ST-2026-149 · SDKs, clients & toolchains
Google Cloud CLI 577 deprecates CSEK-related compute flags
Google Cloud CLI 577.0.0 deprecated six customer-supplied encryption-key flags across gcloud compute commands without publishing a removal version or date.
Previous state
Compute automation could rely on the named CSEK key-file and source-key flags without a deprecation notice in the CLI release notes.
Current state
Release 577.0.0 marks --csek-key-file, --require-csek-key-create, --source-machine-image-csek-key-file, --source-disk-csek-key, --source-disk-key-file and --source-instant-snapshot-key-file deprecated.
Affected users
Who needs to care
Scripts and operational tooling that supply customer-managed key material through the six named gcloud compute flags.
Required response
What to do
Inventory use of the named flags, follow Google Cloud replacement guidance as it becomes available and avoid assuming an unstated removal deadline.
Evidence boundary
What the source does not prove
The release note establishes deprecation only for the six named flags and does not state removal, disablement or a replacement date.
Lifecycle history
Dated event sequence
- CSEK flags deprecated
Google Cloud CLI 577.0.0 marked the six compute flags deprecated.
Evidence ledger
First-party sources
- 01Google Cloud — Google Cloud CLI release notes — 577.0.0
Official CLI release notes · 2026-07-21
Open official source ↗