Google Cloud CLI 566.0.0 is now available

[google-cloud-sdk-announce]

Hi all,

Google Cloud CLI 566.0.0 is now available for download at:
https://developers.google.com/cloud/sdk/

Release notes can be found here:
https://cloud.google.com/sdk/docs/release-notes

 ## 566.0.0 (2026-04-28)

### Google Cloud CLI

* Made `gcloud-man-pages` component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using `--help` flag.

### AI

* Fixed region choice for custom weights deployment in `gcloud ai model-garden models deploy`.

### AI Platform

*   Added `gcloud beta ai semantic-governance-policies` command group.
    Commands in this group allow users to manage natural-language governance
    policies for their agents and tools in Agent Registry. For more information,
    see Configure semantic governance policies (https://docs.cloud.google.com/gemini-enterprise-agent-platform/govern/policies/configure-semantic-governance).

*   Added `gcloud beta ai semantic-governance-policy-engine` command group.
    Commands in this group allow users to manage the semantic governance policy
    engine configuration in Vertex AI.

### AlloyDB

* Promoted `--backupdr-backup-plan` flag for `gcloud alloydb clusters create` to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.

### Apigee

* Added support for DRZ endpoints for US, IN and EU region.

### App Engine

* Updated the Java SDK to version 5.0.1 build from the open source project
  <https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.1>.

### App Lifecycle Manager

*   Added Application Design Center integration flags to
  `gcloud app-lifecycle-manager` commands.
*   Added `--application-template`, `--application-template-revision`, and
  `--clear-application-template` flags to `gcloud app-lifecycle-manager saas
  create` and `update` to manage Application Templates.
*   Added `--app-params-group`, `--scope-type`, and `--clear-app-params` flags
  to `gcloud app-lifecycle-manager unit-kinds create` and `update` to manage
  Application parameters.
*   Added `--application` and `--clear-application` flags to
  `gcloud app-lifecycle-manager units create` and `update` to manage
   Application references.
*   Added `gcloud beta app-lifecycle-manager flags` command group to support
  Feature Flags.

### Assured Workloads

* Added `SPAIN_DATA_BOUNDARY_BY_TELEFONICA` as option for `--partner` for `gcloud assured workloads create`.

### Certificate Authority Service

* Added `--filter` flag to `gcloud privateca root list`. The flag is able to allow filtering results based on specified boolean expression.

### Cloud Backup DR

* Promoted `gcloud backup-dr` to beta.

### Cloud Bigtable

* Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726, CVE-2026-34986, CVE-2025-58181, and CVE-2026-24051.

### Cloud Dataflow

* Added `--launcher-vm-timeout-secs` flag to
  `gcloud dataflow flex-template run` command, allowing users to
  configure the timeout duration for the launcher VM.

### Cloud Dataplex

* Added `gcloud dataplex entries modify` command.
* Added `--use-user-credential` and `--service-account` flags to `gcloud dataplex datascans create data-quality` command.

### Cloud Dataproc

*   Removed legacy `--tier` flag from `gcloud dataproc clusters create`. Please
    use the new flag `--engine` to create clusters with Lightning Engine or the
    default engine.

### Cloud Firestore

* Added `--concurrency-mode` flag to `gcloud firestore databases create` and `gcloud firestore databases update` commands to allow configuring the concurrency control mode of a Firestore database.
* Added `--expiration-offset` flag to `gcloud firestore fields ttls update` (when used with `--enable-ttl`) to allow an offset to be specified when updating TTL configuration.

### Cloud Key Management Service

*   Updated `gcloud kms single-tenant-hsm create` to include
    `--key-portability-enabled` flag, allowing users to allow instances to use
    key portability features.

### Cloud Logging

* Added `list` command to `gcloud logging recent-queries`.
* Added `create`, `delete`, `describe`, `list`, and `update` commands to `gcloud logging saved-queries`.

### Cloud NetApp

* Added `--cross-project-vault` to `gcloud beta netapp backup-vaults create`.

### Cloud Run

* Fixed an issue where GPU zonal redundancy setting is not cleared when
  `--gpu=0` flag is specified to clear GPU settings.

### Cloud SQL

*   Updated 'cloud-sql-proxy' packaged component to use 2.21.3 of the Cloud SQL
 Proxy.

### Cloud Storage

* Updated `gcloud-crc32c` with latest version of golang `go1.26.2`.

### Cloud Workstations

* Added `--enable-http2` flag to `gcloud workstations cluster create` command.
* Added `--enable-http2` and `--no-enable-http2` flags to `gcloud workstations cluster update` command.

### Compute Engine

* Promoted `service-class-id` sub-argument of `--network-interface` flag on `gcloud compute instances create` to GA.
* Promoted `service-class-id` sub-argument of `--network-interface` flag on `gcloud compute instance-templates create` to GA.
* Promoted `--service-class-id` flag on `gcloud compute instances network-interfaces add` to GA.
*   Promoted `gcloud compute health-sources get-health` and `gcloud compute composite-health-checks get-health` to beta and GA.
*   Removed client-side validation for `--disk's size` field in `gcloud compute sole-tenancy node-templates create`. The API will now perform server-side validation for disk size.
* Promoted flags related to in-flight balancing to v1:
   - `--max-in-flight-requests` of `gcloud compute backend-service create`.
   - `--max-in-flight-requests-per-instance` of `gcloud compute backend-service create`.
   - `--max-in-flight-requests-per-endpoint` of `gcloud compute backend-service create`.
   - `--traffic-duration` of `gcloud compute backend-service create`.
   - `--max-in-flight-requests` of `gcloud compute backend-service update`.
   - `--max-in-flight-requests-per-instance` of `gcloud compute backend-service update`.
   - `--max-in-flight-requests-per-endpoint` of `gcloud compute backend-service update`.
   - `--traffic-duration` of `gcloud compute backend-service update`.
* Promoted `--resource-manager-tags` flag for `gcloud compute future-reservations create` to beta and GA.
* Promoted `gcloud compute rollouts` commands to GA.
* Promoted `gcloud compute rollout-plans` commands to GA.
* Promoted `cachePolicy` support for `gcloud compute url-maps` to GA.
* Promoted `gcloud compute instant-snapshot-groups create` to GA.
* Promoted `gcloud compute instant-snapshot-groups delete` to GA.
* Promoted `gcloud compute instant-snapshot-groups describe` to GA.
* Promoted `gcloud compute instant-snapshot-groups list` to GA.
* Promoted `gcloud compute disks bulk create` to beta.
* Added `--identity`, `--identity-certificate` and `--most-disruptive-allowed-action` flags to `gcloud compute instances update` in alpha.
* Promoted `--discard-local-ssd` flag on `gcloud compute instances update-from-file` to beta and GA.
* Promoted `gcloud compute disks bulk create` to GA.

### GKE Hub

*   Added support for `container/use_application_default_credentials` property
    in `gcloud container fleet memberships get-credentials`. When set to true,
    generated kubeconfig includes `--use-application-default-credentials` flag
    for `gke-gcloud-auth-plugin`.

### Kubernetes Engine

* Promoted `--enable-pod-snapshots` and `--disable-pod-snapshots` flags of
  `gcloud container clusters create` to GA.
* Promoted `--control-plane-egress` flag of `gcloud container clusters create`
 command and `gcloud container clusters update` command to GA.
* Added `--subnetwork` flag to `gcloud container node-pools create`.
* Add `--enable-autoprovisioning` to `gcloud container clusters create|update`
commands to support configuring auto-provisioning settings without enabling NAP.
* Updated default kubectl from 1.34.6 to 1.35.3.
* Additional kubectl versions:
  * kubectl.1.30 (1.30.14)
  * kubectl.1.31 (1.31.14)
  * kubectl.1.32 (1.32.13)
  * kubectl.1.33 (1.33.11)
  * kubectl.1.34 (1.34.7)
  * kubectl.1.35 (1.35.4)

### Network Services

* Added AgentGateway support in beta.

### Privileged Access Manager

* Added `--scheduled-activation-time` flag to `gcloud beta pam grants create` to support scheduled activation times for grants.

### Security Command Center

* Added `gcloud scc sources list` command to list Security Command Center sources.


Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.