Thanks for laying out all the possibilities here.

If ❓ ️means that only authorized IP ranges will get access, what does point no 5. "Cloud Shell: ❓" mean in the "Private clusters + Authorized networks" section? How do we authorize IP ranges of Cloud Shell?