migration migration-jobs update --static-ip` command to update a migration job with static IP connectivity.
### Distributed Cloud Edge
* Added `--clear-maintenance-window` flag to
`gcloud edge-cloud container clusters update` which removes the maintenance
window setting of a cluster.
* Updated `gcloud edge-cloud container clusters node-pools list` to make
specifying a parent cluster optional. When `--cluster` is not specified,
all node pools are listed.
### Managed Active Directory
* Promoted `gcloud active-directory domains backups` and
`gcloud active-directory domains restore` to GA.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 385.0.0 (2022-05-10)
### Google Cloud CLI
* Updated bundled Python executable for Windows to Python 3.9.12.
### AI
* Added `--anomaly-cloud-logging` flag to `gcloud ai model-monitoring-jobs create|update` to allow logging anomaly to Cloud Logging.
### Anthos Multi-Cloud
* Added `--ssh-ec2-key-pair` flag to `gcloud container aws clusters update`
and `gcloud container aws node-pools update` to update the name of the EC2
key pair to login into control plane or node pool nodes.
* Added `--clear-ssh-ec2-key-pair` flag to `gcloud container aws clusters
update` and `gcloud container aws node-pools update` to clear the EC2 key
pair to login into control plane or node pool nodes.
### Cloud Run
* Fixed issue where some commands were missing from `gcloud beta run jobs`.
### Cloud SQL
* Added `--enable-password-policy` flag to `gcloud sql instances create` and
`gcloud sql instances patch` for GA.
### Compute Engine
* Promoted `--key-revocation-action-type` flag to beta for `gcloud compute instance-templates create`.
* Promoted `keyRevocationActionType` flag of `gcloud compute instances update-from-file` to beta.
* Added `FIXED_STANDARD` to allowed list of values for `--default-network-tier` flag.
### Config Controller
* Updated output of `gcloud anthos config controller create` to not include
the default Config Connector identity upon creation.
### Eventarc
* Added `gcloud eventarc channels` group to interact with third-party sources.
* Added `gcloud eventarc channel-connections` for event providers to create association with the user channel.
* Added `--channel` argument to `gcloud eventarc triggers create` to specify associated channel.
### Network Services
* Promoted `gcloud network-services service-bindings` to GA.
Subscribe to these release notes at [https://groups.google.com/forum/#!forum/google-cloud-sdk-announce](https://groups.google.com/forum/#!forum/google-cloud-sdk-announce).
## 384.0.1 (2022-05-05)
### Cloud Storage
* Updated gsutil component to 5.10. Google Cloud CLI version 384.0.0 included an older gsutil component (version 5.6) in deb, rpm,
and snap packages. Version 384.0.1 includes gsutil component version 5.10 in the deb, rpm, and snap packages.
## 384.0.0 (2022-05-03)
### Cloud Datastore Emulator
* Adds `--use-firestore-in-datastore-mode` flag to `gcloud [alpha|beta] emulators datastore start` command.
### Cloud Resource Manager
* Promoted `--condition` flag to GA for the following commands:
* `gcloud resources-manager tags keys <add_iam_policy_binding|create|delete|describe|get_iam_policy|list|remove_iam_policy_binding|set_iam_policy|update>`
* `gcloud resources-manager tags values <add_iam_policy_binding|create|delete|describe|get_iam_policy|list|remove_iam_policy_binding|set_iam_policy|update>`
* `gcloud resources-manager tags bindings <create|delete|list>`
* `gcloud resources-manager tags holds <create|delete|list>`
### Cloud Run
* Promoted `gcloud beta run jobs` command group and all sub-commands to beta.
### Cloud Storage
* Updated gsutil component to 5.10.
### Compute Engine